Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/366b95e0-cd96-3a0b-ab6d-b7d7311e87c8.roa
File:                     366b95e0-cd96-3a0b-ab6d-b7d7311e87c8.roa (raw, json)
Hash identifier:          Jyg/ZpU2MzozoJ62ix+G7Y/Fp7+wHO1bc/8EVEJzvMQ=
Subject key identifier:   05:36:2E:21:AE:E9:8F:9D:95:8B:BA:AD:41:F6:98:D9:5C:AD:1A:1F
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584E104EDF259910597F236953C0
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/366b95e0-cd96-3a0b-ab6d-b7d7311e87c8.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     6922
IP address blocks:        198.215.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:df:25:99:10:59:7f:23:69:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=658caf6f-03fb-4d9f-a666-e3713bfb3472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:01:17:b2:7c:42:e3:7a:1e:b8:28:d2:62:
                    86:9c:28:b2:30:25:f3:59:03:4f:02:ae:2f:0d:57:
                    a8:5c:0e:3d:27:f9:ba:1e:5c:40:f2:92:ee:fd:ee:
                    eb:21:77:9f:fd:df:81:41:e7:4a:bf:25:ec:1b:b7:
                    81:ba:52:54:a3:3c:99:a7:3a:f2:ce:fc:fa:5c:29:
                    79:74:08:81:4c:72:b6:71:3c:92:90:82:a2:00:22:
                    82:18:f3:26:ed:3d:79:ae:f9:55:54:53:0b:e3:43:
                    7a:e7:e6:f8:66:b9:ee:34:06:af:1f:44:76:0b:ef:
                    9c:30:ba:d7:f5:fc:ac:95:66:0b:8b:8b:83:79:75:
                    04:01:09:d2:ca:6b:87:29:a8:e0:02:b0:6e:cb:46:
                    d2:fc:21:b5:09:b1:94:0e:42:66:86:03:7b:25:6f:
                    84:86:90:0c:05:9b:71:7c:37:43:e9:84:cc:6e:d4:
                    fd:61:bd:54:29:4f:bd:ea:85:f1:dd:00:64:81:1d:
                    41:37:5a:e3:43:80:9c:65:66:68:00:85:87:23:4c:
                    f6:61:18:76:ba:bd:90:74:3b:3b:6e:5a:93:00:66:
                    d4:7c:31:97:15:f9:07:0c:de:13:e1:c4:f1:33:d3:
                    64:0a:3f:1d:57:f2:85:f1:11:17:ac:9d:46:59:7b:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:36:2E:21:AE:E9:8F:9D:95:8B:BA:AD:41:F6:98:D9:5C:AD:1A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/366b95e0-cd96-3a0b-ab6d-b7d7311e87c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:0e:7f:e6:42:e5:67:f9:91:9f:d3:1d:73:61:5e:96:a6:
         e0:d5:19:db:c6:d9:53:49:ca:ea:a2:2f:de:ed:18:03:4c:9b:
         bd:03:a2:c2:5a:a1:43:9e:80:81:1c:ac:1f:46:b6:81:74:fd:
         ed:39:2f:97:5e:21:1b:fa:47:a5:79:b6:00:7e:b0:b7:ab:9c:
         f3:d6:68:e0:78:6d:02:30:6d:0e:14:74:58:78:16:09:32:40:
         5e:5a:a0:5a:2e:15:94:08:6e:a0:75:b4:b3:67:2c:2b:07:d4:
         d0:5d:90:99:0f:f2:e8:a0:31:61:8d:b7:d3:77:34:59:df:7e:
         14:52:d0:33:49:94:10:d4:0d:05:be:30:98:f4:52:3a:f3:f9:
         5e:30:17:ae:4b:0c:8b:bb:cf:d0:72:2a:87:b3:49:32:d6:f6:
         6e:f0:5f:4f:2c:cf:0f:4f:80:0a:48:cb:74:52:17:c3:66:d8:
         01:d6:8e:c2:40:96:75:8c:5f:2a:19:71:cd:90:91:c6:9a:7d:
         f3:2a:70:97:22:2d:4d:1d:f3:b3:ef:e3:11:df:e1:db:c0:c3:
         89:58:45:98:e4:13:96:29:2b:5a:1e:ae:44:f3:d7:08:fc:c7:
         ed:e9:17:45:6d:10:1c:0b:7f:b8:6e:4c:e3:3d:53:84:db:94:
         58:3e:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:26 2026 by rpki-client