Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa
File:                     98cb527c-fba2-31d8-a87a-d8791809c167.roa (raw, json)
Hash identifier:          9tO46iV1TL1/JkKq5fVEyLSHB9kOG9Ji2wLpuH70MpI=
Subject key identifier:   A3:19:8A:F5:64:63:D9:23:73:65:A5:26:FB:E1:D9:25:A8:06:98:B2
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584EA79A499AAD6CC4A185A51500
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6079
IP address blocks:        209.236.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:49:9a:ad:6c:c4:a1:85:a5:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9df9b82b-e802-463b-8bcc-891054063859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:19:f8:43:c3:5f:30:af:ab:d3:ab:47:11:
                    bf:77:f1:2e:cb:e5:33:bd:57:60:cc:1b:ae:a9:5b:
                    58:8f:b0:1d:6a:36:c9:c6:34:73:14:e0:b2:47:98:
                    0d:4d:27:5d:68:82:5d:0d:ac:37:c2:3d:ae:1d:65:
                    5f:99:de:bb:2d:e2:5b:92:ee:1d:a6:0c:04:bd:24:
                    00:d2:93:10:dd:a3:43:79:db:20:8d:8d:e7:78:9c:
                    36:12:89:04:aa:12:ef:cc:b7:12:3a:7b:0f:32:25:
                    ab:c9:04:a3:59:d7:99:f6:60:5c:d6:cf:58:58:4f:
                    a7:8e:10:e3:f2:2d:38:97:e9:18:81:10:64:ec:7a:
                    8a:93:0b:d7:4b:77:4c:aa:3f:70:11:b0:02:40:3d:
                    94:0f:bc:9c:ff:4c:c7:4e:7a:72:ab:b5:cc:57:6f:
                    5d:5f:4a:5b:48:3e:28:3e:aa:b2:1d:c3:5b:8e:7e:
                    aa:b7:57:39:82:97:e9:83:a1:cd:d5:93:91:5f:75:
                    c1:9f:2b:6e:95:4f:4c:35:a1:31:89:81:2d:57:e7:
                    4c:54:0e:e7:70:1d:4b:74:1d:a2:b2:6f:ab:b1:8f:
                    82:a0:5b:bf:57:81:dc:c8:cc:34:aa:ab:68:09:ba:
                    98:7a:d9:de:25:d6:3f:a0:7f:39:8f:74:85:63:70:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:19:8A:F5:64:63:D9:23:73:65:A5:26:FB:E1:D9:25:A8:06:98:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:99:bb:e4:41:1d:54:0b:77:00:03:11:0d:fb:28:3e:e3:
         51:43:b1:6a:ac:14:a4:eb:19:20:81:2d:b2:33:0a:9c:10:45:
         c3:ae:54:d2:6a:f0:09:57:3f:59:00:ed:d2:6a:d8:77:07:69:
         1f:d6:78:51:99:62:62:ea:6e:09:a3:82:96:96:cd:06:81:11:
         5e:68:a3:46:9e:1d:18:a6:e2:b2:06:cb:b7:44:50:f8:75:e5:
         37:1e:22:c6:99:ce:a2:a6:79:39:88:a1:ab:22:96:60:19:d4:
         bb:a6:eb:62:15:49:50:7b:0f:4f:7d:63:9e:68:4b:4c:74:25:
         d6:4a:ee:77:ad:54:1d:61:38:ca:1f:88:5b:f4:44:c4:f2:a1:
         73:02:a1:d5:c9:45:18:a4:71:ac:8c:55:14:7d:87:de:f7:f6:
         df:35:ad:d8:ce:2c:59:1b:9e:d7:f5:44:f8:81:a4:0c:86:c6:
         50:25:b2:5f:56:06:11:9b:6e:53:2a:ae:86:a8:94:8e:91:13:
         d2:8f:d8:ee:bf:a1:84:5b:bf:e2:d0:f1:9c:41:8f:f7:74:18:
         7c:c3:e1:fe:4c:1f:ee:3b:e7:6b:10:d9:ca:74:d7:60:04:82:
         af:f1:f7:7d:10:20:67:85:f8:86:42:50:0b:f2:ad:f2:4f:d1:
         19:fe:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:51 2026 by rpki-client