Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8f419f66-9008-33b9-8242-4c8980233d9c.roa
File:                     8f419f66-9008-33b9-8242-4c8980233d9c.roa (raw, json)
Hash identifier:          E6SweGuWCfcosFW4wNEcT5h7S8CXjqHZD+YlQzL+SI4=
Subject key identifier:   9C:EF:0F:8D:5E:4E:F1:E9:78:25:44:25:3F:F5:D1:9E:E9:3F:2F:52
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E104F287494D5AE18D49655F0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8f419f66-9008-33b9-8242-4c8980233d9c.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     151964
IP address blocks:        198.1.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:28:74:94:d5:ae:18:d4:96:55:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=3b35b989-b59f-48fd-bbc4-98b0e9421bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:c1:72:9b:75:60:eb:04:86:e9:0b:9c:6b:
                    00:37:f6:ef:a5:10:73:fa:9c:57:4e:72:4b:2f:7a:
                    cf:24:67:4e:c5:67:4e:85:d6:4c:35:7e:90:41:b9:
                    d5:32:04:51:1c:a5:f9:9a:05:ca:9b:f9:94:c8:92:
                    43:c6:f9:69:0f:67:ef:08:fd:d4:24:7d:5d:54:35:
                    0c:c5:c7:b9:11:f6:21:94:a0:fe:c5:a5:42:83:84:
                    ce:4d:0e:97:ea:7c:3f:4c:22:94:fb:5c:58:35:87:
                    fd:9a:b1:40:b2:d6:3b:79:02:62:e9:60:1a:6b:4e:
                    3e:ef:13:b5:75:e6:ad:80:e9:47:f7:52:60:e5:f2:
                    e3:c9:d1:c4:5d:7f:8d:bc:cc:6a:44:c1:24:f8:69:
                    a8:a2:fc:96:8e:ba:1c:90:9a:77:83:d2:92:a9:fe:
                    fa:bd:ef:df:0d:80:a6:ac:aa:43:b4:1f:e4:da:93:
                    8b:25:91:5c:ba:d6:19:35:4f:90:03:f4:85:f9:45:
                    1a:20:cf:32:4d:e7:63:f8:3b:49:ad:0c:8c:a5:97:
                    91:5c:84:51:3b:62:be:0f:e4:8e:2b:a2:cc:75:5b:
                    86:76:c5:62:f9:e4:89:3d:d6:d0:f9:f7:a6:67:88:
                    15:9f:ca:60:6c:2e:2e:c7:8c:0e:b4:59:a8:d5:16:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EF:0F:8D:5E:4E:F1:E9:78:25:44:25:3F:F5:D1:9E:E9:3F:2F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8f419f66-9008-33b9-8242-4c8980233d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b6:47:9a:00:73:52:fa:6c:05:60:ba:8a:3f:3b:f5:c9:8b:
         f6:f3:64:45:31:5f:41:60:22:e7:bb:a7:6f:8f:14:25:23:5e:
         f1:4a:6e:49:23:3e:20:a3:dc:fd:97:7c:a8:8d:6a:3b:1c:7a:
         65:07:27:98:eb:f3:72:d9:99:f7:31:1f:86:10:90:94:21:ba:
         7f:4d:b1:ba:fe:21:ba:70:20:f3:29:14:96:20:f6:8d:64:63:
         4f:82:34:33:af:a7:f8:9f:e4:03:81:0a:6b:a6:37:b2:80:7e:
         8c:91:25:a4:8c:6e:40:97:20:b3:0c:50:52:5e:45:55:23:b4:
         70:4f:4d:88:44:97:e9:96:71:4b:4f:38:f6:09:38:bf:f7:a7:
         e3:fe:d0:a7:f8:4a:53:a3:94:a0:6d:94:83:02:bf:c3:93:59:
         81:13:09:17:2e:61:d9:f2:07:c7:ec:b8:95:9a:4a:4b:e2:0e:
         c6:7a:f2:25:d6:7f:b8:a1:4f:d4:50:87:9f:ea:9f:1e:72:4f:
         77:f3:5d:79:63:2d:af:50:e2:62:fb:31:8a:aa:15:ab:84:bf:
         12:22:02:ca:4c:b5:4a:4b:a1:19:77:d8:23:8c:f6:d5:e7:41:
         ee:a3:8a:8c:37:2c:a7:90:c2:0e:31:eb:ca:b9:22:88:d2:dd:
         ae:0a:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:35:32 2026 by rpki-client