Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eaaae9b4-d60a-33cf-bb9f-5952644fea62.roa
File:                     eaaae9b4-d60a-33cf-bb9f-5952644fea62.roa (raw, json)
Hash identifier:          HtDvKR0YTHKtnW2mHRlCu4/7L0cC+E8THhlHoaS/1Jo=
Subject key identifier:   43:1C:FB:CB:40:57:43:57:9F:C6:C4:5B:F3:1B:A9:E9:FA:0E:58:A0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A522EE5768C1C462ED8D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eaaae9b4-d60a-33cf-bb9f-5952644fea62.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        198.41.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:22:ee:57:68:c1:c4:62:ed:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=dd771353-4d79-4ade-828a-bf847284fa84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:17:ea:06:a5:e7:b6:5e:c2:9b:6d:91:7c:
                    47:69:f6:c4:03:7d:e9:c2:46:7d:7d:98:6a:b6:11:
                    94:d7:37:75:d5:92:d8:30:5e:f9:21:11:48:9f:4f:
                    e4:6e:6c:ac:92:f3:c9:ec:30:53:95:50:6f:cf:a7:
                    1c:3f:cf:7c:b8:30:94:c2:57:45:84:49:4c:a7:43:
                    2b:04:ff:0b:b8:97:f1:23:a6:cc:78:fa:78:ba:fd:
                    7b:4e:bf:3d:64:10:9a:61:c0:b6:bd:05:56:c9:8b:
                    f6:dc:38:2d:74:e2:39:94:10:3e:2d:97:da:fe:aa:
                    7f:b7:04:4a:b9:65:8a:49:c9:a5:23:c5:b7:2d:70:
                    a4:35:9e:14:8c:13:52:11:7b:28:26:0e:4f:62:59:
                    d8:e8:ef:02:f0:a8:d4:fe:96:8a:ee:76:44:b1:8b:
                    58:58:63:8b:70:79:2a:09:cf:d9:d8:42:0b:ab:39:
                    50:57:9a:97:e5:7e:0a:c9:e6:fb:8d:7e:1a:c8:2c:
                    ab:a5:ff:1c:88:d9:9e:26:74:c7:e3:ec:8d:00:d3:
                    04:01:1d:77:bb:74:1d:22:fd:95:99:6b:16:86:cf:
                    b5:49:7c:d0:74:0e:cc:fc:f5:7b:da:3c:3d:5e:74:
                    99:22:31:f9:f9:c6:0a:84:b3:a4:a1:7a:e0:2e:06:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1C:FB:CB:40:57:43:57:9F:C6:C4:5B:F3:1B:A9:E9:FA:0E:58:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eaaae9b4-d60a-33cf-bb9f-5952644fea62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:4b:89:9a:73:9a:bb:a9:af:29:a4:f4:0b:1c:20:2c:7b:
         d9:79:cb:9c:a0:69:a1:47:48:28:71:4f:ac:f1:a1:9a:03:b9:
         d0:50:41:57:f2:7e:06:a8:33:2e:70:d7:b4:19:0a:e9:4d:c6:
         0f:dd:3d:79:ba:8c:d9:24:c5:21:c6:4e:77:91:e6:26:10:46:
         23:6c:c4:e3:83:fb:3e:1a:99:5d:13:c1:c8:fb:8a:f5:39:f3:
         06:30:db:16:4f:5c:cb:75:22:f1:82:c1:cf:15:4f:47:39:a1:
         13:2c:49:f8:7c:5a:95:19:ad:03:d9:cd:39:5c:91:52:c2:ec:
         0d:13:a5:28:fc:e2:20:49:c1:c5:32:2d:d1:08:d3:6a:ee:db:
         8b:f7:12:4c:34:eb:25:fb:3d:5c:91:86:d4:79:16:b5:b8:a5:
         e6:fc:91:e5:f3:f3:3a:f0:5c:35:1e:1d:fe:ce:08:0d:44:a4:
         28:bb:fb:56:d7:fb:32:b5:87:13:5d:11:b3:f1:a5:0f:08:dd:
         a2:52:59:80:9b:14:c2:cb:b5:99:55:65:cf:b6:b9:23:16:fc:
         d2:03:17:df:49:23:97:c1:dd:e9:87:77:84:38:ad:e5:7c:18:
         b7:7c:ef:65:e4:69:73:7e:99:e2:37:b8:bc:c0:51:d4:80:eb:
         ec:13:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:15 2026 by rpki-client