Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/359cd4f0-7530-396a-84f3-d7e0e712bdef.roa
File:                     359cd4f0-7530-396a-84f3-d7e0e712bdef.roa (raw, json)
Hash identifier:          LizHzN+KhfQy2fD7TyCXCfdQuTw/9BU4Sz39MKWKnRY=
Subject key identifier:   7F:17:70:81:53:0F:8E:5C:55:EA:23:17:D6:C4:9C:1C:51:2A:52:FC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D9228E58C501526BF627D4C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/359cd4f0-7530-396a-84f3-d7e0e712bdef.roa
Signing time:             Mon 20 Apr 2026 16:32:00 +0000
ROA not before:           Mon 20 Apr 2026 16:32:00 +0000
ROA not after:            Sun 19 Jul 2026 16:32:00 +0000
asID:                     395470
IP address blocks:        198.20.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:28:e5:8c:50:15:26:bf:62:7d:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 16:32:00 2026 GMT
            Not After : Jul 19 16:32:00 2026 GMT
        Subject: CN=17d64ef4-8f82-4349-a877-c921e168588c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:99:1c:a5:b0:31:91:bd:1d:ce:4a:2b:ba:ab:
                    45:26:25:e3:07:59:c6:6e:7f:a8:dc:78:d1:67:ce:
                    9e:10:bc:71:24:ec:94:5b:6b:97:a5:35:4b:27:b2:
                    82:f0:89:d0:b0:0f:f3:38:60:dc:61:45:b9:ef:86:
                    7b:50:af:eb:0f:be:d5:15:e2:8d:d0:d6:c7:30:08:
                    b6:60:8e:49:84:a1:a6:83:bf:f8:1a:dc:c2:62:f4:
                    41:e4:79:ba:55:8a:59:17:23:24:b5:02:15:5f:05:
                    18:79:69:29:df:1b:51:b3:07:89:03:e1:fc:8d:c4:
                    d9:d9:49:33:dd:b0:72:70:b5:99:6e:ef:78:d6:5a:
                    0f:1f:39:12:d7:28:6f:df:cd:cb:de:43:8c:47:05:
                    8e:a5:57:57:fb:a2:c2:cd:1e:9e:05:f2:eb:c8:44:
                    e0:af:67:c4:53:f3:97:05:24:fe:03:07:33:eb:26:
                    73:c1:97:47:50:10:e7:ef:17:c7:31:ab:b2:01:7e:
                    22:b3:6b:b1:a5:b2:67:e1:b1:e2:a8:7d:d7:c5:14:
                    51:a5:77:47:2c:e9:d0:d7:c8:49:f4:4d:1b:5f:a9:
                    27:1f:09:58:c7:db:ce:75:b5:99:a3:4d:7c:29:82:
                    e2:ad:bc:e9:db:fc:96:27:30:35:88:06:50:0c:ae:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:17:70:81:53:0F:8E:5C:55:EA:23:17:D6:C4:9C:1C:51:2A:52:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/359cd4f0-7530-396a-84f3-d7e0e712bdef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:38:75:c2:ab:b4:a3:81:74:31:eb:eb:74:c6:df:a2:b1:06:
         25:af:9a:03:9f:6c:53:b4:ef:3b:04:47:ba:d6:fd:a8:b4:4d:
         f8:9c:09:d4:3d:dd:cb:52:5c:9d:d7:cc:6b:f6:4c:59:f4:e5:
         95:2d:6d:5e:cf:8f:2f:ed:b8:e7:a0:64:29:c7:a1:da:3a:49:
         29:35:49:f8:ca:e2:ae:93:b0:46:81:16:2c:6e:b2:37:12:54:
         cb:c1:03:1a:3a:dc:1a:0d:8c:24:6c:50:63:3e:c7:88:ba:b0:
         e5:78:4d:64:76:c6:dd:5c:3d:9c:fa:07:ec:e4:d8:16:f8:0b:
         d9:d6:c1:35:32:06:7c:c3:20:73:2b:4d:df:5f:46:14:c2:4c:
         ea:82:77:71:52:18:4e:52:b9:1c:22:1d:ba:55:59:7f:e1:ba:
         9e:62:a3:f0:55:71:0f:b3:d5:53:eb:60:5a:5b:0a:ba:91:13:
         a9:ef:88:d6:41:d4:04:40:5a:4c:57:04:14:67:dc:79:57:f3:
         f6:2e:dc:20:8c:13:04:cd:53:9e:00:7d:cf:5e:e7:df:d1:c6:
         2c:68:4b:78:3f:a1:e0:68:63:8c:45:27:c3:b8:4f:ad:4f:7e:
         23:97:98:58:b2:9d:b9:bc:77:b1:dc:ec:fd:f3:8a:42:26:d0:
         45:81:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:11 2026 by rpki-client