Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
File:                     81898094-751d-312a-a1ce-de9855fd858a.roa (raw, json)
Hash identifier:          cbIYw9nBTyx+1EurHmTZ1o4uNK16DZZojxXASjgcg10=
Subject key identifier:   2C:A8:9E:9A:3B:05:48:74:2A:99:62:10:98:F4:75:A5:00:69:46:43
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584E482488E72CD602E40468D300
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     18914
IP address blocks:        206.168.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:88:e7:2c:d6:02:e4:04:68:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=0fb22ab7-f229-431a-b16c-1ab67bd54412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:fc:9f:0f:a6:78:7f:e5:e1:a3:c6:e9:c3:
                    e0:2a:66:c7:07:3d:ff:13:86:eb:e6:e5:9b:e6:62:
                    d7:b1:61:b0:ff:c0:43:fa:bd:b0:cf:b9:ba:ac:ea:
                    56:90:21:cb:f5:ca:6f:f6:a0:bd:0b:74:7b:31:df:
                    e2:18:0c:50:8b:1e:92:c0:04:67:ec:64:e4:25:2d:
                    37:35:25:46:ad:38:b6:87:b5:8b:b9:7d:e7:fb:71:
                    b3:2e:f8:f5:fe:ad:36:43:01:c0:86:bc:88:09:e2:
                    fb:ab:7b:99:4b:66:bd:2f:4b:cc:46:ce:4c:ff:86:
                    22:47:65:59:aa:f4:08:80:41:5e:19:fb:d2:92:23:
                    79:3a:00:ec:84:dc:86:2a:5f:f1:d3:ad:58:3d:fc:
                    28:34:3f:c7:ee:29:d5:fb:b7:1c:3c:af:43:07:5e:
                    09:78:47:ae:06:48:b1:3e:b0:78:5d:dd:e8:4a:44:
                    ad:d6:5b:33:78:14:f5:fc:75:c5:3e:97:26:02:25:
                    0c:6d:5a:c8:b9:9b:83:c4:3e:8d:78:38:e3:36:d2:
                    bd:ed:6e:e2:41:bb:1e:b4:d6:cd:90:04:83:bc:f0:
                    f7:52:9f:88:0f:bd:d3:25:72:c6:c7:9c:dc:a4:50:
                    7e:01:73:e9:96:26:0b:00:f7:a1:98:6f:12:5f:31:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A8:9E:9A:3B:05:48:74:2A:99:62:10:98:F4:75:A5:00:69:46:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:16:94:d1:5c:7a:c3:72:5a:47:d4:4f:45:60:1b:57:5d:
         51:1b:25:dd:c4:a3:51:da:8c:53:bd:ef:4d:08:f3:a1:f3:f8:
         e1:3e:23:b4:02:ca:00:80:0b:02:6a:fd:f5:31:54:68:1e:5b:
         6a:e9:7c:61:b9:0c:47:30:d6:45:56:8b:cd:bf:c6:73:ff:ed:
         05:85:a4:f4:96:99:22:00:61:f1:79:a0:b6:14:20:33:77:35:
         d1:d7:df:7e:c8:2b:ee:96:f1:0f:c7:36:46:33:48:5c:76:40:
         cc:e5:ad:d3:d3:5c:f2:2e:72:da:2b:b9:1d:14:a1:fc:e9:39:
         b6:35:99:fa:9e:e4:da:32:73:af:d1:15:a9:ac:27:6f:c4:c3:
         48:99:39:0d:66:ec:64:e8:c8:37:47:06:83:a3:a3:3a:80:39:
         7a:0e:33:cb:6f:9b:9a:cb:a2:bc:79:99:0e:fc:d9:b0:72:eb:
         5b:76:ea:ff:bc:f0:eb:c7:b2:58:63:33:87:ff:cb:b7:36:af:
         6d:4a:d9:57:6f:8e:10:5f:43:5c:ac:08:64:bb:6a:1f:13:b2:
         af:34:51:63:e9:a3:f4:14:d3:fd:d3:d1:45:f6:ef:ab:f5:dd:
         03:8e:d3:24:62:36:00:a4:75:a6:9f:26:90:8b:e9:a1:3c:de:
         6f:88:f9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:10 2026 by rpki-client