Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66580967-f40d-305f-9e7a-8bee3b9dd2ec.roa
File:                     66580967-f40d-305f-9e7a-8bee3b9dd2ec.roa (raw, json)
Hash identifier:          oVXfddhr51cqNcq+k/0i8PwyPGQfekELps+VK6+gm0c=
Subject key identifier:   07:FD:2F:85:FA:11:90:C6:70:BB:1C:46:D7:0C:D7:42:5E:05:93:ED
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D571FC19898627D42855F95E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66580967-f40d-305f-9e7a-8bee3b9dd2ec.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     395793
IP address blocks:        198.144.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:c1:98:98:62:7d:42:85:5f:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=ecdcd28d-5ede-4aec-9cff-6088d105755b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:53:2b:66:a2:3f:c1:fa:3c:80:cc:0a:72:
                    80:00:d0:b9:d9:e1:93:46:5b:6f:6b:2a:ab:55:b7:
                    be:ab:eb:48:8e:38:ef:a6:0c:ac:bc:5e:96:9b:5f:
                    30:1e:88:a2:77:1e:3e:51:96:1d:5d:e7:ff:47:49:
                    50:7d:e5:32:04:fc:cf:8e:d9:f1:b2:63:5b:19:69:
                    54:04:4e:00:2d:6e:7b:b1:5d:94:f4:1d:d5:58:24:
                    19:df:6b:21:08:fb:e3:bc:19:ca:68:ed:cd:0d:9c:
                    70:c3:7c:08:a0:6a:07:2f:94:a9:6f:3a:e3:ba:53:
                    03:c0:b1:07:0f:7b:3c:6e:31:db:d8:68:30:69:8c:
                    4c:97:bf:bc:23:43:a5:18:16:25:92:97:d5:3b:3c:
                    24:de:c8:e0:01:97:ec:6f:37:ff:c9:5d:6e:c2:60:
                    6e:b4:7f:58:a8:2a:ba:f1:61:96:24:57:8f:01:2c:
                    41:90:8b:2d:ad:b0:06:c3:9d:dc:4e:4e:41:4b:9e:
                    61:a2:97:9b:29:96:9b:66:c6:9c:78:5f:14:e6:bd:
                    3f:1b:bd:c6:e9:42:05:12:56:de:e6:b3:e3:24:03:
                    74:de:17:10:53:70:44:de:b2:fe:d8:0f:b2:9d:80:
                    3c:d4:32:71:68:38:51:26:e5:41:e1:95:a3:f9:53:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FD:2F:85:FA:11:90:C6:70:BB:1C:46:D7:0C:D7:42:5E:05:93:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66580967-f40d-305f-9e7a-8bee3b9dd2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7e:72:07:01:23:af:1d:d5:ff:34:79:95:7f:da:f1:7b:7d:
         fd:2e:39:e2:bf:ad:10:6e:ff:d9:be:6c:ed:80:4b:76:6a:83:
         a4:e6:76:df:6c:f9:86:5d:ac:65:a6:cd:03:23:84:7e:c0:5f:
         27:5a:f9:6e:bb:33:e1:aa:78:73:d1:10:d9:8a:c2:b4:cf:93:
         41:1a:f8:9a:22:a9:ea:33:7e:b8:7b:cf:f3:3e:68:a4:af:cf:
         f3:f5:2a:8b:aa:25:bd:01:b2:40:6e:4f:1d:fc:ce:d2:a6:0c:
         d9:9b:d4:62:89:08:eb:56:22:ec:8c:99:5a:b6:5c:f1:ed:0e:
         51:3b:18:4f:fe:c7:47:81:d9:c7:90:62:8f:47:3a:53:75:ad:
         64:1e:2a:31:48:16:b5:2c:72:4d:bc:ac:66:21:44:9c:70:37:
         74:7a:33:32:09:32:aa:65:f1:90:bd:7f:6e:cb:9b:9d:75:f2:
         50:8a:32:00:34:e3:ed:b9:86:b8:2d:45:2b:20:0d:97:de:5b:
         31:2a:c2:94:8d:03:54:92:9e:54:78:6a:71:0c:56:80:3a:ec:
         65:86:03:1a:1d:6a:61:2d:32:2a:0a:43:4e:00:76:b4:61:8e:
         5b:dc:73:e5:e1:33:2f:65:09:c3:e3:87:8e:6d:93:82:7f:17:
         b2:a3:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:06 2026 by rpki-client