Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa
File:                     ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa (raw, json)
Hash identifier:          eeevl4M1wiF5NZmQVl73mOTB2863VskZijLVTBiakII=
Subject key identifier:   C8:EE:ED:20:64:7D:B3:B3:5A:83:9B:DD:BB:AC:F5:37:C6:B3:5A:F6
Certificate issuer:       /CN=209791d7-ad3b-4334-ba56-5771f29ad3af
Certificate serial:       010D0C9F4328584DBE6B224F8E6C64342DFAB680
Authority key identifier: 26:DC:9B:90:CC:D5:D2:B1:CD:1D:D8:2B:8F:E7:69:1F:A5:01:26:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     6143
IP address blocks:        192.225.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:22:4f:8e:6c:64:34:2d:fa:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209791d7-ad3b-4334-ba56-5771f29ad3af
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=0439b6f6-49ce-4789-9076-a22a4a9e9b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:d5:c0:b8:8a:f0:65:bc:0a:38:a9:43:97:
                    a6:bb:1a:e6:a6:46:ea:78:11:c1:12:a0:0d:31:64:
                    13:db:5a:5b:95:d4:a3:6f:32:bc:ba:ab:4e:06:3a:
                    a4:c8:72:06:9c:83:c2:8a:26:ff:f0:4c:2a:d1:dd:
                    2d:af:71:73:a0:c0:33:75:bd:83:9c:72:dd:85:11:
                    10:58:a4:a3:8f:91:2d:f9:05:05:64:93:28:52:cd:
                    47:61:22:2c:c0:b8:52:d1:fd:4d:a7:54:16:28:0c:
                    9c:f8:34:cd:b8:d5:23:84:45:63:52:c8:67:1e:0a:
                    c8:4d:24:df:83:d3:a8:44:4e:ee:6c:d8:cd:0e:85:
                    6e:43:95:a4:dd:84:63:1e:ae:8e:f1:f1:8e:e0:3e:
                    cc:a9:07:7a:50:fb:93:53:b0:32:b1:97:21:da:7d:
                    40:fd:27:40:ba:70:4e:76:66:be:4d:f0:c0:df:6c:
                    c0:22:b4:06:33:7e:94:a0:f4:73:97:d4:2e:29:3c:
                    33:48:ef:51:f6:af:cf:f7:8e:60:d2:0e:12:42:4a:
                    9f:c4:99:b1:35:e4:11:58:2a:3b:25:b3:72:2e:9f:
                    b5:5a:cf:2a:a0:e0:5d:0a:ac:03:09:f9:1f:b6:21:
                    1b:81:7b:d6:dc:26:76:81:ff:1c:81:e1:33:4c:f5:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EE:ED:20:64:7D:B3:B3:5A:83:9B:DD:BB:AC:F5:37:C6:B3:5A:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.crl

            X509v3 Authority Key Identifier:
                keyid:26:DC:9B:90:CC:D5:D2:B1:CD:1D:D8:2B:8F:E7:69:1F:A5:01:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:15:64:dd:30:4e:5e:44:8a:8d:d9:d9:65:ac:6d:ba:7b:
         ad:18:b7:90:de:7e:0f:ee:aa:f1:bb:8f:bf:ad:3b:75:22:b3:
         d8:71:fa:a2:2b:48:49:29:54:d1:7a:1b:65:ae:f3:af:4a:aa:
         5f:67:0f:e3:7b:76:e0:e0:3e:2a:7f:b1:ce:bf:11:26:ff:07:
         2b:72:6d:3f:ea:a6:c7:20:19:da:f5:c4:53:b6:48:1b:67:45:
         f1:d0:d0:17:d4:4f:dc:52:34:1b:cf:7a:c1:f9:76:2d:f4:d9:
         ad:bc:31:b3:d6:0a:28:d2:fe:27:39:ed:d6:e0:52:e4:6a:f9:
         85:4e:6c:42:8b:39:6d:24:26:b6:11:68:e7:af:69:9b:03:b8:
         99:bb:56:8e:cc:03:8c:8c:37:12:af:69:8a:71:02:67:8c:87:
         30:91:a9:08:7f:7e:a2:89:39:98:fc:00:cc:5e:0f:39:33:0a:
         9e:97:f0:fc:b4:cd:50:46:05:50:87:e8:e7:c0:87:2f:35:ea:
         0d:be:39:1a:43:fb:c9:94:7c:3a:ca:44:6f:75:40:35:92:34:
         eb:15:f8:60:43:c9:e8:12:45:35:33:87:00:53:5b:08:57:9f:
         86:77:e3:37:33:56:ee:7f:d4:46:54:19:b2:f5:a1:58:ad:49:
         a1:46:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:32 2026 by rpki-client