Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/5c32ceb6-bea5-3455-8f5f-72b8654d7d88.roa
File:                     5c32ceb6-bea5-3455-8f5f-72b8654d7d88.roa (raw, json)
Hash identifier:          Paa9lll+qAYxPuckkM23qJ9cKVqI0GdCD2XO2j81dTk=
Subject key identifier:   09:70:57:A3:8E:C6:A1:FB:F5:95:B6:8C:CF:44:46:17:08:E7:F9:FE
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584DA11AEBADE93772525F4E4EC0
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/5c32ceb6-bea5-3455-8f5f-72b8654d7d88.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     2675
IP address blocks:        198.103.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:eb:ad:e9:37:72:52:5f:4e:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=4262f944-5a9f-41c6-bd33-0f329f21474b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:c1:63:38:39:f5:13:c2:c1:a3:b5:8a:86:
                    58:ea:fc:71:30:e7:4b:b1:43:9a:44:4b:88:3d:34:
                    79:a6:24:e8:ca:a7:68:58:c8:d3:ac:7f:89:2f:21:
                    88:d5:45:6c:e2:a6:d0:20:87:d0:94:ea:59:b7:43:
                    fc:ef:f4:81:6e:5b:5f:79:96:c5:66:41:75:a1:da:
                    ed:e7:6b:c2:e9:91:43:c9:0e:d1:7a:c6:d4:e7:b3:
                    f3:7d:44:7f:f0:e0:80:b2:a9:de:d7:fa:89:68:91:
                    1b:65:ab:5b:29:a9:f9:85:bf:29:9d:86:f4:2f:51:
                    4d:80:45:ac:1f:bd:73:59:2b:f2:4d:d4:7a:8e:b9:
                    8c:8e:c0:06:f9:b7:06:34:4c:39:05:8d:2e:52:61:
                    99:43:6b:f5:91:a3:6a:e9:bc:a4:ca:a6:0b:a9:56:
                    74:be:db:23:11:b9:de:12:2a:08:69:e5:b8:fb:63:
                    3a:8b:4f:66:c2:47:8e:41:30:56:6f:e0:f9:c5:47:
                    e6:fd:0c:60:de:c6:42:9f:da:e1:a9:e4:b0:f9:d5:
                    25:78:be:da:0f:da:de:0f:c1:a4:88:10:03:db:e4:
                    15:53:08:85:6c:4c:92:41:13:e8:1c:de:7f:e9:55:
                    fc:52:61:2e:d1:fe:59:66:2e:48:e9:e1:59:c4:06:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:70:57:A3:8E:C6:A1:FB:F5:95:B6:8C:CF:44:46:17:08:E7:F9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/5c32ceb6-bea5-3455-8f5f-72b8654d7d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.103.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:b5:4b:6c:3a:e6:d7:72:d4:fe:af:c0:51:36:f4:45:09:
         f6:31:76:de:17:e8:c9:38:2b:4a:1c:e3:e5:36:56:3e:53:2c:
         af:4f:ff:d5:67:cc:89:94:ac:a0:65:f9:f6:3f:6a:ea:17:53:
         a8:86:9e:05:6a:13:71:2c:2e:9d:48:ad:25:ce:bb:5b:c2:0d:
         a1:30:f0:b5:41:ec:61:75:5f:87:d3:2f:df:5e:32:a7:60:f5:
         ac:8e:27:80:08:e1:6d:f4:98:ef:c0:46:21:54:43:b8:64:64:
         37:16:ae:36:0b:e6:fd:d2:53:fe:89:2a:fb:ce:03:ac:f5:64:
         1d:54:ee:37:a1:87:e4:f9:8c:c8:ad:71:00:53:b5:9b:18:1a:
         cc:aa:38:b6:67:dc:b5:5e:7f:db:32:b4:de:84:fb:37:06:7e:
         0f:15:cc:e5:12:09:40:a6:40:bd:ae:69:59:83:1b:97:d3:e2:
         d1:f2:d4:e3:f2:af:c7:87:d2:d3:d7:db:0a:e3:25:e4:a3:67:
         89:47:dd:0a:2d:eb:8d:17:99:1e:b6:15:be:03:bd:02:bf:07:
         77:8f:7c:30:ab:2b:b6:c4:b6:e8:db:7c:2b:3d:af:5a:db:0d:
         b6:5b:cc:5b:dc:96:09:51:77:13:c4:cc:a8:17:e8:df:88:d8:
         d3:b7:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:31 2026 by rpki-client