Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa
File:                     65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa (raw, json)
Hash identifier:          eR2apv/idlWsMNxzUidZoS1ly3ogZrGnCHdLXmbiroY=
Subject key identifier:   43:8A:84:A8:A1:09:4A:F0:BC:5D:92:BE:7D:82:7F:3A:62:B0:4C:BF
Certificate issuer:       /CN=557a586a-7e35-45b6-bb87-b7631d4dda84
Certificate serial:       010D0C9F4328584E18AF05CDCAD878A47A90F740
Authority key identifier: A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        192.231.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:af:05:cd:ca:d8:78:a4:7a:90:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557a586a-7e35-45b6-bb87-b7631d4dda84
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=17cc1ee0-fc25-49b5-bf86-eac5c4e1baf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e4:9f:24:21:16:a0:53:3b:74:be:74:3a:e7:
                    90:cb:2e:cc:a4:3e:8b:f5:7e:d6:01:fe:63:98:03:
                    31:2f:63:a3:3c:40:3e:fd:3d:45:a1:53:2b:31:36:
                    2f:92:50:d5:ca:7e:88:c2:a3:89:dc:e7:31:95:74:
                    ae:ff:a3:45:58:a3:15:ab:77:cd:45:f2:ee:59:59:
                    7c:0c:c6:2a:f6:0c:c4:df:d9:27:35:08:49:b2:c0:
                    02:71:18:82:4a:57:3b:da:c1:61:fa:58:fd:cf:4a:
                    25:b5:71:b8:ba:49:a0:40:b2:2f:9b:98:bb:f0:d1:
                    66:2e:ef:ec:64:08:92:fa:61:8c:8b:cb:e0:bc:70:
                    3f:6a:54:18:c8:12:f8:c9:3e:50:15:2b:74:5f:c7:
                    66:ea:53:a6:cc:5f:82:aa:53:7e:74:85:5d:53:b9:
                    b1:9f:fd:50:16:c2:10:69:e4:55:9d:9f:56:b4:af:
                    21:12:46:a0:70:be:a5:44:0a:9a:3a:26:f7:dc:4b:
                    d2:a5:38:ee:81:36:5d:ee:9b:6a:fb:42:80:39:5c:
                    4d:94:bd:9a:be:a3:a3:9b:21:9b:3e:9c:29:d7:e8:
                    72:06:83:f3:39:e0:20:50:6c:c7:26:00:6c:a3:85:
                    ee:b7:10:4f:02:93:4e:14:1f:64:49:99:ce:27:f6:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8A:84:A8:A1:09:4A:F0:BC:5D:92:BE:7D:82:7F:3A:62:B0:4C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl

            X509v3 Authority Key Identifier:
                keyid:A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:76:d5:6a:d0:d9:36:94:8c:d5:b9:45:1a:10:5e:ef:4b:b8:
         2a:8d:88:fb:13:3d:87:3e:f8:3f:dc:39:5f:1a:f3:46:3c:10:
         e0:99:89:2e:ed:d9:76:d4:c9:5f:70:4a:50:7c:34:89:e0:f6:
         69:8d:6a:1c:23:43:7a:c5:68:af:a9:53:62:a6:86:d2:32:c8:
         81:3f:2c:0b:26:da:8e:71:4e:44:39:86:c3:94:7f:81:2e:8d:
         3c:9d:be:c8:0a:18:19:c7:73:fa:8b:67:54:2f:c3:65:6e:e0:
         58:5e:2e:b4:2f:75:d9:f6:d2:62:37:60:ff:91:76:79:29:25:
         ed:05:ac:32:e0:54:9c:7e:b9:d1:26:37:e3:9c:3d:13:8a:1e:
         8d:db:b9:43:c3:61:4c:25:58:30:de:80:5f:56:b9:fa:dd:0a:
         15:97:e7:52:79:af:d8:3d:c4:28:5e:55:a5:bb:44:b5:83:7d:
         39:6a:62:ab:11:24:e3:af:bb:e1:72:29:d1:bf:c7:17:48:1b:
         c7:b8:34:f7:18:55:db:f8:07:ba:0f:3b:89:9b:0e:19:dd:bf:
         ed:99:82:61:e6:07:56:16:84:09:4f:f2:84:a2:0e:f9:69:c2:
         ae:d7:a8:4a:6c:63:1a:52:83:78:57:e8:11:b9:cf:70:77:68:
         89:0a:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:57:12 2026 by rpki-client