Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa
File:                     70b09f9a-fc73-38b5-a730-83149f6057c7.roa (raw, json)
Hash identifier:          L2VeKZvpiPEGMJpTU1weFztE3/IhH9RKBTIer0zn86o=
Subject key identifier:   2A:E5:77:07:93:2F:93:DB:37:71:5A:DC:47:54:96:13:7D:51:47:4A
Certificate issuer:       /CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Certificate serial:       010D0C9F4328584D703FE0678C03B5AECAC6FC00
Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     393906
IP address blocks:        198.153.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e0:67:8c:03:b5:ae:ca:c6:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=236b23a5-3e6d-488b-8698-7bf20c8c62a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:b9:f0:ad:da:45:8e:33:5f:ac:95:26:71:
                    b9:51:48:a5:ad:1e:a2:b2:e5:5b:c9:e2:d4:06:de:
                    74:e9:cf:cd:d8:c9:6c:ec:99:96:85:c9:56:43:6c:
                    ab:e6:de:a5:f5:ca:6a:0c:a5:43:8f:32:f9:aa:cf:
                    e1:0d:76:fd:3a:b0:c8:ea:b1:46:6c:c9:21:9d:1a:
                    08:51:3c:2d:e8:ee:e5:18:b4:d3:34:d5:d0:ff:ab:
                    c6:4c:58:cf:24:a5:45:75:6c:36:7c:65:67:ed:dd:
                    c0:38:e9:b5:67:d9:2c:62:5b:19:98:da:3b:ef:fa:
                    33:eb:49:0e:3b:0b:b8:98:7a:b6:91:14:34:ce:af:
                    8d:87:f6:d2:58:d3:4f:8e:6a:a5:65:3c:26:ea:ef:
                    6b:c7:38:fb:c4:b4:92:13:65:fd:dc:bc:b9:53:79:
                    71:ab:78:6d:4b:82:02:d9:e2:a7:b9:02:c2:eb:34:
                    81:79:ca:87:b0:fc:f5:94:95:2f:a9:30:6e:af:da:
                    fa:9a:f6:53:40:cb:12:c2:20:da:b4:32:bc:8c:97:
                    95:d7:66:bd:fe:75:1b:0c:34:fd:13:24:06:35:bf:
                    a8:db:64:eb:76:d3:5e:c7:5f:77:6c:37:66:45:72:
                    4c:dc:93:6e:ae:3e:37:31:a6:cd:bf:e2:fe:dd:5c:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:77:07:93:2F:93:DB:37:71:5A:DC:47:54:96:13:7D:51:47:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.153.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e9:ac:5d:57:ae:99:9b:16:ca:79:d1:08:71:76:62:86:83:
         45:a1:ff:b3:5f:6d:32:74:77:49:9e:13:c5:0f:24:58:58:69:
         5e:1f:b4:32:46:62:af:a7:58:18:58:fd:5c:81:f6:e1:d1:78:
         a2:6a:3d:25:aa:74:3b:94:a8:4d:26:dc:bd:0c:9c:d1:cd:0b:
         f1:3e:f0:27:f9:9d:68:98:27:7d:94:33:c7:c3:15:df:2d:c8:
         04:bd:b2:6a:85:bf:29:47:c6:4b:d2:d7:6a:0c:f0:c6:a3:f3:
         5e:db:76:c5:aa:45:3c:41:f9:17:eb:46:fc:a8:82:75:71:af:
         60:5c:81:54:93:73:e4:bc:df:ec:dd:f0:cb:79:82:5c:5e:e7:
         2a:a0:94:24:49:8a:85:9b:10:13:28:48:9c:76:d2:e6:a2:24:
         bf:ef:42:b8:c2:5b:73:3c:a1:dc:b5:89:e9:1e:bf:88:18:90:
         3d:09:57:8a:1c:20:35:d0:56:a2:21:c1:a8:18:9b:03:f0:af:
         3c:eb:6e:85:23:e7:ca:6e:50:d3:da:62:85:fb:5e:ca:0b:f3:
         60:46:db:0e:fe:53:3e:82:81:e3:3e:af:e8:27:6f:9d:ec:07:
         f2:0a:82:de:79:b5:1d:de:04:73:10:53:1f:39:ec:b5:d3:f9:
         fc:be:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:34:34 2026 by rpki-client