Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ae04e02-eac6-3457-924c-8fb4b09a8856.roa
File:                     4ae04e02-eac6-3457-924c-8fb4b09a8856.roa (raw, json)
Hash identifier:          xXUk1VoWMaO0Ywihn6kOlyhrm0obvYGWj8w6V31gds0=
Subject key identifier:   91:1B:D3:20:C0:75:1D:C7:AE:86:9A:F7:B9:FA:84:90:82:94:FF:6C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BB8B8152DE9DC4C29C940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ae04e02-eac6-3457-924c-8fb4b09a8856.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        198.45.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:b8:b8:15:2d:e9:dc:4c:29:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=906c6fe1-0bde-417d-988d-03639187c6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:1a:09:f9:75:d9:37:00:51:2d:31:a6:f9:
                    48:a5:e0:d1:bf:1e:e6:08:86:a1:9f:60:3a:ce:ac:
                    9d:29:3d:d1:4a:10:46:dd:81:84:91:96:7b:56:52:
                    ad:81:37:23:cf:ba:e4:a1:3b:6a:85:b3:a2:7b:e8:
                    3d:cc:1f:b4:46:6c:8e:0f:4c:1c:b9:d1:12:34:e7:
                    3f:bd:1d:77:9b:4f:85:ad:63:5e:02:bd:e7:5a:c2:
                    2f:fe:d6:67:73:86:b8:57:c6:d5:a9:f5:84:91:97:
                    84:0b:80:a9:e1:62:c7:c1:19:6b:e9:e3:02:15:d6:
                    9f:48:bf:7c:a5:25:36:7e:12:c4:be:09:96:98:cc:
                    26:e5:fd:45:1c:19:70:e0:77:ae:5d:a1:81:05:b6:
                    3e:4f:fa:d3:49:2c:2d:19:71:cc:60:cf:ad:bc:46:
                    d5:21:8e:c6:2c:ab:e2:e9:61:89:96:a8:ff:de:cf:
                    cf:c4:b7:91:1e:f4:23:b3:bb:b7:f3:f7:97:32:66:
                    a9:2f:1f:c8:7c:43:2a:49:22:f6:0e:a8:94:1a:76:
                    ad:b2:4d:48:78:d5:ca:32:90:97:13:e1:2c:b4:6b:
                    6f:46:9f:ab:ec:4d:f7:93:b2:7d:ea:f2:7d:19:9d:
                    8e:97:0f:1f:d5:63:ad:98:50:86:d9:00:a4:70:8f:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:D3:20:C0:75:1D:C7:AE:86:9A:F7:B9:FA:84:90:82:94:FF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ae04e02-eac6-3457-924c-8fb4b09a8856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:82:31:fe:34:fe:8e:1a:5c:1b:ea:09:d2:a8:98:6a:8e:31:
         24:5f:f4:5b:86:be:8d:12:46:8d:72:05:0d:eb:44:f8:73:cd:
         34:15:7f:fd:99:a8:4d:03:26:18:b4:9d:9e:d7:bc:90:47:7b:
         50:87:92:73:f1:2a:c4:e0:5e:c8:02:c6:79:54:c0:6c:85:d2:
         84:be:1c:ca:b8:79:37:39:a7:e3:c7:80:09:0b:fb:14:f5:e4:
         5d:e2:f6:fe:c7:4c:db:81:c1:72:14:7a:62:f3:d7:ac:6f:a1:
         6f:41:c8:df:d8:e0:8c:ea:5f:68:a4:1a:2b:1f:1d:d5:c8:10:
         f8:1a:eb:e0:7a:fe:c9:d5:59:6f:9c:10:ff:5b:72:97:13:36:
         89:e4:8c:eb:54:ee:7b:d6:2b:d6:68:b5:4b:5e:02:d7:9d:51:
         5c:cc:92:34:36:5d:da:0d:95:1f:9a:bc:a4:05:23:5f:9a:08:
         85:96:37:b0:9c:75:42:34:9d:6b:88:5e:f7:fd:76:22:16:80:
         51:ee:ee:e2:91:b8:20:33:84:67:da:b3:6d:f3:90:b9:94:87:
         bb:25:0c:14:e0:45:2d:09:be:6f:a6:45:f5:d3:3c:1a:16:90:
         45:be:87:f1:39:1f:79:ef:9d:cc:36:7e:e0:4a:09:75:98:e7:
         9c:91:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:33:18 2026 by rpki-client