Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a10d9859-6778-3c8c-852a-f2ba95ae4dee.roa
File:                     a10d9859-6778-3c8c-852a-f2ba95ae4dee.roa (raw, json)
Hash identifier:          pYkrK/YauOefOYGmBsp7NKndf+lfiu8mcc1V1z23iu8=
Subject key identifier:   64:32:0D:0D:D3:4F:35:E1:80:63:12:5C:DC:D1:67:08:1D:42:92:B7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DD090658A156F0AEEBB667980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a10d9859-6778-3c8c-852a-f2ba95ae4dee.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     397229
IP address blocks:        198.133.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:65:8a:15:6f:0a:ee:bb:66:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=5b54f434-83c3-4665-a6df-e31b165e3f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:c1:05:06:fd:eb:96:df:ae:82:b8:a7:5e:
                    a3:9c:33:30:22:a3:1b:f1:31:dc:1d:4f:3e:ed:79:
                    a4:23:fa:86:2e:2d:ea:25:2d:4f:39:18:1c:2b:80:
                    77:c5:05:19:a0:a3:86:06:2c:76:15:4c:89:e8:84:
                    99:96:11:41:59:28:cc:d9:cf:4a:b0:1c:37:06:d4:
                    99:10:4c:f3:05:90:31:c7:23:14:fb:81:33:12:1d:
                    d8:dc:c9:54:68:9c:76:8d:34:b9:1e:3f:3d:dd:60:
                    5a:80:29:6b:34:86:1e:1c:ad:5b:c8:85:be:52:4d:
                    c8:8a:87:fe:f7:e3:8f:93:2c:ad:2a:a6:78:1d:3b:
                    a4:4a:38:9f:14:5e:ec:7f:f4:1d:f7:6a:51:83:7f:
                    b4:46:bc:16:63:c6:5a:91:57:fa:56:d0:2c:da:42:
                    a0:e6:76:ab:ac:a9:d6:38:88:9d:f1:bf:e2:b4:f0:
                    ff:06:f4:0f:1e:b9:1f:16:28:70:16:6c:76:9f:d4:
                    e5:74:b3:51:75:c9:2a:01:72:0f:81:43:59:3c:66:
                    9b:75:d2:82:0c:53:38:a7:97:53:00:65:00:b8:8e:
                    fa:12:db:93:e5:d9:5a:b9:62:d6:a2:13:bb:c0:87:
                    75:ad:19:0c:41:ed:a6:a7:2a:ac:4f:12:25:1b:64:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:32:0D:0D:D3:4F:35:E1:80:63:12:5C:DC:D1:67:08:1D:42:92:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a10d9859-6778-3c8c-852a-f2ba95ae4dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:bd:6e:8e:88:a6:f0:04:f6:d4:53:cc:a8:be:fd:a1:2d:b9:
         15:19:d4:d4:ef:0d:cb:7b:ae:04:47:c1:dc:2a:ed:81:f7:b1:
         e4:16:fa:75:24:e5:47:20:7e:b4:7a:aa:7f:86:03:44:8b:09:
         1b:26:d9:3e:db:18:25:34:c8:e4:0e:6a:2a:c3:e2:9f:ac:ba:
         62:7e:e0:57:35:b9:07:50:4e:95:98:41:17:dc:a3:5f:5d:ba:
         57:d6:44:28:98:69:b2:22:94:7c:16:4c:70:06:d0:6a:c8:ff:
         6d:cc:cf:de:f8:4c:19:7e:51:13:13:8a:45:7c:60:4f:6d:d5:
         a0:40:36:05:ae:96:b4:78:12:04:13:02:cf:bf:e2:59:49:7f:
         70:90:ff:77:01:6b:c0:7d:08:f6:c1:4b:4f:9b:e9:98:11:ec:
         1f:7f:5e:a9:ba:55:66:31:11:5a:8e:4a:56:38:cd:a0:13:98:
         a0:8d:af:64:cc:94:3f:74:34:8f:33:27:db:d0:47:32:cc:01:
         6b:41:e9:23:a8:96:b2:74:9b:d6:1e:da:74:2a:8b:11:b2:7f:
         18:17:bb:e6:a7:58:af:b4:87:8f:0e:a1:2f:1b:66:60:a1:79:
         d8:3e:1b:86:b1:2f:2e:d4:92:7a:85:fd:74:b7:06:bf:30:43:
         6e:e4:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:13 2026 by rpki-client