Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa
File:                     d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa (raw, json)
Hash identifier:          8O1d4mEepkAmwG8OIfoQILgxVqlZT1jPwU2uwtrQP2s=
Subject key identifier:   3E:17:9B:95:BB:1B:3C:17:87:60:6B:E7:44:AD:8C:D5:1B:9A:DA:22
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584DAAE034104DCD49FB3B17BF00
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     55101
IP address blocks:        198.97.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:34:10:4d:cd:49:fb:3b:17:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=144d6c8c-b553-4d5b-8dcd-661a51612502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:d6:e6:1c:9a:30:7e:8c:91:ee:86:72:23:
                    35:e4:a0:48:1c:06:b1:8a:ce:cc:b7:73:fc:d4:64:
                    70:2c:ae:7c:ae:d7:aa:25:b1:5d:a1:46:c2:3a:22:
                    e6:8e:aa:0e:e9:6e:cc:28:62:4b:1b:3f:d1:b9:9f:
                    b0:60:8f:24:7f:1b:e5:82:bf:0a:3a:6e:0f:ca:c6:
                    a8:c1:3c:67:16:54:e8:bb:bc:b2:35:97:e0:84:b5:
                    73:19:54:2c:ac:be:53:de:5c:f8:26:79:45:b5:46:
                    92:56:45:21:7f:c4:dc:05:59:3d:1a:77:63:44:3b:
                    43:63:d2:c0:93:09:7d:b8:f2:4d:cb:45:64:8f:e1:
                    c0:a0:15:44:83:3b:2b:00:57:78:f4:b8:6c:e8:a4:
                    e7:24:39:be:f4:2a:d8:d4:9a:36:64:1c:b4:c1:a6:
                    13:ae:7f:1d:02:07:0f:dc:6e:15:13:6f:d9:6b:23:
                    c5:47:cd:51:7d:f1:58:9e:21:f1:b9:7c:ae:77:63:
                    98:f1:1e:dd:cf:5d:d1:fd:c8:c6:57:e2:3f:31:14:
                    03:aa:f3:88:dc:68:85:95:94:b0:0b:bb:c9:2b:66:
                    a1:b1:e4:7b:65:4a:a1:26:e9:e0:06:e4:4c:3e:6e:
                    dc:4d:dd:93:e3:79:37:93:5f:b2:ff:bb:19:35:31:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:17:9B:95:BB:1B:3C:17:87:60:6B:E7:44:AD:8C:D5:1B:9A:DA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e7:8b:1a:d2:43:a2:c2:b0:cc:61:bd:90:b3:ea:35:e7:f1:
         66:81:63:cb:3d:9a:df:79:b3:af:98:ab:ab:33:b1:ef:50:c4:
         4a:fd:9e:15:ab:24:a2:9d:60:a0:c4:6f:e0:76:18:54:74:67:
         aa:7a:25:87:8d:5f:d4:8b:83:e3:c6:4a:69:56:07:e3:50:df:
         20:9e:d2:b1:25:3b:f2:0a:3b:62:85:3c:6b:f5:49:ba:09:c4:
         54:8c:e3:21:a0:49:68:d7:07:8c:68:eb:a9:87:64:53:fd:94:
         b9:23:f1:3f:2c:fa:bf:a3:37:67:87:c5:88:28:6f:a3:3c:4d:
         a3:78:b2:02:bc:9e:85:dd:12:94:2e:62:fe:37:26:f7:70:29:
         4a:37:ed:02:c2:46:69:37:b8:40:61:11:e2:07:9d:16:c9:bc:
         25:f8:71:e7:dd:05:53:2a:7d:a9:e7:22:d1:aa:3a:4d:37:6e:
         60:2c:29:df:5e:cf:4a:42:2b:44:5c:61:64:40:de:dc:57:c0:
         7f:cd:01:3f:78:ab:70:df:b4:11:41:1a:7b:83:3e:61:9d:02:
         35:d5:50:92:38:0f:90:d4:5e:7c:e2:28:7a:c1:b1:35:f8:bc:
         a7:79:3a:0c:18:35:da:25:bf:fa:3a:e6:76:a8:98:7c:51:56:
         a6:8e:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:38:17 2026 by rpki-client