Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0ae2d43d-6202-3719-82d0-22a70c732fb7.roa
File:                     0ae2d43d-6202-3719-82d0-22a70c732fb7.roa (raw, json)
Hash identifier:          CEE2N+TdGBSAvUNJ97Tdn3dmYWud/HWivZGQCgGAMHk=
Subject key identifier:   34:AA:3D:EE:52:A7:B4:32:F7:6D:BA:46:D8:12:93:04:CF:88:B1:9E
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584D91BFFD9C3EBF7B7C86DA6040
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0ae2d43d-6202-3719-82d0-22a70c732fb7.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     401514
IP address blocks:        198.212.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:bf:fd:9c:3e:bf:7b:7c:86:da:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=ac59ed87-c00c-4a7e-be0b-e4ee04db5030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:ce:6b:4b:1f:03:c3:a4:e7:19:90:ba:4e:
                    58:b0:88:56:d0:40:fc:f9:d9:09:8b:c7:2d:08:e4:
                    bf:94:0e:f7:63:63:f6:65:b4:da:46:ab:d5:24:2a:
                    14:48:bb:15:45:f7:b8:ad:a4:3e:95:35:8f:fe:16:
                    7f:6a:ea:b9:d9:05:1f:90:bc:3d:d0:ae:fb:1e:a2:
                    42:a4:69:fd:50:e3:fd:48:0d:83:7e:1c:dd:1f:e5:
                    d3:26:10:28:a1:c3:72:d9:ac:74:20:1d:59:59:a5:
                    19:3d:02:42:e9:df:2a:c2:f5:1f:73:e8:0d:43:5a:
                    46:19:c5:01:bc:f7:f6:19:36:dc:a7:29:ef:13:37:
                    e2:7b:90:b5:f3:99:d1:a1:06:b0:01:0d:cf:9f:3e:
                    d4:3b:1d:11:87:ec:0a:96:12:96:20:8f:cb:5e:64:
                    36:49:26:b8:9e:60:66:d9:40:2a:fc:26:0c:eb:16:
                    8b:a1:64:d1:42:be:05:db:e1:3b:d6:ed:5b:ab:d8:
                    96:2e:42:4b:f4:a2:c4:8d:44:f1:35:a6:ab:e0:71:
                    34:6f:17:09:af:e6:e7:65:a0:4e:15:ec:bb:48:77:
                    d2:7c:62:3e:1e:a6:98:4c:63:a7:6f:42:5e:44:d2:
                    24:b2:ff:54:24:5e:47:0b:b1:9e:ce:f7:83:8a:21:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AA:3D:EE:52:A7:B4:32:F7:6D:BA:46:D8:12:93:04:CF:88:B1:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0ae2d43d-6202-3719-82d0-22a70c732fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:df:16:67:3b:b7:30:ba:93:20:8e:a8:89:c7:f3:ef:2c:83:
         cc:f4:60:95:db:51:af:68:31:23:80:7c:f6:5f:29:64:a1:aa:
         7d:06:65:2c:9a:6b:be:23:16:21:0b:1a:f6:54:81:7a:30:24:
         d7:a8:99:41:40:d7:93:b6:bb:50:5e:15:c0:40:d0:ce:8f:6a:
         03:aa:e2:ac:81:59:59:f8:a4:2e:a4:76:1c:86:75:4f:a0:c2:
         d3:60:be:bb:0b:88:f6:cc:72:fd:a4:63:db:17:24:da:e9:0f:
         2d:57:79:cf:9c:46:77:3d:46:2c:e4:26:af:f5:3a:0b:82:02:
         7c:9e:80:0c:e5:74:44:8a:2e:7a:90:17:df:86:52:67:79:06:
         3c:79:f4:4d:87:13:b0:da:8b:e4:a2:18:e4:eb:a9:a3:05:e3:
         1e:cb:56:4d:d7:8c:a2:43:b6:78:27:93:81:2d:02:88:a9:41:
         8f:ab:4d:8c:db:e6:88:07:81:1b:42:31:b4:e0:06:3a:18:be:
         14:eb:ed:51:7d:81:85:a2:00:7a:4b:e8:3e:17:24:3a:ec:ff:
         38:38:11:35:7c:1c:c5:a6:e3:ed:93:5a:73:93:cf:8b:cb:fc:
         70:76:57:54:24:21:89:97:2c:7c:d1:73:94:fb:9d:d7:b7:7f:
         8a:09:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:35 2026 by rpki-client