Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58ceadfa-7b3b-34b8-87c5-8e8526c7b2b9.roa
File:                     58ceadfa-7b3b-34b8-87c5-8e8526c7b2b9.roa (raw, json)
Hash identifier:          zop15G7cOlZZ+OzvgiNUt+n8QQqXBSHdU9Z0wzSg1Gg=
Subject key identifier:   7C:17:13:75:6D:2A:6E:0E:F7:AC:42:AF:B6:1B:35:A2:F9:73:79:6C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5A4A0FA94298E906BCE47D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58ceadfa-7b3b-34b8-87c5-8e8526c7b2b9.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     132892
IP address blocks:        198.41.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:0f:a9:42:98:e9:06:bc:e4:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=6bfeba28-a68f-45c9-b412-884c12ac4a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:22:9a:3e:36:be:03:69:c7:63:37:da:65:
                    f5:bb:f3:48:18:f3:bf:85:75:16:c5:d4:57:bb:f3:
                    9e:eb:53:31:8c:f0:f3:e2:42:9a:e3:0e:68:34:2c:
                    74:66:a6:61:ac:b2:f5:8a:ae:da:b7:e0:96:a9:ac:
                    1e:30:44:e0:e7:89:7b:d6:99:c8:07:eb:f8:90:83:
                    9c:27:6a:2f:fb:79:35:e8:1e:27:3a:b2:72:23:b0:
                    07:c8:3e:e7:a0:30:22:c7:40:e3:19:c1:1f:b7:2e:
                    16:21:58:29:b6:03:10:db:b3:42:89:79:47:a9:53:
                    d3:c6:76:d6:b4:6f:46:16:06:91:b3:c1:e3:8f:a6:
                    66:45:ab:59:c8:98:9c:0f:ef:d8:81:8b:63:67:84:
                    74:60:e3:45:23:b5:cb:47:ff:7c:bc:cb:fa:9a:4d:
                    4f:ff:64:69:44:92:20:c9:5b:51:ab:a2:af:ed:d1:
                    07:b3:40:e5:43:41:d8:b6:78:60:3a:5b:20:ed:16:
                    41:8a:fc:f7:23:4b:b2:19:13:80:18:97:88:9f:98:
                    50:8d:91:32:13:7d:73:5a:35:b6:17:b6:b3:20:3d:
                    0b:4b:17:92:c8:65:f3:aa:fe:d3:63:a8:6e:ed:37:
                    aa:1f:90:e7:2f:9b:c4:3a:59:f5:a2:eb:da:d0:5a:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:17:13:75:6D:2A:6E:0E:F7:AC:42:AF:B6:1B:35:A2:F9:73:79:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58ceadfa-7b3b-34b8-87c5-8e8526c7b2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1f:d5:2b:ff:a0:71:f2:c3:26:42:c3:30:60:8b:56:ae:34:
         04:20:a8:0b:cb:24:8d:33:2e:be:7e:54:81:c2:fd:39:8e:9f:
         7d:7e:f4:17:8d:1a:fa:86:44:b2:19:11:58:3d:c4:92:b7:e5:
         8b:3a:d7:9e:90:01:43:56:df:1b:9f:e8:d4:bb:fc:4f:8b:25:
         80:97:07:34:a3:ce:aa:6a:b3:22:11:e7:30:50:d5:6b:40:c7:
         68:22:c7:78:bf:5d:d5:da:79:8c:b7:8c:cf:e4:8d:d5:7b:7a:
         ff:98:7d:d5:7f:cd:8b:74:df:9a:e0:ca:ad:69:11:55:f0:f0:
         e0:97:78:a7:fb:e8:d5:01:c1:a1:fd:42:5e:8b:e7:25:98:8d:
         d8:c0:9a:b3:04:b5:3f:f9:d4:21:ea:19:1b:6a:7e:73:f9:ac:
         a6:8b:ea:9b:a6:c3:61:ae:40:96:0d:15:de:6d:f9:7b:1f:c4:
         58:e2:65:1f:42:13:41:a0:16:bf:55:2c:cd:76:5b:c6:49:36:
         77:2b:38:25:34:01:a9:a8:22:dd:40:de:ea:c9:51:78:50:c3:
         98:3e:1d:e3:04:8f:1e:fe:42:db:e3:1c:eb:c1:01:4b:38:d2:
         ec:51:5a:35:82:9a:60:22:4e:46:3a:9b:19:14:17:4f:30:da:
         31:b9:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:28 2026 by rpki-client