Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/18e84ae5-8226-32f3-8695-303a41046dd3.roa
File:                     18e84ae5-8226-32f3-8695-303a41046dd3.roa (raw, json)
Hash identifier:          nqm3W6B/Dr9Yb7ax6s4zeJCjWK74msBe8KI9DkDgfcY=
Subject key identifier:   34:90:3D:42:C3:51:E5:B4:33:FE:26:70:65:E5:13:5D:E9:C9:D3:41
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584E4AEF5042FC6D8580E9E72700
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/18e84ae5-8226-32f3-8695-303a41046dd3.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        199.167.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:50:42:fc:6d:85:80:e9:e7:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=d2b2cbc1-086a-4698-bf89-e9316580eb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:29:72:39:70:1d:34:1d:8c:76:69:9b:f4:
                    a1:fd:47:bc:8e:62:03:f8:80:31:42:49:a2:33:db:
                    5e:2b:58:52:03:86:1d:e2:06:cf:bd:25:5a:a6:b7:
                    c0:40:d8:9e:33:83:71:2d:5d:97:51:02:a0:b7:aa:
                    09:35:bd:5e:b9:54:9c:26:92:d4:a1:3c:03:a5:ba:
                    73:28:92:48:62:e5:4e:bf:e7:00:45:d7:8d:fe:42:
                    9b:e3:b9:0a:c0:84:60:07:63:d3:c5:e2:f4:a9:23:
                    42:a8:7f:24:aa:5f:5d:7e:43:25:09:77:8e:77:0e:
                    6d:f6:10:af:5c:56:02:dd:02:bc:45:c5:22:d3:7d:
                    5b:a4:a7:42:44:2a:fd:d5:b4:aa:97:ac:44:09:54:
                    d2:75:de:1d:b3:1b:b2:46:af:11:33:4e:3f:58:ab:
                    d3:6f:f1:ad:34:ac:e6:16:7c:8f:36:fd:34:ee:db:
                    0d:3f:2b:40:14:4c:82:04:8f:d2:a8:fa:d3:f1:ec:
                    44:0c:50:d0:c6:2b:8d:24:78:dd:d0:fa:d9:d8:54:
                    9e:60:c8:3d:5a:3e:8e:8a:46:5c:68:67:1f:db:87:
                    1f:4f:6b:88:19:81:6a:c4:48:4c:01:36:1b:6c:b3:
                    fd:39:50:88:e5:5e:fb:83:aa:02:09:36:f3:39:25:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:90:3D:42:C3:51:E5:B4:33:FE:26:70:65:E5:13:5D:E9:C9:D3:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/18e84ae5-8226-32f3-8695-303a41046dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:dc:73:e5:61:d4:44:09:06:f5:cd:f1:37:dd:7e:aa:7d:8b:
         50:c2:b3:b9:13:e0:7f:67:e3:ef:38:64:a8:51:11:eb:f5:cc:
         aa:fe:db:4c:c8:4d:aa:ed:ce:d9:15:bb:83:46:33:95:69:0d:
         80:d8:34:e8:6d:09:b7:2c:21:91:cd:29:8f:e9:38:fd:c4:7d:
         ac:85:bd:e5:7d:4b:7b:3e:a7:89:55:64:4d:5c:2d:be:da:cd:
         39:eb:ad:ae:78:39:7a:9f:9f:5c:f8:ad:6b:88:56:31:36:c1:
         38:0a:99:f7:84:ce:ba:1d:c1:b1:b3:b1:86:25:1e:66:33:d3:
         cf:85:66:a0:4a:4e:59:1f:ad:2e:b7:f0:6e:06:a1:97:f5:0c:
         9c:0e:1b:37:67:f9:5f:72:c0:95:f8:3d:36:0c:47:f0:0f:18:
         8b:d8:19:d3:31:0b:ad:df:33:25:c4:20:ce:22:a3:ed:24:e4:
         6c:c0:27:3b:11:23:48:45:22:bc:52:e7:79:82:7a:b6:6a:15:
         7a:7a:18:9d:5a:83:c7:ed:da:0a:0c:64:30:c9:01:6c:81:56:
         e4:2f:c4:35:3a:82:c1:44:53:1d:71:62:7a:5d:a4:fc:f8:9a:
         8b:f8:d8:24:f9:e1:19:71:ba:ee:b6:e3:39:03:ff:12:22:a0:
         55:fe:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:21 2026 by rpki-client