Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa
File:                     1d51e06d-83a9-34c4-82ba-ea41b1192441.roa (raw, json)
Hash identifier:          7i/gHm91xn3x2FHAc1PqFdhdaao3CiVmsdw8hg05kMM=
Subject key identifier:   DA:11:49:7C:56:6C:C3:E7:10:0C:93:16:37:FD:5F:FF:71:81:F5:40
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584EA788ACB6E6A41B7219173A80
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2559
IP address blocks:        198.241.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ac:b6:e6:a4:1b:72:19:17:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dc821b18-f309-4c1b-8e38-30b1d112d136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:62:00:68:2b:77:8f:b6:f9:06:09:7f:8f:
                    ac:9a:d0:4b:37:73:da:1a:00:3f:61:58:28:e1:4d:
                    60:34:cf:31:a6:1f:58:c0:d7:af:34:91:68:0d:52:
                    ad:b9:ca:45:b9:98:0e:e9:a8:b9:0a:96:b2:ba:74:
                    e4:38:85:5d:80:80:58:59:37:4a:14:67:d6:00:31:
                    ee:c1:8f:a9:29:d4:23:0e:08:5b:d6:d2:60:af:b7:
                    0f:0f:e0:eb:b6:1c:39:b5:4e:42:10:cf:55:72:1b:
                    97:66:90:54:ac:9d:22:58:6d:e2:6f:6f:c2:3f:ac:
                    03:7c:c8:2c:d2:b8:b2:33:94:c3:3c:36:f6:b4:73:
                    ad:68:dd:ca:f5:9c:01:4d:1c:93:f4:ef:32:01:b0:
                    95:9f:42:45:40:e6:69:c1:6d:fa:c9:9a:df:99:81:
                    1c:20:c7:59:4b:cb:c5:4b:45:3c:43:72:d6:c4:02:
                    b7:69:37:bb:d3:19:ec:d4:9c:71:75:c0:e5:86:31:
                    76:db:f1:2c:57:a9:a7:f3:4f:45:8e:01:68:4d:cd:
                    6f:15:69:8f:b5:81:13:5e:75:4c:b4:c7:73:cd:89:
                    66:68:a1:17:fe:59:07:79:16:ef:35:f6:01:82:64:
                    1e:67:41:bc:00:e2:18:85:29:70:bd:e5:56:9d:75:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:11:49:7C:56:6C:C3:E7:10:0C:93:16:37:FD:5F:FF:71:81:F5:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:52:d5:1e:e6:a8:93:da:f2:2e:da:fc:74:11:92:f7:fc:
         ee:fa:12:d8:3e:a0:25:10:7a:db:a1:a0:de:fe:4d:8b:3d:15:
         c5:37:59:7e:68:f8:89:c2:5f:9f:f1:c9:3a:af:5d:fb:11:27:
         df:ac:3c:98:a6:0e:a1:37:19:4a:5a:24:84:34:65:0e:d6:69:
         11:19:50:40:f6:d5:4f:ca:05:86:b8:8d:3b:98:3d:e0:7e:d2:
         c7:b6:ae:09:3c:9e:ec:b2:de:e6:f7:3d:90:6d:74:f2:07:93:
         e3:61:6c:4e:51:87:b4:3e:6a:2c:ff:e8:88:c2:0a:bf:7d:a0:
         b4:2e:40:55:a0:03:1e:3d:2a:65:e8:ca:01:3b:a2:c7:4e:cb:
         86:80:41:aa:ac:1c:21:54:ac:68:84:58:d3:13:e2:a6:54:2f:
         97:5b:fd:5e:cf:86:a9:4d:ab:f3:4f:85:3c:b7:59:49:9d:ae:
         bd:ab:46:fc:58:ee:89:ff:e3:3b:50:55:21:74:c1:50:6c:6a:
         0e:e1:6e:17:45:99:36:41:0b:0a:30:38:64:98:e4:00:ba:0f:
         cf:91:0d:b6:62:c5:f1:00:38:54:f0:00:11:d0:63:91:32:72:
         4a:d7:38:56:a7:33:0e:d3:26:f2:8b:53:d4:f1:dc:b8:3f:85:
         a4:1c:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:19 2026 by rpki-client