Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
File:                     210d697f-4471-33fc-9f0b-14da84092c79.roa (raw, json)
Hash identifier:          8o1NcdBG5IiacRn6FHga5N0hrMthTqngvHo2i99tgaE=
Subject key identifier:   19:6A:6D:D6:FA:6F:13:29:19:AB:D0:D8:8F:29:7C:4A:27:12:41:FD
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F4328584DDBBB113C8F38E8F32934FFE0
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     26658
IP address blocks:        198.180.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:11:3c:8f:38:e8:f3:29:34:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=57341724-60b6-444b-bb52-5b67147239d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:32:8d:2b:1b:15:b5:30:7d:a5:73:a4:be:
                    13:f0:9f:c1:e6:c3:5d:8e:09:1d:40:c8:d9:69:fd:
                    73:05:61:de:60:d3:b1:11:8a:d9:ef:fa:c9:4d:be:
                    a7:17:7c:62:88:fd:31:33:ba:9d:32:0e:c4:9d:bb:
                    f8:b6:f4:63:0f:01:59:70:25:19:fa:40:25:b0:d7:
                    d6:ca:58:0d:ff:d6:60:30:5c:a0:70:71:da:bd:5d:
                    ab:c5:e5:24:61:22:38:5e:11:41:c2:52:8f:d4:38:
                    dc:65:4b:c4:9c:f6:14:9d:95:a1:2d:32:c2:7b:14:
                    bd:48:60:a3:bf:f5:2d:ea:05:91:e9:5d:65:05:fe:
                    73:b3:72:a6:61:ef:b3:53:68:3c:0c:c8:12:d0:b0:
                    53:e7:a7:32:ca:e2:e8:bb:85:5f:5e:5b:87:42:70:
                    78:14:69:c8:8b:36:53:43:1e:49:ba:63:8c:4f:5c:
                    5f:40:fc:6b:9e:8f:17:cb:c3:05:a3:e1:d3:79:ab:
                    b0:7f:f1:d7:8c:13:30:46:a6:4e:d0:b2:23:48:5d:
                    c4:f1:3e:fc:81:95:8c:9c:d1:65:ed:78:e9:ab:11:
                    92:36:a6:ee:ce:3d:40:0b:66:d2:db:e2:42:4d:84:
                    48:45:8d:47:3e:5a:c6:1f:28:37:3e:9f:b2:79:f0:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6A:6D:D6:FA:6F:13:29:19:AB:D0:D8:8F:29:7C:4A:27:12:41:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:af:34:a2:ed:61:a3:af:3b:0b:da:d7:ee:9c:e9:a6:41:
         d2:46:c7:2b:91:c0:ff:88:77:1a:0d:7d:db:a1:6b:de:c5:a1:
         e2:68:80:d2:72:17:ae:6f:14:0c:b5:d6:3b:df:8e:24:13:fb:
         7c:1c:4c:77:22:76:ed:be:fb:a0:81:21:2e:df:aa:e5:09:06:
         51:77:84:19:77:e3:f8:a7:50:52:20:ce:5f:f6:42:b4:05:f5:
         67:11:b0:c1:61:65:c0:56:3e:d6:36:5d:a8:9c:45:a1:37:f2:
         cc:5e:71:41:01:3e:a0:b0:dc:de:27:d9:72:4e:58:c8:62:07:
         0a:12:26:6d:ae:2d:79:db:d4:c5:b0:21:af:fc:c4:fa:98:62:
         41:f3:5b:a4:b2:17:78:48:be:66:41:80:13:2a:68:8e:5c:9c:
         4a:6b:be:e9:e4:b3:b3:41:00:25:49:73:19:94:cf:38:2b:76:
         e4:d9:08:2b:c8:f9:dd:00:24:2a:6b:ef:ee:a6:6f:b8:34:fa:
         5d:fc:84:44:27:f4:9b:c6:56:88:2e:d9:c4:a4:e6:45:d7:5f:
         1c:1c:33:43:87:0e:d7:17:66:58:9a:6c:14:99:96:d2:0a:1c:
         c4:0c:51:a9:93:ac:5a:05:c3:a8:25:45:76:bb:99:b4:1f:d1:
         1f:9b:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:00:48 2026 by rpki-client