Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/db950819-2bed-3fee-879b-ea294d2abbe5.roa
File:                     db950819-2bed-3fee-879b-ea294d2abbe5.roa (raw, json)
Hash identifier:          tO/+eMO8GKsKjdHk5J2QQ4JadLMWW7RbiAK0Bku7xhU=
Subject key identifier:   DE:2A:EA:6D:88:D9:58:EB:66:5E:F0:B3:61:A0:EE:C8:FC:20:8F:01
Certificate issuer:       /CN=a04b5188-7d31-4ad3-8474-090b809c8408
Certificate serial:       010D0C9F4328584E1A14425FA488E7ECA7301EA0
Authority key identifier: B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/db950819-2bed-3fee-879b-ea294d2abbe5.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     54235
IP address blocks:        198.136.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:42:5f:a4:88:e7:ec:a7:30:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04b5188-7d31-4ad3-8474-090b809c8408
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=4d2f29de-6f4d-4892-92a3-2b830bd0fd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:85:bc:b6:16:45:de:1d:20:b4:22:4d:5d:
                    20:84:60:1f:26:40:7a:a3:c3:fa:d2:ed:8d:56:f2:
                    79:b1:7f:13:d8:5a:1c:ca:49:04:ad:0e:ea:60:ac:
                    9b:20:44:60:d4:48:79:ee:69:64:48:8e:d7:56:56:
                    2f:0f:93:cb:98:b5:7f:d4:d9:90:b2:67:d2:18:be:
                    af:b0:bb:dd:47:2c:ea:a0:a4:a2:43:22:33:cf:10:
                    2a:02:5d:51:de:b2:3b:1c:d6:a1:90:f0:e4:6d:a2:
                    37:2e:7a:bc:1c:23:b6:1e:cc:12:2a:0e:b5:9d:37:
                    5f:b0:fb:52:92:a2:35:cb:85:b6:38:7c:8c:4b:77:
                    78:37:1b:de:f3:31:7e:00:99:b1:ef:17:ce:88:f7:
                    a0:7a:de:72:06:7b:a8:29:2f:22:5a:d7:98:e5:ed:
                    3b:55:2b:cc:21:bb:17:cc:91:57:e6:42:9a:06:b9:
                    2f:7a:52:fc:d9:5c:0b:9e:6e:36:ce:07:c5:2c:03:
                    a3:5c:bd:fc:6a:60:f5:55:f2:b1:a4:c9:04:79:db:
                    d2:c1:67:98:52:b2:6f:71:15:6a:f0:86:62:89:b2:
                    7d:92:8c:38:c8:cf:01:b6:0f:ad:f6:bc:fb:10:de:
                    c4:37:b4:b1:db:5d:11:3c:50:e3:6e:30:0d:7e:47:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2A:EA:6D:88:D9:58:EB:66:5E:F0:B3:61:A0:EE:C8:FC:20:8F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/db950819-2bed-3fee-879b-ea294d2abbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl

            X509v3 Authority Key Identifier:
                keyid:B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.136.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:79:f7:f3:28:e0:66:2f:e2:53:51:10:8c:79:8f:03:e3:1e:
         dd:65:c9:f3:a4:6d:25:ac:41:82:b0:a6:d1:9a:a9:3b:31:2e:
         4d:53:04:ae:06:61:cb:4a:6b:14:f8:06:90:e4:e4:b9:a4:29:
         30:a1:a4:2b:9f:5a:39:3a:44:51:97:6e:e9:a3:f7:e1:37:be:
         8c:33:60:6d:69:2b:30:03:45:52:df:44:df:a6:e6:ea:93:97:
         b3:46:aa:1c:c5:bc:ce:b9:81:ed:58:3f:1d:16:08:2d:20:36:
         45:9e:42:5a:82:af:b6:05:14:73:df:cf:7a:19:3b:bd:cd:13:
         05:03:ca:73:5f:00:e6:ea:0e:f2:15:ed:a2:b5:85:95:08:7b:
         f3:59:66:e5:e9:1e:90:f3:41:f1:77:62:79:9c:42:94:87:df:
         cc:b6:7c:1c:84:3d:fd:72:cb:fc:57:9a:04:d1:b7:26:28:5b:
         d9:0b:cf:ee:09:8d:c1:4c:95:ec:51:17:4c:ca:b7:dd:4a:b8:
         63:71:e4:00:00:81:8e:52:64:5f:6d:c7:1b:69:20:a5:12:19:
         84:a3:fb:8b:c3:14:4f:e6:14:f6:33:5e:b5:83:b3:46:5d:5e:
         26:aa:8a:a5:5d:50:3f:ca:17:18:d7:ff:a7:d6:cb:04:ec:42:
         f1:09:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:34 2026 by rpki-client