Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa
File:                     c95177a4-9ed4-315d-96d5-2797939b3f4a.roa (raw, json)
Hash identifier:          n6o6Eojk0dOfJ7Qw6Kx50yryKiOW3l/Tcmo1tV+Er78=
Subject key identifier:   06:40:5D:AC:D6:4A:1A:4B:2C:82:53:C0:5F:B0:5C:C3:BF:5E:D9:B3
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584E6C6F69F9398DEA8C84CF28C0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     14192
IP address blocks:        198.150.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:69:f9:39:8d:ea:8c:84:cf:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=2df4d31b-2976-4b60-8b6f-7e1597182145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:55:a1:57:73:c8:df:3d:2d:b8:07:99:33:
                    ce:d8:d9:a1:df:64:1d:b9:c8:c7:e3:bd:6b:a6:ac:
                    ce:8b:a3:30:f9:10:10:0c:fb:e6:34:cf:8d:04:be:
                    6f:b1:02:5e:b5:92:46:67:6b:39:d2:b6:ac:f5:5a:
                    09:59:0c:6b:a6:a3:6b:80:61:1c:44:78:17:e3:9f:
                    65:25:fb:25:11:64:58:3f:33:80:91:be:d4:be:e4:
                    80:e9:90:92:df:bf:92:24:e4:ac:68:3d:58:eb:8f:
                    65:92:ca:ee:1f:28:ba:f7:11:de:3f:8d:aa:dd:bb:
                    56:84:99:ea:28:fa:7c:ad:ee:13:66:90:01:42:b6:
                    50:4a:ca:1e:dc:07:57:bb:f1:f7:34:6b:2d:fc:25:
                    98:d7:90:6e:c6:61:27:bd:5f:d3:4b:95:44:7b:77:
                    09:32:7f:a9:d0:fb:ca:fd:d1:93:fc:64:b0:ac:7f:
                    4a:22:f6:3c:92:68:2b:e0:bb:6d:d9:c1:a4:34:0f:
                    7f:83:97:57:ad:3a:9c:2c:ec:d1:97:c7:55:fd:f7:
                    e4:91:36:eb:82:aa:b4:82:12:23:2f:b6:c7:c2:08:
                    c9:67:dd:6d:2c:65:e6:7e:b2:59:42:d7:c9:dc:31:
                    61:b6:00:53:b0:8f:27:ad:a3:ed:97:cb:70:03:d5:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:5D:AC:D6:4A:1A:4B:2C:82:53:C0:5F:B0:5C:C3:BF:5E:D9:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d3:fe:e7:39:c9:21:6c:8a:2c:d3:d6:a2:7c:b5:95:13:d8:
         94:9a:c1:02:71:c8:a5:11:3b:86:85:5b:11:3a:57:c9:8f:e7:
         cd:b6:9c:03:5a:87:39:24:74:12:ae:7d:f3:d4:c6:87:24:c9:
         ff:b3:0a:2c:0f:ef:7b:42:19:3b:e4:6d:2c:04:64:58:d2:79:
         2c:55:68:4c:51:c6:b0:35:52:be:29:de:ea:2c:aa:07:6b:ab:
         fe:86:02:2d:42:14:1b:c2:36:37:68:4d:f9:ca:e7:d4:2e:1f:
         f5:6f:40:9b:33:36:dc:07:51:c2:3f:ba:15:42:4b:cd:5d:f1:
         c8:05:46:61:45:fa:60:e3:cb:c4:c0:5b:41:f0:66:9e:cf:85:
         af:45:79:ed:62:ae:e3:a1:8e:e7:81:ee:74:2f:00:69:5a:9c:
         86:b6:64:a7:aa:1c:e4:c3:ac:a7:60:f0:ab:18:86:e1:f7:44:
         76:14:89:39:22:f3:a1:80:cb:36:00:3f:33:c6:24:82:39:51:
         81:18:9f:8a:86:c4:6b:7b:d7:f6:6b:a1:3b:5d:35:e4:0c:bd:
         0f:5e:01:84:35:a5:8a:a7:e0:e7:8b:6d:52:38:93:f6:76:19:
         18:a6:7e:92:32:e4:47:1b:39:0b:de:ac:ff:25:8a:f5:51:9f:
         e7:c9:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:14 2026 by rpki-client