Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/603b2d56-e402-3dc9-929d-35820f05f117.roa
File:                     603b2d56-e402-3dc9-929d-35820f05f117.roa (raw, json)
Hash identifier:          LdVSA3Wgxfy64ZFi1bZr1Gb725+nnXxdMqoM1L3Ll5s=
Subject key identifier:   FC:82:82:C4:F2:43:80:FB:28:60:80:6C:F3:F8:40:27:BB:D1:93:85
Certificate issuer:       /CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f
Certificate serial:       010D0C9F4328584DDE8808F6FC51C35A52FAB6C0
Authority key identifier: 55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/603b2d56-e402-3dc9-929d-35820f05f117.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        208.88.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:88:08:f6:fc:51:c3:5a:52:fa:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=5391ee20-b5d4-4941-92d3-dd3dc93d8195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:05:e3:c6:06:6e:3c:d2:de:df:e6:39:ae:
                    cc:ce:7c:a6:fc:59:b9:46:ba:69:70:dc:30:fc:e1:
                    e5:5d:47:52:38:2f:27:0f:77:41:71:3d:ff:ce:9b:
                    51:d3:d1:30:78:fc:26:30:7b:bb:da:0e:9c:90:a4:
                    df:f7:95:98:02:27:bd:d1:0e:16:05:55:92:51:76:
                    73:13:2c:91:bb:50:e7:1e:4e:d2:49:17:23:76:80:
                    fd:44:4a:87:90:97:16:be:ec:ba:82:41:56:ae:85:
                    36:a6:36:4e:83:83:d8:d2:e2:91:d6:a1:37:42:d8:
                    28:81:f1:37:76:59:5e:b6:15:91:df:26:fa:0f:bc:
                    73:c7:b2:92:ff:7d:f2:15:2f:a3:b6:93:26:f5:43:
                    b0:47:3b:95:1f:12:87:0b:cb:10:04:8c:2a:5b:95:
                    5e:6f:73:b9:1c:18:b4:d7:96:45:9d:54:7d:ed:c3:
                    b5:96:79:25:fe:23:1f:95:44:41:59:11:23:e6:06:
                    ad:cc:f8:a5:b8:d7:a2:04:07:de:27:c4:37:33:ad:
                    bb:8e:c7:07:94:94:61:91:d5:ef:7e:a9:da:12:14:
                    5f:a4:be:9e:d2:e8:1f:55:af:6a:0d:8a:1c:f0:6d:
                    e6:51:88:fe:28:e9:f1:4f:cd:a5:72:73:4d:a1:51:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:82:82:C4:F2:43:80:FB:28:60:80:6C:F3:F8:40:27:BB:D1:93:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/603b2d56-e402-3dc9-929d-35820f05f117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl

            X509v3 Authority Key Identifier:
                keyid:55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:a9:32:8b:48:80:6a:20:d4:86:17:f1:69:32:85:63:fd:
         68:aa:92:e9:2c:9c:24:29:78:80:77:2f:13:29:2d:2e:74:d8:
         b7:1a:d0:65:2c:01:26:6c:62:64:89:8f:71:45:88:7b:4f:73:
         6d:8b:8e:ed:2a:c3:fa:a6:d4:52:0f:60:0d:df:ea:d2:2b:af:
         45:da:ec:9b:bd:10:7e:8e:07:20:ad:76:cc:41:7b:f9:e1:66:
         10:ee:9e:8d:cc:59:9b:b0:d1:58:f7:9f:f8:f4:95:1e:7f:83:
         5b:fe:0e:4a:75:3b:6a:e2:5d:79:c4:01:20:b2:db:0e:4e:0f:
         58:66:bf:20:a8:37:04:66:e7:a6:eb:b2:43:27:79:74:0d:0d:
         f9:dc:78:ea:5b:5f:60:ae:d1:95:ad:09:c9:ce:f4:38:f4:9c:
         4f:2c:3f:8b:99:ae:fa:48:0f:3a:45:2f:07:cc:71:01:76:47:
         d3:2b:be:fe:2d:46:60:a2:f4:29:d3:e8:52:7a:ec:f4:ed:33:
         d5:d4:95:f4:6e:db:ca:ad:a3:c9:52:85:1c:f3:2d:ac:70:e3:
         1f:fc:65:ae:be:10:db:67:ae:26:3e:20:73:65:7b:bf:9d:e6:
         1a:90:bc:13:c9:35:56:44:25:ba:9d:fc:ee:03:22:e5:2a:d9:
         09:95:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:32 2026 by rpki-client