Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa
File:                     6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa (raw, json)
Hash identifier:          j+85YFN7hO4hhcS5quSkP+8kWxjI5THTrBHhRpd7L3Y=
Subject key identifier:   A5:30:FE:D1:15:AA:62:F4:A4:6C:B0:70:7B:62:3D:BE:93:54:D2:AA
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584DD0905490988C71D55C3C3600
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        198.154.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:54:90:98:8c:71:d5:5c:3c:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=01336ae0-7e46-4db0-9df2-cd97c9d7a016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ec:88:3f:15:8e:af:da:d8:e4:ae:fc:07:6b:
                    6a:ac:20:57:f4:29:bb:f0:12:ef:98:d3:25:e0:1f:
                    da:5e:43:bb:4f:4d:5f:56:f0:bd:c3:e6:4d:c2:aa:
                    68:32:42:55:a2:1d:68:7d:e0:8a:c8:dd:ad:56:18:
                    69:bb:3d:2f:95:d0:be:28:a5:c8:9f:b1:c9:30:f9:
                    1a:eb:7b:41:51:ee:3d:0d:d9:76:a6:db:f6:4e:11:
                    89:e6:a4:53:e5:17:c9:73:a4:72:d7:3e:8c:f5:4d:
                    ac:6c:07:42:df:d3:11:b3:2f:7f:7e:8f:5d:26:42:
                    89:2b:d4:d2:46:f5:1b:c9:d8:0c:ec:ae:46:c2:ea:
                    5b:40:7d:3e:73:ac:49:5b:62:32:75:de:05:4f:64:
                    60:4b:64:b0:7d:2e:32:7e:59:41:30:2c:0b:f1:90:
                    d8:da:47:03:08:fc:cc:1f:98:47:e5:1e:0f:dc:b8:
                    88:81:e8:26:1b:2e:81:93:c4:06:0b:ba:a9:e8:4b:
                    db:7e:c1:e7:6e:95:f0:ed:2d:da:11:3e:0f:f0:44:
                    6d:e0:72:c3:06:56:c3:ba:44:84:21:13:10:85:4d:
                    97:ff:63:aa:9d:de:94:63:5d:c5:c0:6a:0a:f7:f4:
                    70:07:24:39:8a:e0:fa:3c:fc:d8:6d:07:b5:c9:32:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:30:FE:D1:15:AA:62:F4:A4:6C:B0:70:7B:62:3D:BE:93:54:D2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:82:20:92:a1:9c:42:b3:60:9d:4f:17:61:17:d7:7c:d5:0f:
         5d:b7:01:40:dc:3e:33:b4:f6:59:f8:6c:b6:eb:d6:d1:4f:7a:
         6c:5c:78:01:ca:04:38:49:7f:46:42:42:e8:ee:f8:17:b1:89:
         0d:78:20:f0:c1:40:ad:b5:87:7c:36:30:4e:0e:2d:d5:1a:f3:
         fe:b9:b0:7a:34:43:1c:d9:1d:b6:c5:1e:ba:e1:2b:25:bc:4e:
         9a:f2:79:41:d4:b7:9d:c8:34:70:bb:17:4e:0d:53:69:c1:33:
         3c:0c:28:39:6c:81:09:80:c8:04:88:45:56:b4:ba:aa:9f:84:
         11:40:b8:00:e4:d2:c3:cc:76:7c:32:5e:7e:d9:30:07:4f:17:
         60:56:eb:31:15:d0:c9:4e:a3:e5:16:2b:d6:13:5e:e3:85:26:
         dc:ea:c2:a9:bb:c8:43:67:ff:64:3e:b7:dd:8a:dd:bd:8e:de:
         f9:f0:8f:9f:96:84:81:bf:37:53:1d:1b:d7:44:ed:a5:53:1a:
         76:0d:1b:ce:e6:8a:a3:ff:5f:a5:cd:d0:ee:ea:34:d1:0b:dd:
         13:a1:67:04:ab:4f:12:25:02:93:c7:24:d2:8f:b1:0a:46:18:
         5c:c7:7a:fc:07:3a:e1:6e:ec:24:b7:84:de:bf:c5:b5:aa:15:
         b2:4e:4e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:58 2026 by rpki-client