Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/6419ec41-653c-31b4-a7ef-abd9cd054278.roa
File:                     6419ec41-653c-31b4-a7ef-abd9cd054278.roa (raw, json)
Hash identifier:          AtgM1mQaau0ASJb8boYqD2Z2cxpp706QwQm+RwlXDOI=
Subject key identifier:   7B:D3:F8:77:B2:29:5A:FB:92:85:45:79:26:DB:E4:71:37:11:F5:69
Certificate issuer:       /CN=a5daac0f-4c03-4977-95e3-914ed717fe6e
Certificate serial:       010D0C9F4328584E9C21828A45FA523A9EF36C00
Authority key identifier: 2C:AB:CB:92:B3:A6:48:C0:82:25:1A:65:26:C1:3C:C5:19:BF:79:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/6419ec41-653c-31b4-a7ef-abd9cd054278.roa
Signing time:             Fri 24 Jul 2026 23:02:08 +0000
ROA not before:           Fri 24 Jul 2026 23:02:08 +0000
ROA not after:            Thu 22 Oct 2026 23:02:08 +0000
asID:                     17274
IP address blocks:        198.184.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9c:21:82:8a:45:fa:52:3a:9e:f3:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5daac0f-4c03-4977-95e3-914ed717fe6e
        Validity
            Not Before: Jul 24 23:02:08 2026 GMT
            Not After : Oct 22 23:02:08 2026 GMT
        Subject: CN=17dd48e3-8873-4d90-8aed-f8f3489ee68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:10:dc:30:ee:a4:93:32:0f:0f:88:1f:69:
                    ff:9a:51:44:06:ea:e7:ea:00:65:97:4c:47:92:03:
                    97:e2:84:6a:a8:c0:45:b4:fd:12:1e:a3:24:51:ad:
                    89:64:29:65:89:83:14:f0:76:a9:84:85:a8:ef:c0:
                    dc:f6:7d:d3:f4:29:5a:1d:16:0e:9f:f5:97:a4:58:
                    12:b7:c2:a7:bf:58:19:30:f1:6c:55:d1:aa:2e:ac:
                    22:bf:59:9e:a3:a3:70:43:de:1c:dd:ea:0b:b4:f5:
                    da:42:5b:6a:3e:ef:e2:02:6c:8c:27:d0:9b:e8:b1:
                    72:76:9d:f7:77:6c:1f:c3:c3:37:51:b7:26:ee:d7:
                    3c:ad:53:94:3a:ea:47:66:d5:b7:e5:a0:9a:22:27:
                    85:50:31:23:18:bf:38:e7:63:86:5c:0e:39:76:f0:
                    2e:7b:65:2a:c9:99:21:87:b3:93:7b:43:19:fe:a9:
                    68:2d:d4:4d:58:5a:6d:9b:c7:8c:2e:37:92:b0:96:
                    a8:ee:c1:3d:88:be:e0:87:6c:24:8d:78:47:27:bb:
                    d8:8e:25:a4:33:53:84:b0:3d:6f:ce:70:56:99:9a:
                    29:01:d1:61:5d:76:26:77:54:02:2f:9a:a2:dd:6a:
                    fe:4f:94:73:e8:5d:f7:7b:e6:74:f0:eb:0b:49:cb:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D3:F8:77:B2:29:5A:FB:92:85:45:79:26:DB:E4:71:37:11:F5:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/6419ec41-653c-31b4-a7ef-abd9cd054278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:AB:CB:92:B3:A6:48:C0:82:25:1A:65:26:C1:3C:C5:19:BF:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:43:39:4e:3b:e0:0b:3c:12:86:cc:95:9b:fa:09:47:b3:
         13:db:3f:4e:68:cd:29:ed:a3:fd:3c:88:b9:fb:c9:cf:fa:2b:
         b9:15:2d:74:18:27:16:2e:a3:f7:ea:42:55:2c:ac:80:89:ef:
         8f:bf:99:8f:41:c8:cb:81:10:b9:89:2b:5d:de:df:7a:67:68:
         01:cf:4c:6f:63:b9:99:fe:79:d5:b0:dd:19:cd:33:d3:da:d8:
         b0:a7:c5:96:98:4d:e0:a6:8c:53:5a:16:75:e8:e5:1c:83:6c:
         c1:be:1f:77:8c:ac:93:02:c3:43:70:06:be:18:54:50:c0:90:
         14:a9:2b:01:7b:71:ef:b6:83:3c:a3:e3:0f:25:9b:3e:c3:a2:
         5c:0a:8c:f4:f2:b8:06:19:2e:7b:b3:7e:78:21:01:84:e7:ad:
         6b:ae:87:ee:0f:5a:6f:c4:6b:2b:aa:bf:e5:56:c2:13:e0:e5:
         8c:80:c6:44:d2:33:9a:a1:df:a0:f9:40:46:a1:a9:3e:6c:20:
         42:08:66:27:f9:d8:3d:a6:0e:cf:91:07:0e:88:f5:e8:9c:c3:
         4d:0b:6b:54:e6:ef:f3:53:42:36:3d:46:36:f3:f5:a4:f8:c2:
         88:8a:74:c4:bb:d8:0c:de:7e:f1:25:48:58:7e:20:12:52:55:
         7d:cd:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:20 2026 by rpki-client