Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa
File:                     4d834632-e4cf-33b7-affe-af1f8fa72096.roa (raw, json)
Hash identifier:          JUoV9ul2GKFYOyj5UTDiDDOiYmEEOW5XJ4TkPGh/+fY=
Subject key identifier:   9D:73:43:E9:0C:B4:9D:03:BE:6B:3E:9E:5A:6A:90:11:40:5B:51:28
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584DC8304A490F5EEE02FC6953A0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     2559
IP address blocks:        198.241.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:4a:49:0f:5e:ee:02:fc:69:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=ff690a2a-86d8-408e-ba91-2f20c222ccf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:e0:f4:1e:69:c4:e5:67:3f:d5:d0:35:ba:
                    c1:18:54:35:cf:f1:f1:99:65:2f:3a:a9:88:04:f5:
                    ee:02:40:d7:f2:58:3e:24:9f:b7:78:db:72:93:c8:
                    6f:1e:55:4d:ba:92:5d:10:93:43:a5:0a:2c:9a:8b:
                    72:70:8e:33:3d:1f:97:4a:d1:d2:e4:6a:ef:b9:5e:
                    db:f5:90:96:ed:26:8f:cd:9c:db:56:c4:83:0f:cb:
                    43:d2:81:d4:a5:a5:5c:f2:25:57:aa:6c:c5:7c:e7:
                    c0:ed:d6:75:60:aa:b2:ca:e7:5b:99:ff:10:59:15:
                    cd:10:f0:bf:1e:b6:f4:d8:6a:c4:5e:6e:97:88:a8:
                    9a:f1:7f:2d:c3:a4:7f:d1:af:c6:2c:66:2f:5d:6c:
                    b6:66:fe:bd:34:65:51:3b:66:2b:23:bc:46:36:1a:
                    24:8a:ea:0a:81:31:e3:4c:73:0b:fa:13:bb:d3:81:
                    bf:c5:63:64:18:09:ca:77:e7:18:ce:fa:a3:9d:3c:
                    c2:71:29:88:35:06:27:dc:c3:60:3a:7f:17:97:a8:
                    83:d7:43:34:bc:58:45:e2:70:73:da:73:e9:42:47:
                    c1:b4:58:4d:f8:14:b4:eb:7c:ac:de:d5:48:ee:a2:
                    25:fc:c5:2d:2c:a9:62:c8:9f:b7:cf:e5:8c:1d:db:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:43:E9:0C:B4:9D:03:BE:6B:3E:9E:5A:6A:90:11:40:5B:51:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bf:d4:aa:d3:25:5c:cc:fd:7b:3a:b1:ea:78:87:3d:51:92:
         cb:63:74:3b:56:f1:e6:38:b2:f9:77:cb:2f:5b:0e:67:27:81:
         12:5a:a5:38:c6:8e:b1:c5:a3:e8:a4:42:bd:89:3b:eb:d5:fc:
         be:74:17:c7:06:29:fe:7e:9e:65:0c:24:1c:d0:6c:6b:82:90:
         32:c8:13:34:78:04:f2:39:2b:15:db:ad:38:1c:aa:92:64:65:
         69:8c:05:b1:5e:75:91:7a:fa:48:5f:74:91:5f:2d:16:24:09:
         51:6f:a4:b7:4f:b5:9e:e0:1d:f8:d3:f2:f4:f0:45:6b:51:37:
         e0:9a:27:ca:7a:a0:b9:cb:d2:8b:69:cd:8f:d7:65:0e:77:23:
         f0:2b:44:6c:c5:7e:b1:38:18:71:c9:80:17:f6:be:9d:38:20:
         bb:40:7d:da:85:2d:84:43:04:53:dd:a6:96:83:ec:3c:86:ee:
         7b:d6:2f:cb:fc:06:14:1d:34:d5:f5:46:85:37:28:c7:3e:6e:
         36:c9:72:b5:37:fd:71:d4:51:0a:29:ad:ff:aa:b4:3f:eb:bb:
         e0:43:8d:86:d7:0d:a2:69:f3:e8:26:85:36:a5:f2:38:70:c9:
         c0:08:12:ec:8b:e6:1a:05:1e:89:f1:2d:71:cd:0f:da:90:88:
         bd:2b:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:34 2026 by rpki-client