Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa
File:                     a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa (raw, json)
Hash identifier:          6CUcZFeNd/wrD34FcEzWqJgfMXFJ/CsYdTkzXghSTeI=
Subject key identifier:   41:00:A5:3C:9C:F0:D8:84:55:3E:27:3D:29:B2:8A:0B:32:5B:7D:49
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584E104F32416F9EC5546A242800
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     13998
IP address blocks:        198.215.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:32:41:6f:9e:c5:54:6a:24:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=7d1c0082-feeb-456d-bbbe-872f526f4271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:b1:3e:3c:38:06:a7:24:89:2d:15:36:f0:
                    2c:8b:d9:6a:e6:14:19:d2:e4:ff:17:37:55:2f:53:
                    9c:22:ff:66:25:3f:d9:9f:3a:99:54:1f:b1:46:30:
                    e8:97:6e:14:52:b4:79:80:a3:fb:ed:91:d0:cc:f9:
                    da:7c:c2:85:37:e3:7c:6f:ce:7d:0f:aa:dd:86:24:
                    c6:a7:8a:a3:8f:c6:24:49:1b:15:c1:f2:2d:20:ef:
                    5c:22:e5:71:37:d4:0a:48:13:e7:81:9b:ac:2f:9a:
                    0e:62:ed:4b:3a:c8:f7:56:d4:81:fc:26:ca:92:ad:
                    7f:ce:e3:fb:b6:e1:10:01:5b:bd:63:8c:34:c7:f1:
                    59:62:c5:1c:f8:b8:38:0d:55:e6:62:1a:73:55:c5:
                    31:29:ef:08:82:88:1d:4a:bc:15:d4:0b:0d:1f:ce:
                    7e:e8:18:d1:66:8d:fd:81:96:7d:ab:3a:2f:ca:ba:
                    71:61:e7:25:f8:91:5f:32:01:b9:cc:96:ce:d2:3a:
                    1f:bb:fe:07:54:a0:e0:50:b6:bb:0b:21:3c:a0:da:
                    5b:53:70:e8:fa:7c:6e:de:cb:d9:00:a2:be:23:ec:
                    57:e1:93:a1:39:97:62:ae:1f:13:09:58:07:ba:e7:
                    99:03:9a:07:8e:f6:0a:88:98:47:dc:ac:fc:1e:48:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:00:A5:3C:9C:F0:D8:84:55:3E:27:3D:29:B2:8A:0B:32:5B:7D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:f8:86:c6:a7:2a:7d:81:93:27:8f:10:1b:9d:69:fc:79:
         23:d2:15:1e:af:26:e9:f0:d1:40:25:7f:27:bc:6e:c2:4c:74:
         1f:04:18:23:ba:8f:99:30:15:a3:db:30:89:c7:a3:3a:b1:76:
         85:e2:51:2b:46:2e:59:4c:12:bc:ab:09:df:64:bb:22:68:14:
         0d:83:32:5b:a3:bd:15:81:f7:69:1a:90:7c:3f:0a:9c:60:46:
         b0:88:84:7e:8d:52:55:24:df:3b:9b:27:99:35:1f:c4:e5:95:
         40:bb:28:2c:9a:c3:d7:b6:b8:95:9c:13:85:ad:83:5a:bd:a5:
         4a:59:83:52:a4:4d:e7:d5:fa:99:07:1e:cb:7c:a2:17:91:8a:
         a5:c5:e2:52:32:76:3a:ef:be:05:f6:2e:5b:b4:07:fb:50:8d:
         01:91:e4:05:9d:42:7b:a6:8f:ab:6f:96:03:68:32:08:a0:ac:
         99:92:96:ad:6c:07:42:62:58:e4:52:77:cc:e9:4f:35:7f:49:
         f6:9c:b7:01:db:7d:f9:32:75:9a:cc:dc:27:69:8a:15:86:91:
         13:8d:06:a6:c2:a3:7a:96:55:35:4e:c7:2b:94:7d:b8:42:40:
         0a:5b:9c:6d:95:81:fa:6f:45:1b:6b:8a:53:b3:83:65:ce:55:
         d9:cf:fb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:32 2026 by rpki-client