Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa
File:                     fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa (raw, json)
Hash identifier:          CKOVFelpmrocF7boyL81/DIxsJbumxyJ0YAHdRbXWTE=
Subject key identifier:   3D:13:34:3E:04:CF:E9:7B:2A:58:3B:5C:A1:F4:12:F0:6D:E6:B7:67
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584E8F54F72524458DF7580AA300
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     2559
IP address blocks:        198.241.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f7:25:24:45:8d:f7:58:0a:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=043f3dfe-03aa-40b7-a80d-cab58c76a60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:44:89:6b:f4:58:3d:07:f3:da:7a:01:0b:
                    44:28:50:bd:57:40:e3:93:67:91:4c:d7:19:0d:44:
                    70:1f:48:92:36:a7:9e:ff:7e:76:8d:9e:24:28:43:
                    fa:cc:f6:81:53:da:bb:4d:41:2e:79:a4:0e:42:9d:
                    6c:d9:74:c2:c9:a6:53:2c:9f:46:89:28:ad:b9:ea:
                    69:d2:51:6a:be:28:56:56:2c:33:df:45:e0:ea:54:
                    43:7d:ca:8f:06:b7:e7:ae:a9:24:2a:cb:7c:69:c3:
                    fb:51:93:cd:68:a2:30:9b:34:da:96:3b:4c:09:33:
                    df:18:b5:97:b2:e2:2e:aa:72:61:ec:9e:65:eb:02:
                    73:52:24:c4:13:11:c0:f2:72:1c:78:c9:6f:7e:4a:
                    92:06:64:8b:5f:61:a4:c1:38:c0:11:63:5d:cf:b4:
                    ff:46:88:4b:0b:96:ba:95:d8:44:b3:ae:24:74:69:
                    e5:39:77:c3:c4:c1:83:b0:90:33:e5:80:53:80:f4:
                    ad:5d:0a:7b:b2:ad:c4:e4:71:30:a0:66:46:08:b7:
                    b4:6d:1e:19:05:d3:f2:de:d0:f6:93:f6:b1:2b:f1:
                    a2:a7:8b:00:bc:82:ea:60:19:a2:71:75:9b:35:27:
                    cb:23:c0:3a:d3:83:9d:be:f1:d2:88:de:db:4a:8c:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:13:34:3E:04:CF:E9:7B:2A:58:3B:5C:A1:F4:12:F0:6D:E6:B7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:07:f6:2b:13:4a:aa:40:5c:da:66:94:a4:13:ca:e8:11:
         7d:f4:5b:46:61:25:8a:15:61:71:76:07:d8:25:52:fb:b3:27:
         84:ad:2b:1c:f7:85:14:b5:75:29:b2:af:3a:73:33:b7:61:47:
         82:26:85:f2:54:3d:a9:90:ee:43:59:e1:27:cc:22:fa:9e:17:
         42:6b:c4:0c:b1:14:0b:82:6f:be:a7:c2:b4:b7:e3:07:25:27:
         da:5b:42:1a:92:e4:10:a1:1e:6f:90:68:e3:62:7e:e3:0c:df:
         f6:60:ec:a7:83:9d:62:9e:a2:8d:db:36:7a:59:83:03:ae:4c:
         d9:d0:ca:c0:f4:96:2c:b8:0b:41:f8:f5:18:ed:17:df:72:82:
         01:cd:a9:3c:e5:65:4f:5d:5d:c4:ff:75:45:da:d3:6d:28:1c:
         0f:7c:1e:f9:fa:4e:1e:ee:19:79:ee:90:d3:13:2d:47:60:d4:
         f6:88:14:de:46:d6:a3:ef:18:3c:63:ea:59:bd:db:7a:db:b8:
         66:cb:2c:98:ad:81:90:bd:5b:66:05:76:5d:cc:81:ad:74:cc:
         4f:3d:30:bb:c7:52:07:29:ff:c0:77:e0:fe:6e:9f:d2:49:f3:
         76:69:d1:d7:5b:f0:e7:2b:ff:98:2f:25:72:23:65:a4:ef:f2:
         a0:44:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:37 2026 by rpki-client