Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa
File:                     eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa (raw, json)
Hash identifier:          AOB+k/EAHz6gXS5Ys9hQWPr4mpeu8fyXgemF2+/B67Y=
Subject key identifier:   20:A7:8C:9D:25:DF:6F:85:1D:B4:E5:ED:85:B4:17:AA:63:7A:41:FB
Certificate issuer:       /CN=88d13a4f-a038-4d71-9494-9d48fef32c35
Certificate serial:       010D0C9F4328584E74CF719A0369546D7E3EDD80
Authority key identifier: 59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     23041
IP address blocks:        198.137.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:71:9a:03:69:54:6d:7e:3e:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d13a4f-a038-4d71-9494-9d48fef32c35
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=85d34a5a-405e-4ad2-babc-0b077f346dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:f4:f9:de:cd:ff:e8:c4:10:77:c1:0b:6e:
                    1f:9e:c7:29:e6:c5:9c:cd:2c:76:7f:34:1b:b3:2e:
                    5d:b2:93:a3:1a:5e:6a:9e:0a:13:e7:31:91:9f:1b:
                    41:88:24:06:b7:aa:91:b6:92:bc:57:af:38:32:4c:
                    f5:82:eb:62:96:6b:09:48:e7:7f:df:b2:16:d6:7d:
                    93:9a:0d:fa:3f:fd:8a:53:33:18:cb:5b:6f:fa:48:
                    35:24:d8:23:c1:6d:e0:c2:60:f4:6c:64:db:ef:34:
                    3c:f0:89:0b:4e:06:cc:39:0d:af:fa:7f:13:da:09:
                    9e:11:1e:a7:93:30:8a:d7:9b:a3:52:3c:e5:46:69:
                    1d:62:e9:e4:e7:13:ae:a8:3c:a1:94:d6:33:59:5b:
                    a0:97:35:57:bd:bd:51:40:1b:52:65:d5:a0:f4:e5:
                    d9:d7:ff:2f:af:da:f4:6b:2f:34:e0:f1:d3:52:3e:
                    ca:8b:11:c8:05:c8:56:96:33:29:09:7b:95:0e:72:
                    be:82:ad:86:c1:57:6c:40:09:8b:4e:66:d6:3b:c6:
                    ab:a7:8a:3b:29:66:0a:cb:6d:0a:2d:e7:79:13:70:
                    e0:c0:a6:7d:40:37:f1:36:be:5e:f1:f5:0d:ed:98:
                    60:9a:2f:25:03:46:83:a2:90:03:a0:a6:1b:e2:3e:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A7:8C:9D:25:DF:6F:85:1D:B4:E5:ED:85:B4:17:AA:63:7A:41:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl

            X509v3 Authority Key Identifier:
                keyid:59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:fb:1e:47:24:b3:81:17:09:6a:62:aa:69:16:85:44:d6:5c:
         a4:e0:af:2d:6e:c0:97:be:b4:72:1e:a7:20:d2:a2:f2:00:78:
         7e:b7:d3:a0:0c:2f:2e:e7:33:13:35:e5:14:2a:8c:22:93:e5:
         4d:7e:17:2e:4d:c4:e9:b9:fc:cd:26:f5:93:29:89:bb:eb:c4:
         2d:f9:6a:15:f7:b9:c2:0f:56:84:05:ef:06:76:69:68:34:ad:
         2a:7a:8b:92:de:3e:2b:be:02:5f:bd:1f:3f:0f:72:ba:ab:b6:
         cb:05:3d:77:b4:df:33:c7:2c:42:27:74:d5:0a:4b:8c:40:4e:
         1a:fa:4a:18:da:f1:4b:93:7e:eb:1e:20:8b:a6:93:77:ee:63:
         0f:88:43:05:08:53:68:b2:4d:66:0b:26:2e:ca:c3:9f:c4:9b:
         74:ac:32:07:b0:36:d5:9a:af:ab:42:d5:8f:44:35:10:9c:29:
         12:de:87:31:a8:df:b3:82:11:62:bf:8a:9f:7f:af:7c:85:ae:
         ca:d4:fc:f3:00:84:7d:f5:c3:c9:2d:84:61:98:5f:30:24:4f:
         60:7d:4f:b9:67:bd:b2:28:8e:d6:14:e1:40:04:75:31:3d:fd:
         16:7b:64:f2:28:34:db:e0:9b:20:5f:ea:54:8b:a6:1a:f6:fc:
         08:9c:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:33:22 2026 by rpki-client