Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33dbe6ec-7231-343d-b6e1-40315c1dd88e.roa
File:                     33dbe6ec-7231-343d-b6e1-40315c1dd88e.roa (raw, json)
Hash identifier:          mYN1BueLFtBuEFzb95v7WGTYU956FyvK1KU8aoL91Fc=
Subject key identifier:   D7:FB:32:3B:06:D3:3D:E7:C9:EB:A5:05:3D:E1:51:A7:BD:24:E4:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E296F1759648F2EB49DCC75B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33dbe6ec-7231-343d-b6e1-40315c1dd88e.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     396609
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:17:59:64:8f:2e:b4:9d:cc:75:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=b061a998-dba2-4d3f-a548-a1f584209fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:e9:57:9e:78:19:c2:61:3a:36:b6:37:f2:
                    f6:eb:46:a2:e2:f5:76:93:9b:70:6c:ee:1d:b9:7b:
                    28:5f:33:1d:20:26:e8:2d:f9:84:7d:7d:00:04:13:
                    f2:e6:93:67:24:fb:47:70:ad:e1:b4:47:67:3f:d5:
                    bf:d7:88:1d:ad:3b:e0:62:a5:7d:39:1d:1b:26:30:
                    87:d6:ab:2e:0e:73:23:a2:a2:0b:99:fc:ad:a9:f0:
                    22:ce:12:9c:c9:21:1c:e1:65:4e:2a:4c:34:cd:f9:
                    1c:19:a2:b0:bc:f5:e6:10:94:d1:a9:08:a3:7c:d3:
                    09:34:63:f8:36:79:7c:ae:47:0b:90:ca:0f:f0:07:
                    35:c3:f0:6a:ee:eb:c0:ee:1f:42:7d:6c:08:65:3b:
                    0f:e2:b6:17:b1:21:6f:c2:ac:72:50:c8:97:b2:a6:
                    a9:1d:7d:d5:2f:ba:97:16:c3:8a:08:f9:83:9e:e5:
                    55:96:56:47:ba:c5:2d:fa:60:fc:0a:2a:39:ba:ac:
                    eb:07:c0:86:c6:22:bd:84:7c:87:70:27:2b:8d:93:
                    ba:e9:1a:20:13:fb:8e:14:8d:b3:79:cc:9c:2f:c5:
                    ca:23:01:35:58:ad:0f:84:bc:6a:9f:87:23:50:90:
                    0f:8a:84:cb:90:48:c0:1b:af:64:c5:26:36:c3:e3:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FB:32:3B:06:D3:3D:E7:C9:EB:A5:05:3D:E1:51:A7:BD:24:E4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33dbe6ec-7231-343d-b6e1-40315c1dd88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:6c:81:59:d8:36:c0:15:01:c6:8f:78:f2:81:94:65:b1:de:
         98:3c:35:aa:ac:f4:f4:c4:94:7b:13:6f:19:90:a2:44:5f:b3:
         04:6b:a1:1d:f5:21:a5:c3:09:90:97:a8:66:5e:2b:b6:df:8d:
         31:3e:a7:bf:9f:a0:9f:a8:0f:c2:1f:63:b2:cc:c9:59:f0:08:
         39:3c:94:54:d9:5e:25:bd:b4:3b:48:09:ca:3e:6c:2c:13:5d:
         57:33:57:a2:30:1a:42:d5:5b:5b:e7:d0:89:d8:7d:83:17:67:
         5a:96:be:0f:85:2c:43:40:67:f3:85:d1:89:cc:45:f2:6a:38:
         37:a6:64:51:d2:27:b1:04:7a:fe:e4:d3:55:89:4f:91:2d:ad:
         f3:30:d6:b5:0b:6c:b0:e6:40:a6:cd:bc:47:95:c7:b3:49:f1:
         55:92:b7:13:c1:4e:a1:e6:11:b3:31:e8:48:8c:1c:58:5a:1e:
         1a:43:65:43:ce:9b:eb:ab:9f:8b:09:8f:1f:00:94:36:86:aa:
         ae:f5:a6:e6:d0:a9:68:88:6f:6f:15:be:96:6a:af:73:a1:71:
         bc:38:12:9c:bb:9d:94:df:67:d5:d0:66:69:11:d0:cd:cb:ee:
         de:2e:f6:90:b5:bd:3c:c7:1d:4e:eb:9e:ac:5c:c3:49:8f:82:
         20:54:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:21 2026 by rpki-client