Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab85abbb-d70f-36a7-b271-6d95096a9346.roa
File:                     ab85abbb-d70f-36a7-b271-6d95096a9346.roa (raw, json)
Hash identifier:          gOUgP2778/PmQvZRhXImt8Fh92E0oYDoQkfS1Jdd0e8=
Subject key identifier:   A7:26:C3:BB:58:F4:A2:53:39:69:89:FF:93:49:81:D8:23:7C:AC:55
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DB9EF2674FC6B759D9BDB0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab85abbb-d70f-36a7-b271-6d95096a9346.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        198.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9e:f2:67:4f:c6:b7:59:d9:bd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=e9c7b661-98a8-4b0b-8d71-82e1c86839f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:39:77:f6:6b:cb:2d:aa:cf:a7:37:c2:25:
                    c1:41:85:15:a3:35:38:41:3c:aa:2f:08:91:9d:5a:
                    62:77:9c:46:3e:f3:06:b4:7f:78:d7:5c:94:7c:03:
                    de:26:a8:64:41:10:d9:94:76:36:c5:4f:06:23:ce:
                    79:ca:d4:8a:be:b8:f5:e7:0d:6c:59:0c:b2:72:72:
                    94:0e:82:f4:b9:b0:14:05:38:84:94:01:b3:13:bc:
                    2a:d7:73:8a:87:f0:f8:a2:e9:53:61:74:09:a4:2d:
                    08:ab:87:ff:07:33:eb:6a:2b:d0:8a:d8:d8:f3:eb:
                    2e:73:76:8c:a3:4e:d0:6c:e5:64:39:37:02:05:23:
                    d3:99:e6:bb:4d:86:90:23:65:57:e4:cf:52:c2:32:
                    94:75:67:d8:26:95:08:0d:54:f6:c6:bd:29:33:4e:
                    cb:d4:05:75:76:11:ec:cb:ab:3e:76:be:ff:58:89:
                    ca:6c:86:8e:f5:0e:8f:75:e2:a2:19:76:fb:2c:6c:
                    90:53:cc:a1:e8:2a:f8:31:d3:ae:87:35:25:ae:d9:
                    91:ef:2b:6f:c0:2a:95:bf:ed:a8:68:50:cb:37:17:
                    94:39:7d:e7:49:ef:8c:6c:3d:5e:8e:ed:e1:02:0b:
                    f2:7e:74:52:75:aa:28:fc:09:12:a0:0b:d2:ce:70:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:26:C3:BB:58:F4:A2:53:39:69:89:FF:93:49:81:D8:23:7C:AC:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab85abbb-d70f-36a7-b271-6d95096a9346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:45:a5:f9:90:e4:6c:ed:e5:bc:36:aa:94:5e:c5:04:aa:
         21:a6:77:ef:ba:a0:23:a8:3f:c4:a5:18:66:40:b3:5e:44:5a:
         8f:20:f9:21:cf:42:a7:08:31:98:48:2e:db:51:c5:c2:51:49:
         6c:a3:24:cf:29:84:35:09:e1:d9:61:98:f7:35:6b:96:1a:b8:
         39:df:ec:ec:1b:a2:d1:68:61:2b:d7:74:79:c6:47:c9:31:10:
         27:f9:4b:34:7e:93:d9:5f:2e:10:2d:df:21:d8:de:f6:72:d8:
         2b:4b:d1:dc:f1:6e:78:a3:d4:cb:35:b0:69:4e:ef:a2:88:29:
         5f:d1:4f:af:95:23:96:df:fd:ef:1a:e9:ce:83:a2:0f:26:30:
         eb:ac:96:e8:31:65:64:f7:57:c9:dd:b8:8b:3b:84:34:de:b3:
         bf:cd:74:83:e5:2b:41:ba:75:0f:a4:f9:26:63:08:0b:26:47:
         1f:23:e0:6f:46:d6:c6:6e:98:54:d2:fb:b7:e7:3e:a6:41:bc:
         f2:80:77:f9:51:fb:18:75:1c:8e:a7:d3:85:cf:22:5a:02:11:
         2a:54:b8:9f:9e:65:e4:cd:f5:25:f6:28:62:7e:a4:9c:d8:27:
         16:04:45:4c:8f:32:c2:97:2a:3e:1d:0d:d9:7d:9a:c5:83:92:
         55:2c:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:40 2026 by rpki-client