Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa
File:                     e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa (raw, json)
Hash identifier:          1on4RJ1+Br8q/YfgkVZYcUj7L6lqxI3Zmxyh1UIfqdI=
Subject key identifier:   8B:2E:6B:FB:96:CD:91:65:94:CB:63:D1:8C:3B:F4:91:2D:02:3D:5D
Certificate issuer:       /CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
Certificate serial:       010D0C9F4328584D237A2C7504B9472691CA0FC0
Authority key identifier: 71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     15296
IP address blocks:        198.161.120.0/24 maxlen: 24
                          198.161.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:2c:75:04:b9:47:26:91:ca:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=bfde8e76-aa2f-4d7a-b9b2-8e7ccbe72f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:15:cf:08:27:ad:4e:ea:7c:f2:a7:61:fa:
                    22:ce:0e:dd:69:8d:33:23:b1:b4:55:4c:aa:9b:2b:
                    88:74:c6:47:61:ab:1c:f9:53:51:15:e7:75:c0:ef:
                    04:a5:bd:c6:ac:67:fb:1a:b5:74:06:8d:a4:cb:88:
                    ad:11:51:ea:0c:59:1b:78:a8:67:70:2a:e2:bf:56:
                    eb:3d:0c:77:c9:9d:2e:ea:79:08:0b:ec:ce:f9:8a:
                    47:ec:ce:9d:3d:ca:98:7b:71:ad:10:3b:0c:25:e9:
                    34:05:57:15:dc:10:ee:8b:51:5b:0d:99:1d:48:7e:
                    a4:54:99:92:bf:c3:05:83:58:f4:47:0f:d3:da:35:
                    ad:5b:be:70:9f:1e:55:c0:e0:c9:71:b4:24:1f:af:
                    26:d5:b1:9b:d9:cb:5c:10:4d:b0:b9:2e:df:fb:92:
                    70:79:f6:64:20:59:0e:df:41:ef:10:46:81:1b:7d:
                    db:ed:e3:83:f8:1c:88:b9:8e:4f:d7:21:56:7a:bb:
                    1b:6b:ab:06:6d:b9:c4:ca:fa:98:8e:a4:a4:4c:d2:
                    9e:b4:11:22:cc:b3:0a:13:4e:08:59:66:5c:88:80:
                    f4:8d:79:d5:a2:c3:90:e1:72:ac:f3:b0:9b:3b:19:
                    09:33:5e:58:65:9b:ad:95:27:d0:97:4b:42:b4:28:
                    7c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2E:6B:FB:96:CD:91:65:94:CB:63:D1:8C:3B:F4:91:2D:02:3D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl

            X509v3 Authority Key Identifier:
                keyid:71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:59:11:02:1d:8a:76:e8:7e:9e:31:a1:89:57:79:95:95:c4:
         52:5c:85:c1:23:d7:e2:31:7e:59:95:51:95:7b:f8:98:94:bf:
         12:6b:56:39:bd:01:3b:9a:12:0f:1a:33:83:42:05:a8:64:8e:
         c9:3f:91:83:10:8d:26:1d:f9:48:89:11:88:09:5f:9a:f8:f4:
         ae:9f:de:38:8f:f6:9d:cc:f7:15:17:cb:55:97:95:46:11:74:
         3f:80:40:62:a9:6c:fd:a8:f8:9b:ef:f5:f4:63:58:fe:85:0d:
         06:bf:94:93:90:7f:58:ab:b0:17:07:2a:4c:21:88:ba:5a:c3:
         70:23:fd:f7:80:ae:cd:a6:a8:97:02:90:3c:98:88:da:db:ab:
         c1:98:ba:fd:da:af:79:12:6a:e4:a5:e6:0e:47:d0:a5:3c:5f:
         e0:9c:99:0f:d9:4a:96:be:f7:8b:d6:0c:87:92:a2:ed:95:55:
         7e:5c:36:0f:9b:34:0a:2f:3f:61:19:5d:25:3c:2b:a5:33:e4:
         3f:ea:a2:64:a8:bf:78:c6:34:8c:1d:4d:53:57:dc:8a:7b:d4:
         8e:3f:90:6f:1f:e6:41:9c:2d:37:5c:92:45:73:9c:09:7a:72:
         51:1f:bc:69:a4:c4:e2:28:cb:3d:40:5f:5c:6f:de:9f:e0:fc:
         ea:68:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:17:14 2026 by rpki-client