Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa
File:                     4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (raw, json)
Hash identifier:          2ckeEq6Nkv23t1PzMZZWXOcHKZ6FcPCHmR9bFyYYYg4=
Subject key identifier:   C7:78:F8:14:07:26:F4:28:1E:B5:A6:BF:61:E0:06:D6:E0:EA:CC:6C
Certificate issuer:       /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Certificate serial:       010D0C9F4328584E296F054EB54F2A8BB6760400
Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     22966
IP address blocks:        198.51.243.0/24 maxlen: 24
                          198.51.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:05:4e:b5:4f:2a:8b:b6:76:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=3542bb26-6047-4720-b4ad-728e4e106993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:3f:8e:4a:4d:7e:37:dc:aa:d7:64:48:3c:
                    93:b2:ac:31:16:ab:0e:0b:77:90:3e:34:eb:11:28:
                    9f:13:22:d9:79:7c:9a:22:95:ed:b7:04:d9:d6:8a:
                    b7:83:29:11:8f:49:e8:21:8c:ca:66:82:a2:00:df:
                    fd:2e:2e:5f:c3:f1:53:0a:a7:de:ea:a0:92:bf:82:
                    a4:6a:9d:ae:a0:ae:30:8c:a2:be:fa:fb:20:b1:ca:
                    65:db:df:fc:ba:e4:cb:7a:53:04:c3:33:bd:f9:49:
                    87:de:09:33:bd:14:99:3e:d6:6b:8b:85:d8:b1:4a:
                    50:96:56:62:84:1f:9c:4c:86:3e:57:9d:fa:4f:61:
                    9e:0f:a0:a1:88:7c:f8:e2:23:10:af:d0:a7:cf:32:
                    d9:89:4b:1a:18:f0:ee:ef:fc:65:12:0e:f5:f7:68:
                    1a:e8:01:86:cc:75:6b:3d:4f:65:0d:2f:f3:28:bb:
                    c5:65:ac:89:ab:01:fa:42:3e:0c:47:74:10:67:ef:
                    35:cd:b2:59:7a:1d:e1:a3:14:0a:f3:b1:c7:02:32:
                    aa:70:9e:b3:4d:ed:43:93:ce:b3:e1:c0:80:86:88:
                    2c:ec:0e:b2:55:fa:eb:42:78:e2:b5:72:a9:bb:d4:
                    e9:0d:25:51:ed:61:86:24:1e:d5:01:30:77:88:dd:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:78:F8:14:07:26:F4:28:1E:B5:A6:BF:61:E0:06:D6:E0:EA:CC:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl

            X509v3 Authority Key Identifier:
                keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.243.0-198.51.244.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:e5:30:82:8f:bc:12:f2:d5:e8:4d:2a:b8:47:ac:8e:5f:df:
         e8:f1:c1:13:f9:08:c9:bb:c5:59:94:ab:40:a7:aa:06:5d:7e:
         ad:07:48:30:6d:10:78:17:f2:e8:f1:66:bc:a5:97:7c:1d:65:
         b9:63:b9:28:29:7e:dc:76:e3:83:2c:3b:8e:5a:64:50:28:08:
         86:63:63:ca:e7:a9:eb:ea:0e:d5:73:b2:68:53:61:d7:8d:3b:
         1e:90:90:67:01:bb:5f:42:74:11:62:76:10:13:2e:d8:a2:4f:
         f1:98:de:94:48:dc:8a:5a:3a:b3:92:cc:62:12:7c:ff:9b:a5:
         7b:a8:b4:f9:67:64:4d:0a:59:cc:c2:c8:c3:79:01:77:f6:a6:
         b3:bd:48:36:65:81:e8:8e:43:18:91:a7:c2:eb:84:6b:43:8a:
         bd:10:61:65:19:2c:ba:ec:e8:56:e8:c5:a4:52:57:2d:41:23:
         27:57:9a:05:c6:58:2d:b3:03:fa:1f:56:f0:14:6a:b3:82:97:
         02:d7:ac:da:6b:fb:8b:3d:8e:84:60:18:ea:67:f5:33:33:a1:
         05:b8:a7:4a:e2:a3:15:51:e9:17:e0:47:53:de:5a:5c:1a:d9:
         be:3f:b7:75:88:c9:fb:b2:b0:e2:06:bc:0d:54:46:ce:0b:80:
         d3:a2:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:49 2026 by rpki-client