Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa
File:                     895aa4ce-8313-395e-98a9-65bd11abfd6c.roa (raw, json)
Hash identifier:          gaZk5sB31is/D6vhKkYw/UTD1i1LWB6Pn+diJF+z+Ws=
Subject key identifier:   44:6F:06:47:C7:C8:23:D8:AA:F4:5E:36:79:F2:28:A3:34:1D:2A:1D
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584DF7A5D86E025F24FEFE6A9C80
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     0
IP address blocks:        198.179.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d8:6e:02:5f:24:fe:fe:6a:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=6a61da9b-afec-41be-8db9-105b51fe4148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bc:9d:99:38:10:d2:14:89:52:df:7e:2f:08:
                    38:3c:7c:9e:5d:e2:99:52:bf:34:ea:4c:d8:98:70:
                    65:bb:cd:36:68:6c:9b:de:65:1e:9f:54:26:2a:93:
                    0d:f5:6b:dd:46:e7:f0:9b:55:2a:ad:24:c6:ac:d9:
                    1e:02:39:eb:52:6d:b2:b0:11:4c:69:2f:1e:16:71:
                    09:c9:a9:e4:bf:b5:ea:ce:f7:57:94:84:87:7d:9c:
                    c1:7c:72:70:18:62:84:47:a9:33:62:df:d9:78:fb:
                    77:1e:f6:0e:74:d2:06:d4:42:89:bd:3c:fa:8d:d7:
                    3f:a5:4a:5b:8e:d9:e8:6e:2a:37:1f:ec:2d:3c:3f:
                    ef:a7:87:29:fe:b2:b6:ac:3d:c8:8b:34:0d:7f:e4:
                    82:4c:0b:47:52:f8:a2:31:bf:86:0e:2a:76:07:9b:
                    cb:cb:28:b5:db:f0:c0:e1:f0:18:2a:b1:4b:6c:89:
                    6c:f5:f4:68:4d:9e:c9:54:ec:90:9c:84:2d:87:b5:
                    8c:d2:8e:0f:ce:09:60:61:36:3d:72:32:3d:fc:97:
                    cc:19:f7:0f:8f:6c:eb:6b:83:9d:bf:b7:4d:02:74:
                    00:98:d4:83:76:4c:55:db:94:c1:56:8a:fa:b6:a1:
                    79:25:19:ec:8f:01:fe:e1:bf:c9:11:d0:cb:0b:24:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6F:06:47:C7:C8:23:D8:AA:F4:5E:36:79:F2:28:A3:34:1D:2A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:eb:28:db:bf:cb:32:be:f8:4c:2d:2e:ab:a6:8c:07:37:e8:
         97:1a:c8:22:ac:f5:7b:c9:44:9a:0e:1a:20:7e:8d:7e:c2:29:
         e6:6e:c7:9e:06:a6:12:8f:42:a6:bb:d5:92:96:8b:fe:e9:d8:
         57:02:ce:f8:e2:ce:e3:1d:f1:e7:c5:09:2f:f1:10:63:7a:a4:
         51:5e:6e:60:47:9e:53:34:69:6b:b9:b6:e8:c7:de:62:78:04:
         8f:89:8c:66:94:80:64:9e:4d:cb:4e:76:ec:f2:60:26:ed:1a:
         5b:45:30:94:34:c6:9b:38:a7:99:31:55:88:74:ac:36:67:ff:
         3b:15:b3:96:4f:35:cf:cf:f8:e6:0a:ed:69:e7:c5:02:10:8a:
         44:67:43:22:c0:b8:98:8b:a7:c0:61:d7:09:18:6e:29:2a:c9:
         dd:f0:81:bf:3c:96:83:24:e8:a5:0e:c0:51:33:b1:ec:09:05:
         48:39:e2:3a:22:10:1a:3c:ff:cd:6e:e5:3d:d2:20:2d:cf:44:
         fe:dd:ab:46:5e:89:af:01:ee:1b:6d:b3:bd:24:43:91:06:71:
         a5:f8:0f:21:f0:d1:fd:c3:cd:99:ad:c6:d5:c0:93:48:8d:a8:
         f1:ef:61:b9:50:6a:6b:c8:41:ac:49:e3:71:8b:5a:9d:e3:c4:
         bc:44:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:15 2026 by rpki-client