Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa
File:                     cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa (raw, json)
Hash identifier:          GwHNR7ia0ZpwDxs3a+c4S9y7g+8J4BCwDBDLSlbOFFI=
Subject key identifier:   62:8B:D2:F6:F1:27:76:D4:FD:A8:25:CE:45:39:2C:32:C6:14:05:87
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584DCAFB0B3C7FDBD61197E949C0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     109
IP address blocks:        198.133.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0b:3c:7f:db:d6:11:97:e9:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=ec5b82fb-5c79-42ad-bb88-a389b6170404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:42:d1:b7:8c:70:9d:a0:c1:c8:c6:e0:30:
                    0d:ae:bb:78:4e:57:9c:41:d8:29:5d:d3:83:16:3e:
                    2d:4f:a2:3a:a8:c0:35:db:6c:c5:b5:f8:4c:7e:77:
                    ff:92:38:fe:3c:92:aa:07:bd:d2:3e:09:74:82:0b:
                    ce:21:ad:33:a1:bf:d2:2f:29:f8:52:41:ad:d4:e9:
                    15:df:df:dd:38:45:12:83:e2:8d:5e:52:36:59:37:
                    ea:bf:f8:d1:f4:18:21:cc:cf:15:1b:40:f2:b2:e8:
                    d5:86:e9:8c:49:44:c3:a6:2d:6f:8a:e4:4f:9c:a8:
                    76:3b:4a:24:ab:b1:6e:bb:9b:25:15:8a:39:0a:81:
                    3b:d4:35:18:eb:9f:1d:0a:08:65:0e:dc:af:36:f8:
                    86:72:06:80:80:ba:25:38:a1:dd:8c:65:02:63:31:
                    66:7a:aa:28:57:97:2f:49:64:f9:43:9f:13:4f:0d:
                    d6:f6:f1:52:a5:14:45:91:11:57:ed:13:c8:60:79:
                    bc:62:0d:10:6c:46:a3:19:57:54:5a:71:bc:b8:84:
                    cc:41:e1:02:16:f6:a2:90:26:ca:93:e1:cd:34:62:
                    e1:60:fe:90:bc:98:4b:46:74:16:53:ad:1a:fb:05:
                    42:19:02:06:98:e3:d7:3d:07:91:b7:c9:82:7e:80:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8B:D2:F6:F1:27:76:D4:FD:A8:25:CE:45:39:2C:32:C6:14:05:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ec:21:1c:b8:7b:d4:60:8c:ff:90:9d:79:77:ee:5e:01:88:
         c1:a3:76:2c:d2:0b:3f:31:08:67:85:33:49:98:c7:a3:c9:4d:
         9f:08:cd:6f:72:6b:80:c4:a2:78:59:75:b3:17:34:03:01:5b:
         21:52:5d:25:76:ae:ff:7b:1b:c7:b4:c7:33:14:34:1c:c3:a1:
         97:53:ab:c9:17:14:a3:57:38:a7:96:2c:50:f0:6e:c9:e8:67:
         1e:90:d6:34:bd:6b:d7:98:62:98:b9:85:87:68:d3:cd:a0:a7:
         f7:c4:15:58:dd:62:1f:d2:2c:f2:c1:24:6f:98:22:68:89:3d:
         fa:e3:1d:a7:7a:d1:c3:3b:d1:e6:55:95:e5:a2:66:17:9b:8c:
         07:b8:8e:e8:ad:64:cc:a6:de:d3:ae:ff:b3:8c:fe:8a:62:f3:
         95:bb:db:54:d3:25:42:a9:91:da:d6:57:51:f8:ff:23:03:fd:
         36:65:8f:f2:9b:e3:25:c7:c9:a3:34:bb:23:59:a4:e0:e0:94:
         6e:45:ab:f0:35:58:ab:3b:00:b5:0e:18:fa:92:b9:10:47:59:
         59:57:39:22:ff:99:d4:4a:2d:18:03:02:6a:fa:5a:2e:e4:35:
         00:3b:b7:d1:a7:25:0b:bb:c6:ad:90:c2:ea:71:73:97:7b:1e:
         5e:a9:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:12 2026 by rpki-client