Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/03e55ac8-e38d-393f-8076-f57b1137bddd.roa
File:                     03e55ac8-e38d-393f-8076-f57b1137bddd.roa (raw, json)
Hash identifier:          OtrB497UulTQLjSX1NNuMoayjv4z8iFD+mwU38Oysqo=
Subject key identifier:   05:31:CE:B8:98:BD:EE:24:DE:5E:7B:87:39:8F:FB:61:B9:B5:6C:D5
Certificate issuer:       /CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
Certificate serial:       010D0C9F4328584E1FA9A10B9591F205CC636180
Authority key identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/03e55ac8-e38d-393f-8076-f57b1137bddd.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     41690
IP address blocks:        198.54.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a1:0b:95:91:f2:05:cc:63:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=fa8be840-c0d5-48a2-b673-75615ff8f061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fe:ed:ab:c0:bc:c3:46:c8:c0:f7:32:38:e5:
                    bc:e1:60:02:10:be:df:64:f6:c9:11:f4:8b:27:0c:
                    f4:36:42:3a:c6:cb:89:f1:ae:9c:5b:4f:05:b9:8a:
                    13:2a:7a:a2:70:3f:29:05:dd:a3:14:09:ed:d3:b2:
                    d7:24:d3:6c:70:5f:2b:12:d4:7f:af:f1:07:4a:0b:
                    d3:86:24:9e:d4:5b:1d:24:3f:4a:4d:4f:a9:d8:45:
                    c0:69:14:12:94:6a:23:a9:34:69:6f:3e:e8:82:c1:
                    c2:6d:cd:fc:79:d6:29:31:1b:91:f5:b0:3a:ae:08:
                    1d:15:9a:87:dd:f0:ca:3a:f9:6b:9c:bd:63:4c:62:
                    ac:ff:40:bb:7d:c6:38:bb:a3:6a:67:63:38:94:8c:
                    c5:e0:c6:0a:98:9b:af:a8:9e:7c:67:7b:07:de:8b:
                    46:7c:56:98:cf:90:ee:27:1b:2a:89:b2:29:7c:2d:
                    07:d2:cc:ef:03:25:73:ac:55:3f:a9:99:57:af:66:
                    29:3a:ac:d1:99:c7:a0:7a:a3:e7:b3:aa:2f:b2:91:
                    6a:6d:35:16:38:b9:64:02:a3:df:a9:cb:df:de:91:
                    0c:10:2d:20:a0:c2:93:4c:dd:2e:5d:54:c2:9f:0e:
                    6d:9e:f9:48:b9:bf:f8:36:ac:dd:87:0a:99:ce:c1:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:31:CE:B8:98:BD:EE:24:DE:5E:7B:87:39:8F:FB:61:B9:B5:6C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/03e55ac8-e38d-393f-8076-f57b1137bddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl

            X509v3 Authority Key Identifier:
                keyid:88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.54.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:b8:ce:51:6a:13:a4:33:56:fb:f8:4f:f6:81:9f:5c:9e:
         92:21:f3:4a:76:17:2d:d5:75:09:e2:1f:ae:8a:6f:e3:7b:1d:
         ab:b9:1d:e7:e4:6c:72:b6:20:1a:af:9c:68:53:fa:d1:0b:4c:
         d5:7b:77:23:75:cf:ea:ed:32:55:68:70:a3:f7:7d:01:e6:35:
         07:e3:f8:f2:93:ba:ed:ad:ee:b2:9d:c1:a3:cf:59:ff:ed:38:
         ad:b2:b9:3c:8d:0c:2f:60:55:b6:24:3e:18:a2:d4:d8:e7:d4:
         e1:21:c8:64:9d:47:97:95:c5:b4:9a:d4:7b:e7:37:e2:56:10:
         c0:b6:ae:17:6a:a7:2b:3d:4c:a9:73:28:0b:12:e7:83:3e:e0:
         70:b3:89:97:fd:7c:1c:7e:4e:32:45:01:fe:b4:15:6f:d3:57:
         40:cd:4f:ec:fc:c1:79:d1:53:13:ca:92:c7:53:9e:5a:ca:42:
         2c:6f:f9:39:68:47:32:65:8b:23:a8:bc:57:65:48:85:f2:de:
         96:91:55:7c:4e:f8:6a:59:c1:c5:b0:e8:3a:9e:48:28:96:3b:
         6b:13:3a:c1:eb:69:2c:71:9e:55:c5:04:ce:c7:57:b9:ee:33:
         1c:6d:d8:65:db:6e:a1:33:06:4b:bf:33:db:f2:3c:02:da:bf:
         c5:da:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:56 2026 by rpki-client