Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa
File:                     2fb2f41b-197f-3998-95c5-b00e388ae797.roa (raw, json)
Hash identifier:          pHI3TLl6HLuZmTBn1mbz83VFqvOpZNSTbGaHI6hdb3g=
Subject key identifier:   54:E6:F0:28:0C:2F:2D:51:62:8D:95:C0:A4:46:A3:CB:DB:AF:74:C1
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584DAAE02B50D88AF086C32F4E08
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     209181
IP address blocks:        198.145.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:2b:50:d8:8a:f0:86:c3:2f:4e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=9993b8c3-10c4-4eaf-8d32-ea51b86ecff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:30:2f:1d:87:d5:6c:ba:18:dd:a7:9b:f2:e1:
                    fc:e7:70:e6:4a:6d:e0:4f:16:75:61:3f:3d:8e:c1:
                    db:26:ce:e4:f6:6d:45:7c:9d:93:65:36:d9:54:35:
                    e8:82:0b:6f:3f:5b:f5:b8:62:8b:02:cc:85:86:0f:
                    dc:98:c9:b1:10:3e:69:5e:83:80:13:b6:34:44:73:
                    58:74:46:be:75:8d:c3:0f:d2:b3:2c:a1:14:83:83:
                    08:a9:b0:c6:94:9f:94:94:b1:4c:ba:ae:5b:5b:44:
                    e1:40:4a:d5:1e:08:c4:b8:d2:76:d4:18:54:30:68:
                    0f:0b:e3:30:9b:24:09:69:c3:54:3b:da:09:27:2f:
                    d1:cc:82:fd:04:c2:83:0d:57:07:86:01:0d:5a:f8:
                    93:84:0f:68:fe:a3:6b:2f:82:f8:89:2c:4c:f9:10:
                    1d:f0:72:70:59:80:94:41:6e:90:a1:3e:4f:b6:c0:
                    72:ed:a6:a3:6c:33:1b:76:f1:65:f1:1f:1c:fe:1a:
                    fa:b9:9a:17:f4:9c:db:a9:9a:dc:56:06:4c:15:f1:
                    80:38:b9:30:48:e7:fd:36:e3:c1:66:81:63:69:a3:
                    60:17:9b:29:01:4d:2c:f7:66:bb:73:7f:e4:ae:d2:
                    08:f8:2a:3e:9c:5b:2c:c1:11:b9:62:63:f4:b7:d8:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E6:F0:28:0C:2F:2D:51:62:8D:95:C0:A4:46:A3:CB:DB:AF:74:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:39:98:45:04:76:ea:78:3d:2a:ab:6d:f7:49:0c:f7:f1:a3:
         28:42:74:cd:a8:a3:90:21:18:9f:77:29:8d:1e:dd:53:fa:e7:
         0d:39:62:66:35:e5:dd:23:24:cf:7f:25:78:06:fc:d7:23:b8:
         c3:c6:6f:db:52:89:fe:61:1f:4d:88:ff:fe:db:25:9c:c8:cd:
         7f:08:59:72:68:08:52:f0:c3:0a:aa:a9:29:c6:b0:81:88:ce:
         43:91:ef:76:e2:6e:41:3e:4c:f3:cd:c0:a0:41:0c:ff:1d:64:
         48:06:b8:41:0b:bc:3d:71:81:88:15:36:ea:18:82:5e:82:0e:
         93:b1:e9:37:02:9b:61:e6:ec:79:9f:aa:cd:0c:0a:a6:60:7e:
         4d:38:7e:88:0c:3e:57:c0:69:aa:9d:08:44:23:85:16:99:c3:
         f0:b7:da:16:4e:d3:51:9d:bb:ef:cf:ad:61:f6:82:0f:46:eb:
         eb:be:6f:96:06:cb:7a:77:7a:78:30:4c:bd:38:b4:12:13:a4:
         2c:3f:b1:e1:4e:a5:aa:21:a8:36:26:0c:da:81:6c:fb:04:f1:
         f9:49:1b:4e:54:dd:d5:5e:fa:df:bc:9e:1e:bb:91:b3:f3:2a:
         44:ac:88:f4:3e:51:ba:78:a0:d7:28:74:4e:7e:85:ab:94:be:
         d5:9b:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:25 2026 by rpki-client