Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/eea5044c-0441-350e-abc7-a5365acc2bda.roa
File:                     eea5044c-0441-350e-abc7-a5365acc2bda.roa (raw, json)
Hash identifier:          QwN6KyJ06P5YetiM75JX/8wDoA31VsslyxJ6vB2/StU=
Subject key identifier:   71:9D:9D:9C:E6:CC:5C:E0:37:69:D1:B9:FC:39:C0:00:34:E7:12:BD
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584E6144BA7CE581F446BB4206C0
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/eea5044c-0441-350e-abc7-a5365acc2bda.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     401013
IP address blocks:        198.52.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:ba:7c:e5:81:f4:46:bb:42:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=3e6626f6-548c-4c31-9625-b23889273278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:55:94:c8:f4:37:4f:20:91:4c:f6:91:5d:
                    06:a7:1b:12:67:46:a1:62:ca:e7:f7:12:a4:cf:fa:
                    f5:22:a1:58:d0:20:1d:3d:ca:94:f7:88:2e:fa:30:
                    6c:ee:6c:b8:f7:24:a9:eb:34:8f:a7:15:3e:f4:89:
                    e3:5d:cc:41:f5:3f:f1:93:3c:eb:56:38:20:f1:1e:
                    8b:b7:41:3e:c6:e8:d4:56:a9:4c:45:81:e3:ae:4a:
                    30:00:4c:3a:d5:be:05:e2:47:f2:8f:22:f8:78:0f:
                    6d:72:09:f3:0e:51:3f:ff:61:d8:2a:38:d0:e7:92:
                    46:a2:98:13:c1:21:9d:93:19:0b:46:af:69:50:0d:
                    56:de:08:b0:7c:0c:1e:ed:a6:d2:a2:e0:5c:45:38:
                    57:a6:0e:9d:a5:98:e1:f4:49:14:e9:21:f9:16:bb:
                    aa:7b:dd:23:3f:3a:b7:fe:a3:b3:77:38:56:23:61:
                    31:3d:f5:c0:b6:a8:fe:76:b7:cc:3c:fb:ca:3e:56:
                    79:2d:3f:33:94:76:9e:60:2a:c0:c9:93:1d:10:56:
                    a1:d2:22:c3:63:0d:46:1c:1f:e4:c7:3e:94:4c:bf:
                    96:f1:89:d0:3f:9a:e1:08:7a:b2:ef:d0:c5:d8:0f:
                    86:92:94:92:f3:29:fe:b6:9c:b4:1d:f8:67:18:68:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9D:9D:9C:E6:CC:5C:E0:37:69:D1:B9:FC:39:C0:00:34:E7:12:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/eea5044c-0441-350e-abc7-a5365acc2bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.52.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d5:34:96:76:38:cf:a9:80:b6:03:f3:ec:f9:8b:43:ab:f9:
         75:c1:54:e9:fa:a3:2c:e0:e5:3c:8e:66:bb:cf:b5:e7:2f:d8:
         c3:31:fa:64:b8:72:5c:27:0a:c5:74:8b:00:7c:ea:40:3a:b6:
         31:cb:fc:a0:2a:85:26:56:e4:e8:88:3f:dd:10:bf:80:cb:4c:
         06:a3:90:c5:3e:c7:bb:ff:fa:62:49:69:c4:99:9a:ac:41:f5:
         7c:e9:82:39:d3:b5:dc:3a:58:2c:23:44:77:d8:22:00:3b:87:
         50:ac:7c:16:74:7c:5b:4e:3f:08:a8:55:ca:50:8a:e2:51:cb:
         d4:89:de:bc:c5:5f:51:4c:ac:fb:6e:be:28:4b:ec:68:d7:bb:
         e7:86:bd:4a:35:5c:d6:92:66:97:91:ff:61:da:1a:e5:13:64:
         1b:90:06:c0:f8:a7:a8:68:b9:f4:80:5b:fd:72:ad:76:0b:6a:
         f5:84:40:b3:f5:66:29:70:52:6b:36:cb:de:01:d1:c1:8d:c9:
         94:1e:44:a0:ea:46:5d:a9:87:2c:e2:f8:52:66:ff:bc:d5:00:
         20:96:fd:a6:91:00:c2:f1:14:6f:cc:cb:40:cc:f1:7c:b7:ee:
         2e:b0:bc:00:07:68:8d:42:b4:53:f6:c9:dd:c1:5e:56:42:d5:
         21:ab:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:45 2026 by rpki-client