Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c6f99e6f-b6e8-3184-9e38-c02e6a686380.roa
File:                     c6f99e6f-b6e8-3184-9e38-c02e6a686380.roa (raw, json)
Hash identifier:          6PUlEAHQ0CEmCnaqVctQPmuqW0c5AGAuzeoFjo/Yx4A=
Subject key identifier:   8A:B6:9F:74:30:6B:EA:A4:55:D1:C2:B7:83:E3:06:D9:77:30:2D:B0
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584E0A6FFBB06FF49A07FC79F380
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c6f99e6f-b6e8-3184-9e38-c02e6a686380.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     2559
IP address blocks:        198.241.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:fb:b0:6f:f4:9a:07:fc:79:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=ac891563-7081-443f-af54-86846f80896b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:28:88:6d:fd:da:e7:c6:33:d3:07:f2:d4:
                    ab:b4:1d:b5:29:67:34:74:a9:fb:eb:57:c6:30:af:
                    0d:b4:fb:33:1d:96:c9:1d:94:d4:5d:6d:1b:2c:d1:
                    f4:ed:18:e5:81:e0:20:17:4c:00:a2:16:e2:dd:ed:
                    8b:3e:e5:85:56:aa:49:4a:2a:ff:b1:b2:da:4b:59:
                    07:2c:dc:55:b1:34:3f:45:75:1a:81:ce:ea:15:19:
                    c3:b0:78:6f:70:38:2e:98:77:13:d1:fa:b1:c3:8c:
                    e7:d2:57:92:68:c4:ee:21:12:66:df:1d:42:28:5f:
                    59:bd:df:38:d8:f3:24:26:55:96:87:9d:ab:ac:d5:
                    1b:f8:65:b4:b7:99:ef:a0:6d:74:eb:d4:88:8b:6a:
                    c5:88:f0:a6:e9:52:0a:a6:86:b0:06:03:65:29:e7:
                    9c:1c:d6:c9:39:a8:c0:9d:75:81:4d:d0:83:7e:52:
                    ae:01:5f:c4:14:be:9e:75:13:91:28:f8:b1:27:0f:
                    93:a5:19:3a:1d:ed:7e:ec:f4:f5:11:26:52:54:bb:
                    14:36:00:8a:df:aa:62:65:5a:dc:5a:4b:d9:52:8d:
                    33:7e:f3:d5:11:ca:4c:25:b8:5d:da:87:2f:cf:ce:
                    e4:50:3e:67:46:41:9f:38:c4:0e:66:b4:b5:12:88:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B6:9F:74:30:6B:EA:A4:55:D1:C2:B7:83:E3:06:D9:77:30:2D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c6f99e6f-b6e8-3184-9e38-c02e6a686380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d5:78:9e:11:a2:9e:4e:88:ac:20:73:e8:df:ab:03:bd:1a:
         21:c0:b2:8f:c6:f9:fd:f9:5d:71:4d:fd:f8:26:79:55:11:46:
         bd:b9:93:29:c1:f3:81:13:b8:9d:5a:dc:da:d0:52:72:fc:64:
         f6:a6:79:5e:7b:5b:6e:6f:a8:db:1c:4a:7d:d6:d1:60:dc:78:
         06:ab:04:35:5e:f9:f7:b5:68:ca:a6:93:f9:36:33:a9:29:b6:
         3f:8c:36:1b:e0:03:5e:11:5a:bc:ad:88:87:e0:63:c6:60:2a:
         b3:da:18:96:25:b7:2d:f3:f2:24:96:4c:47:f9:7d:ee:fd:fe:
         fa:4d:3e:8d:91:2c:b1:19:b8:70:ba:48:91:e6:5b:9f:89:de:
         36:54:34:a3:14:f5:5c:21:ed:27:7c:5f:e5:c4:d1:18:fb:f4:
         6b:61:e9:f6:2a:af:02:7d:56:c7:ba:4b:cd:f4:d0:85:78:95:
         9a:8e:c8:ca:c7:42:9e:ec:00:40:e5:2c:96:96:e3:a5:bd:ce:
         dc:94:8f:c3:5b:c9:f9:9f:36:f0:89:03:13:c3:84:82:1a:8f:
         03:a0:5f:1d:e6:ad:59:e2:1b:b5:36:7b:50:ac:78:ea:5b:87:
         16:18:7a:74:28:49:af:a1:88:b4:89:12:75:d8:b8:ff:13:22:
         8f:89:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:00:05 2026 by rpki-client