Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/7187fa6a-6221-36ae-bc8d-79bf0dcbda96.roa
File:                     7187fa6a-6221-36ae-bc8d-79bf0dcbda96.roa (raw, json)
Hash identifier:          ZaZejaYvMWeP4S0WQ/ssGAQez70JIICoUAdk6GUUw2I=
Subject key identifier:   BD:B8:5D:D0:A1:7C:E0:0B:55:0F:63:25:FC:86:06:D2:FC:22:51:91
Certificate issuer:       /CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
Certificate serial:       010D0C9F4328584DA6B03445E795F62FC9FD6E80
Authority key identifier: EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/7187fa6a-6221-36ae-bc8d-79bf0dcbda96.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        198.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:34:45:e7:95:f6:2f:c9:fd:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=9abfebc5-9ca8-483b-97ed-f92cb2137eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:92:ae:bb:93:19:d8:8d:c0:1f:b9:47:0e:
                    30:88:a0:a0:d3:b5:ea:53:c4:69:c7:f5:e1:10:53:
                    c2:97:f5:54:85:12:10:cc:14:fe:f0:aa:86:6b:83:
                    71:cf:33:89:76:21:7f:b7:b1:5d:d2:0e:91:5b:63:
                    50:63:7b:36:d2:f3:5f:8e:ac:17:12:f4:1a:42:ae:
                    43:ad:93:c4:a1:8b:e6:a4:84:af:89:3f:11:0a:3c:
                    52:df:37:d8:2b:30:c0:84:f2:85:b7:a8:44:17:d1:
                    c3:1a:43:dc:75:b0:3b:15:76:58:2a:35:df:bd:99:
                    bc:90:f1:b6:76:46:62:ca:a5:91:c8:8f:3f:9d:1d:
                    ed:37:31:2b:bd:f1:13:a9:79:18:ce:f4:71:8b:4c:
                    5f:c6:44:7c:9a:e2:9d:b9:04:f8:bc:08:a3:e0:8e:
                    62:66:f0:38:c0:5a:49:1a:f2:30:66:69:e4:68:e0:
                    af:61:1a:87:40:98:6a:2a:04:59:8b:bf:f9:fb:cc:
                    d1:05:6e:d0:67:28:36:59:e6:34:cf:5d:c5:36:52:
                    1f:b4:e8:79:f1:5d:70:1f:20:f1:89:f2:5c:8f:b1:
                    6b:56:c6:42:01:43:80:28:cc:74:c1:28:d3:b5:bf:
                    4b:13:7f:76:85:f0:79:e1:0f:a8:15:2d:77:3c:f9:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B8:5D:D0:A1:7C:E0:0B:55:0F:63:25:FC:86:06:D2:FC:22:51:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/7187fa6a-6221-36ae-bc8d-79bf0dcbda96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.crl

            X509v3 Authority Key Identifier:
                keyid:EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:9f:c6:67:6d:91:a3:77:bd:c4:be:69:f5:fc:40:8d:66:
         35:92:e7:21:82:57:f5:9b:23:a5:b5:cc:d6:0c:81:05:b0:d7:
         eb:43:af:00:48:00:30:fe:15:46:40:08:0f:36:af:a5:72:18:
         a5:4b:4d:09:21:f8:2c:83:57:c3:51:b4:c5:c0:bc:9e:2b:ef:
         32:b6:90:62:51:aa:59:01:6f:6b:51:71:e5:e0:c1:bf:20:ab:
         7d:72:55:35:b2:9d:43:8b:c6:00:7c:9c:0a:85:5a:93:81:71:
         a3:69:1a:a3:6b:bc:2f:3f:56:6c:20:99:35:43:10:10:5b:5e:
         c0:a7:f2:a2:dc:b5:e1:3d:3b:07:6c:d3:24:32:af:2f:9e:7d:
         61:a8:52:64:c7:e6:a9:08:3b:7b:75:02:f5:f0:61:ef:2f:62:
         a1:14:78:29:64:e9:62:f8:af:34:44:82:4e:f0:65:ce:4c:f9:
         25:2b:1f:2e:da:f6:16:cc:b5:c6:53:51:1c:fe:ab:1a:f8:cd:
         22:38:51:7c:41:d5:61:ce:52:0e:02:2c:08:a5:7b:77:e6:36:
         fc:0c:ca:1d:aa:e9:df:6f:55:68:80:22:1a:0a:79:d7:b7:fd:
         39:d6:fa:0c:a8:fa:82:74:74:26:3f:c4:cb:b3:26:11:48:1c:
         af:88:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:21 2026 by rpki-client