Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/c98a71c0-ce67-3866-b4aa-27b7ca5990e1.roa
File:                     c98a71c0-ce67-3866-b4aa-27b7ca5990e1.roa (raw, json)
Hash identifier:          DAMB56WAe9YIK9tzCzcMPMW69G3kje8O4BqZEM0sxdw=
Subject key identifier:   CB:38:94:C2:36:40:EA:93:0E:20:2F:D3:E4:93:5C:4F:C4:7E:9F:AC
Certificate issuer:       /CN=371ccf45-cbe8-46b3-8dee-e2270c15d111
Certificate serial:       010D0C9F4328584E5D14A050FA7C119F04B8B320
Authority key identifier: FF:00:9B:87:BE:7C:CF:30:63:A9:E5:E3:81:C2:80:10:6F:5B:D8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/c98a71c0-ce67-3866-b4aa-27b7ca5990e1.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     36081
IP address blocks:        156.108.0.0/16 maxlen: 16
                          165.127.0.0/16 maxlen: 16
                          192.70.175.0/24 maxlen: 24
                          192.136.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a0:50:fa:7c:11:9f:04:b8:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ccf45-cbe8-46b3-8dee-e2270c15d111
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=78fc6acc-b36f-493a-aaad-6238a21d4334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:fb:54:df:5d:eb:e6:33:99:d0:9c:57:1b:
                    be:c9:0c:bb:ab:45:6f:3e:ee:be:a7:43:fd:4e:ae:
                    cf:78:81:77:3c:6b:43:05:2c:dd:d0:ee:5a:bd:e3:
                    e4:14:72:37:a9:a6:ed:23:0c:6b:01:4c:2f:a0:0f:
                    34:82:c8:ba:09:d2:f1:2e:12:f9:9c:b3:ae:72:71:
                    2a:b7:ef:24:67:6e:0c:55:b2:fd:e1:1d:58:4f:07:
                    27:c3:7f:09:76:0b:e2:52:ba:1f:aa:33:50:76:20:
                    01:1c:49:c3:c1:13:3e:6f:94:09:a7:11:77:f3:df:
                    fe:be:f3:1d:09:a8:80:e2:18:d8:98:8d:4d:4a:96:
                    ed:7a:d3:7e:12:a7:3a:59:47:a2:22:a2:39:b9:dd:
                    c5:43:55:c4:16:4d:02:40:1d:75:eb:da:c3:7f:94:
                    10:c5:6d:56:7f:35:b8:48:84:3e:1e:e5:52:af:2f:
                    5b:ca:87:2d:21:d6:d6:94:c8:0a:ab:f0:9d:02:8c:
                    78:43:ea:20:18:af:e8:2f:f2:8e:cc:73:1d:7f:60:
                    c7:44:5e:92:c1:e1:1d:2f:74:5a:fe:29:d8:82:99:
                    f2:e6:23:31:13:a0:f1:9d:89:fe:79:86:ec:4a:51:
                    41:19:24:44:18:ae:3e:b5:62:81:d0:62:c7:83:ad:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:38:94:C2:36:40:EA:93:0E:20:2F:D3:E4:93:5C:4F:C4:7E:9F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/c98a71c0-ce67-3866-b4aa-27b7ca5990e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.crl

            X509v3 Authority Key Identifier:
                keyid:FF:00:9B:87:BE:7C:CF:30:63:A9:E5:E3:81:C2:80:10:6F:5B:D8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.108.0.0/16
                  165.127.0.0/16
                  192.70.175.0/24
                  192.136.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:16:1f:69:2f:63:ab:47:89:25:ff:04:7f:d3:1f:4b:0c:eb:
         3b:80:d5:f1:00:d6:14:c1:6a:68:b3:b9:e4:e1:6f:a7:a8:a8:
         e3:73:4d:0e:95:eb:69:8c:fc:35:17:a0:a8:33:7a:25:36:51:
         33:6f:41:5b:6b:77:f0:ce:21:9e:1d:44:e0:a4:8a:0a:06:f9:
         91:52:a7:1c:e0:98:94:b0:90:08:b4:81:b3:6e:ee:a1:f9:dd:
         bb:de:b6:f8:58:f2:24:6b:a8:43:c0:6d:a9:06:95:61:19:6a:
         51:07:50:d9:a6:87:67:25:be:a1:fb:70:6b:1e:1a:dc:92:ea:
         d5:ab:38:55:a4:dc:47:94:fc:62:38:e6:8b:47:8e:8a:67:1d:
         50:15:52:fe:d7:15:3e:3b:25:ee:20:ee:db:bd:60:4d:9e:2a:
         b3:ae:44:cc:de:fe:c6:25:ce:37:dc:cd:2d:4d:ef:f3:13:74:
         f1:c7:d3:43:f9:ec:84:13:d1:88:4c:50:4d:27:0d:a0:36:58:
         7e:31:4f:20:8d:0c:71:fb:08:f8:c0:a3:aa:8c:20:d8:4f:4d:
         43:5b:99:e1:ec:77:c3:22:0d:ac:48:f7:39:5c:09:ac:9c:d6:
         a3:44:60:b8:8c:92:4f:49:03:9d:2d:86:b5:94:8e:77:91:61:
         73:dd:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:23 2026 by rpki-client