Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68f606d7-7a21-37c3-8bee-b17bbc6e37ee.roa
File:                     68f606d7-7a21-37c3-8bee-b17bbc6e37ee.roa (raw, json)
Hash identifier:          kJvzSvpJV9lby7Vthpor7Ad/A/H2ETwCc6CHhn+Fhzk=
Subject key identifier:   56:3D:7B:1B:B3:C2:51:4E:CD:8E:84:E5:94:04:F9:78:FC:E3:44:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D492A7B859AA0DF4D74DE6580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68f606d7-7a21-37c3-8bee-b17bbc6e37ee.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     396606
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:7b:85:9a:a0:df:4d:74:de:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=71dac9ad-1cc7-41d7-a00b-17ba5d7afd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:0d:30:46:f2:d9:01:b4:cd:92:35:33:de:
                    0b:ec:73:d3:61:d0:e5:a2:ed:02:23:39:93:cf:75:
                    3a:59:aa:f2:16:81:00:48:b3:0e:2b:bf:2b:b4:a6:
                    08:56:31:b3:84:ef:58:ea:cc:80:fe:9a:d4:b6:96:
                    31:1a:78:e5:1f:c3:38:e1:12:13:a0:73:c5:21:59:
                    6e:8d:8c:64:84:69:75:95:16:34:6d:53:6e:22:c2:
                    cd:5e:e9:59:88:fd:54:38:5b:50:dd:2c:51:51:ac:
                    84:84:a6:fc:02:98:5c:c5:e3:76:9a:4e:7b:eb:cf:
                    9f:b3:4d:ce:a2:cb:5e:78:6d:bb:1e:76:ac:e3:9a:
                    f2:7f:36:af:84:ce:82:f3:d6:e4:88:e6:75:91:41:
                    63:60:f7:cc:e1:22:d1:2d:80:35:bd:da:c1:8a:04:
                    94:72:29:12:05:ec:fc:5c:d6:67:45:ec:d8:fe:97:
                    93:ca:24:6e:cc:5e:1c:b0:a2:03:57:e7:f3:bb:88:
                    99:20:44:a8:4e:5c:6a:3b:bf:dd:55:85:9c:56:f6:
                    76:64:69:14:b3:9c:70:d6:ee:06:9b:de:13:6d:5d:
                    ac:57:fc:e2:52:a0:a3:c3:73:80:3e:25:03:f1:ca:
                    99:fd:f1:63:fd:4d:8d:d6:39:14:20:c1:8f:89:fd:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3D:7B:1B:B3:C2:51:4E:CD:8E:84:E5:94:04:F9:78:FC:E3:44:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68f606d7-7a21-37c3-8bee-b17bbc6e37ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:48:ae:b9:a2:97:d7:01:db:48:34:77:fe:4d:76:9e:94:fc:
         f5:7a:09:07:a9:54:10:cf:26:25:90:2a:3a:9e:6c:00:97:06:
         68:72:f5:9b:66:4c:0e:a6:5f:60:03:53:96:8d:94:b3:f4:a1:
         ac:3b:ad:4d:99:d9:96:44:94:77:c7:2c:ab:e2:d9:be:82:38:
         a7:d7:be:92:ad:44:40:c7:0a:2b:66:80:4e:e9:ea:79:dd:23:
         da:ca:f9:7c:8c:c0:5d:e3:f8:6e:0d:b1:bc:b1:eb:3f:99:c8:
         65:94:ce:90:c6:68:b6:fd:84:9f:16:de:56:0c:1b:d9:ee:26:
         4d:c8:08:fd:a4:ce:f2:1c:5e:74:f6:3d:57:11:9f:4d:bc:e5:
         41:f7:dd:34:a0:d0:ba:73:a3:37:07:02:13:7b:ae:e0:58:29:
         14:3a:85:e9:b6:8b:dc:df:e1:49:0b:f6:f3:e3:79:f4:fb:c3:
         eb:4a:c7:de:fc:c1:42:e8:bd:c3:97:7d:55:63:ac:da:fb:26:
         df:73:e6:84:56:7e:33:ea:89:d1:9b:41:4c:b4:96:bf:10:4d:
         36:5e:d5:b4:1e:f9:3b:a7:28:61:c0:35:43:40:13:96:a2:db:
         60:be:6e:79:44:d0:bf:fd:5d:5d:4c:d7:c1:9a:cc:06:22:42:
         01:20:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:33:04 2026 by rpki-client