Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/4975e6e5-a980-36ff-9ead-9622879cfbad.roa
File:                     4975e6e5-a980-36ff-9ead-9622879cfbad.roa (raw, json)
Hash identifier:          V7gvQmvDdK30cbQWsaA7ZdZ2YhkuY96/VxpXpn/wjW0=
Subject key identifier:   AB:79:66:E6:54:A9:41:84:1E:C1:4A:26:DA:1B:FF:F5:D8:31:5F:F6
Certificate issuer:       /CN=d583dbef-fd91-4a47-a2e9-6fab66d8dd4b
Certificate serial:       010D0C9F4328584DF210807CEA95E1C3CCED9B00
Authority key identifier: 6D:E8:6E:80:1C:21:D1:8C:28:12:67:4E:6E:36:58:55:6C:67:33:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/4975e6e5-a980-36ff-9ead-9622879cfbad.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        198.144.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:80:7c:ea:95:e1:c3:cc:ed:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d583dbef-fd91-4a47-a2e9-6fab66d8dd4b
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=ac753732-85eb-4da7-8930-6b8dce01b28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:db:3e:4e:37:0b:cb:5b:36:e1:6b:cb:f9:
                    f1:de:1d:d5:a0:54:3a:54:92:48:b4:c4:dd:17:a5:
                    8e:aa:7f:e0:61:db:02:eb:61:28:ee:f7:e0:1c:d5:
                    35:ae:0a:de:4a:4c:93:ee:05:ea:db:2a:42:f5:90:
                    b1:bf:61:1a:7b:39:c5:17:b7:f5:de:ba:c0:49:f0:
                    0a:c1:fa:01:4c:24:d0:9d:f1:4b:00:ec:63:c7:91:
                    0c:ab:45:91:8d:e0:b6:0b:45:6d:4a:b0:5e:68:08:
                    86:8e:2f:63:df:88:4a:d1:e3:a6:ce:ac:90:1b:a0:
                    a1:ed:02:87:02:e5:5a:94:db:1b:7a:c2:4b:82:55:
                    4c:ab:e9:be:9f:76:12:2b:52:cf:5d:e8:98:f7:38:
                    51:55:4a:e0:04:6f:5c:8c:26:ce:b4:6b:b4:3b:f5:
                    9c:5c:4a:00:06:a3:57:27:f2:92:24:67:ea:4c:f7:
                    82:d4:9b:f7:30:ab:59:8b:3a:46:35:41:78:a6:11:
                    a4:61:e5:e7:aa:d8:7e:8e:ad:f5:f3:f1:6b:34:5b:
                    9c:07:e2:52:95:bf:48:85:19:3e:01:75:03:92:66:
                    19:36:e3:b8:65:56:32:b0:46:1d:e7:e9:df:97:aa:
                    0a:5a:ec:0a:e4:f3:25:02:7d:5f:bd:af:1a:17:d8:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:79:66:E6:54:A9:41:84:1E:C1:4A:26:DA:1B:FF:F5:D8:31:5F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/4975e6e5-a980-36ff-9ead-9622879cfbad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:E8:6E:80:1C:21:D1:8C:28:12:67:4E:6E:36:58:55:6C:67:33:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0f:14:a6:2b:05:00:1a:5b:f2:d4:71:dc:ec:d0:80:fa:cd:
         ad:b8:b8:72:ef:4c:c9:c6:8c:31:0a:d4:7b:fb:06:f7:3b:e2:
         cd:73:ef:ea:11:c5:18:dc:4a:e3:3a:af:a1:8f:d5:34:11:8d:
         5e:68:a7:ea:97:99:5f:70:ad:d9:2e:ec:ff:f1:ad:2e:5a:3d:
         90:2f:97:33:0f:65:7d:11:6a:a6:97:05:09:e4:76:cd:b5:86:
         9f:bf:bd:54:06:ee:df:17:8e:91:24:e2:6b:f4:c3:5c:63:6a:
         7f:22:02:bb:8c:2a:82:b6:15:26:ba:e6:14:44:eb:cf:a5:2d:
         c2:c4:be:91:36:27:6d:a0:61:83:36:75:56:e9:d0:41:dc:aa:
         62:60:08:50:ef:e2:67:3d:b9:87:0a:98:48:9b:ad:85:8c:4d:
         34:36:71:bc:42:4f:50:dc:09:22:1a:a7:8d:f1:2f:d3:f0:86:
         df:b2:e9:7a:02:28:b8:eb:9b:a1:09:58:64:00:cc:60:aa:25:
         d6:8a:4c:50:df:98:de:29:76:2f:8a:53:f1:1c:d9:ae:b0:ed:
         e3:41:dc:0d:25:68:5f:4a:d4:7f:f3:96:bb:8b:c0:d2:e4:c6:
         3d:45:96:8c:8c:63:52:7b:9c:33:a0:9a:47:fd:56:1a:1d:38:
         a9:22:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:16:15 2026 by rpki-client