Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa
File:                     3597fa41-0807-3147-8c7b-86c72ed87a96.roa (raw, json)
Hash identifier:          6tmiLy9G5/NPXyNFdI1jyxVhrj/SkZRV4mDO9nbIf9Y=
Subject key identifier:   D1:28:8D:07:03:7D:EF:CF:32:A2:65:8E:EF:33:56:9E:86:0A:24:19
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584CEE8CE22A7B30B863A32315A0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     399672
IP address blocks:        198.1.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:e2:2a:7b:30:b8:63:a3:23:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=ad7d98f8-6999-4448-a9d0-af024e035134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:fd:27:0f:4d:26:2a:bc:26:71:0a:35:62:
                    8a:2d:e9:4c:c9:04:6b:f4:64:17:4d:9a:eb:d2:b9:
                    91:d9:ce:9c:f2:6a:fc:e6:66:9e:a3:dd:6e:22:cf:
                    6d:c4:1c:db:28:c4:78:5f:72:54:fc:30:77:c8:ab:
                    a8:6f:77:b6:bd:9c:00:e7:67:c5:fc:82:8e:e8:cf:
                    08:ea:a3:92:89:b7:82:2d:73:6f:7c:32:b6:ac:9d:
                    2c:ef:1c:a4:51:8f:58:36:e6:61:a9:b8:fb:60:d6:
                    20:ca:01:28:28:b6:80:40:3f:7d:28:d4:34:ab:d7:
                    64:e7:0b:b6:53:cd:04:de:69:98:0a:a1:21:27:40:
                    24:9c:69:fd:77:c1:4f:e2:d7:5c:15:77:b8:cd:a1:
                    73:fe:8a:3e:5f:71:50:0f:ee:21:b8:fd:5d:97:61:
                    7b:f8:00:33:eb:3f:ce:0e:1f:f5:2d:85:bf:c2:99:
                    32:6b:d9:7f:c2:0d:2a:11:af:59:d4:07:c3:cb:5c:
                    de:07:90:f9:5e:e5:3f:6e:8b:12:0b:a5:06:34:58:
                    86:ed:2c:55:3c:bd:a5:05:17:f3:96:da:21:aa:b1:
                    d9:8e:df:60:9d:6b:91:09:35:d7:72:97:cd:66:42:
                    42:4d:a3:70:32:d2:72:3c:8f:1e:59:b1:12:6d:e2:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:28:8D:07:03:7D:EF:CF:32:A2:65:8E:EF:33:56:9E:86:0A:24:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:96:16:78:91:16:c4:23:ee:be:49:7c:2a:ea:4f:9e:79:
         64:ba:47:60:f7:32:6c:4c:c2:bc:5a:90:6a:9a:c5:06:e9:09:
         c4:e8:0f:ae:71:b1:d6:af:64:a2:12:9a:dd:bc:78:d4:55:54:
         61:59:33:d9:7b:26:2b:e3:88:ed:08:68:69:11:eb:0d:6c:2e:
         7b:65:87:3f:06:87:ad:85:d2:25:42:c5:f1:62:ec:5b:c6:6e:
         67:13:8c:aa:90:3b:62:be:b0:13:a4:d3:b2:09:06:ff:42:ce:
         d5:4e:d8:0d:e9:4e:e2:8e:a5:00:49:a1:bc:e2:07:e8:b0:52:
         59:c6:07:d2:df:a0:65:7a:7d:2b:4f:7f:01:d8:aa:94:44:3d:
         99:eb:66:b7:2b:7a:dc:38:18:26:a3:cb:6d:38:09:41:1c:a4:
         b8:2b:86:81:ac:0d:e1:f0:3a:53:53:10:4a:33:9b:06:c6:eb:
         36:9a:49:33:50:99:82:cf:1c:2e:39:2c:5d:13:81:1f:d7:b6:
         53:e1:c1:29:78:ae:a7:29:b8:91:c4:08:25:94:85:41:78:2f:
         ec:64:0b:ea:19:5f:8c:07:df:ac:7f:5b:58:88:9e:b1:80:70:
         d3:cb:93:bf:c8:ae:0f:85:de:7b:b4:2a:8a:de:a5:01:40:47:
         45:11:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:59 2026 by rpki-client