Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa
File:                     33383e35-cfc9-334b-848e-ad7ba56090f1.roa (raw, json)
Hash identifier:          S1f/bivUSzC+pnXxkY/yCI4s6UAv2wQjLdI+QsaWuC0=
Subject key identifier:   74:F2:00:4A:46:FF:CD:D6:C1:C8:32:19:2C:8A:25:A4:37:97:60:C7
Certificate issuer:       /CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
Certificate serial:       010D0C9F4328584E3A2F2B4886F8825F90502500
Authority key identifier: 4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     55179
IP address blocks:        198.168.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:2b:48:86:f8:82:5f:90:50:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=c0a81b41-f15c-41b0-ac48-1dc0b1dddd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:29:ce:0f:b4:e8:09:b1:7e:85:73:92:d1:
                    17:5a:08:1c:4a:ec:e3:93:7d:f6:9f:fb:e0:fd:db:
                    65:2f:70:f8:ac:b2:74:f7:43:a9:2b:8f:a1:60:7e:
                    27:6e:f0:e4:a6:b3:bf:d8:af:01:67:48:69:2c:43:
                    f2:97:42:bf:49:fd:91:a4:a2:5b:d1:09:3f:4d:06:
                    b2:43:67:f0:e8:b0:12:d0:8a:fb:bb:7a:9d:b5:b7:
                    34:8d:0a:f4:14:1a:47:82:04:03:49:8d:32:83:61:
                    57:04:7f:63:d9:4e:a3:ce:21:b9:28:e5:1f:d4:5b:
                    6d:20:82:87:b4:91:8e:3c:c6:5d:50:47:07:1e:88:
                    2d:7d:29:b4:0b:45:73:ca:bd:3c:92:5b:b7:b5:6b:
                    86:13:0e:86:2d:19:1e:6d:37:72:d8:a5:f0:f1:2b:
                    11:1a:d4:6c:7f:fb:a0:b2:a4:63:9e:ea:db:7b:75:
                    4b:86:5f:6b:eb:54:06:2f:97:d7:9f:ca:77:23:ab:
                    65:d0:ec:72:05:5d:e9:e8:ab:9c:da:b8:92:27:df:
                    60:cc:7e:5d:6a:c1:05:a6:b8:7e:e1:ee:8b:a4:0b:
                    bb:d3:d3:f2:41:9e:d8:c8:ca:81:94:08:5f:6a:25:
                    5d:1b:2f:09:b9:81:28:05:b8:78:01:fc:f5:b0:b6:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:00:4A:46:FF:CD:D6:C1:C8:32:19:2C:8A:25:A4:37:97:60:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.crl

            X509v3 Authority Key Identifier:
                keyid:4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:25:7d:0b:07:f4:76:b7:b7:88:53:9b:49:49:03:cf:d8:b3:
         c7:7f:07:52:99:4c:15:dd:d4:ab:cb:5f:1f:c0:5e:bf:08:4b:
         33:b3:6e:f1:fd:ce:83:e0:2a:23:80:e8:a3:82:c6:d8:95:29:
         e0:3a:96:15:0f:e2:e9:fa:79:9f:55:54:25:b9:78:d0:60:f8:
         a7:ff:70:29:49:70:e7:4b:1c:dc:cc:95:70:7e:38:0c:a0:3b:
         b0:fa:b9:e5:1a:e7:fb:e1:b9:83:49:2c:87:21:c0:93:a6:a9:
         c5:2c:b5:e2:9d:0c:5b:5d:8f:7d:cc:4b:b9:3b:74:a3:51:69:
         84:a5:c6:f4:c6:d3:7d:12:08:93:7b:0f:0a:f4:3f:a0:8f:c2:
         55:14:26:d4:8e:d1:e7:c2:96:c9:ff:2c:5b:b6:d4:66:03:0f:
         4a:75:e9:3c:40:ea:8b:bc:0a:86:65:2a:90:ab:fe:80:a6:c3:
         e6:df:b7:1f:10:18:57:e9:b6:a3:93:e6:f6:58:38:fd:06:32:
         1f:5f:5d:fa:f0:a8:8e:e4:08:56:11:34:ac:23:1b:d1:23:34:
         9b:d1:6d:f1:fd:7a:d8:34:54:2c:59:28:71:57:a2:e5:83:85:
         64:6e:00:37:3e:b5:9c:54:7c:98:ee:a0:68:12:6e:55:26:ab:
         df:e4:a6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:58:46 2026 by rpki-client