Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa
File:                     3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa (raw, json)
Hash identifier:          g2q4MEpzFlD70OWFct2jDDEg0ccDoC+zdQRocvXS2y4=
Subject key identifier:   40:1E:59:6B:F7:D8:F7:C6:66:A8:9C:70:8B:47:79:15:22:66:46:57
Certificate issuer:       /CN=63284bd2-12fb-4094-b79d-d52c0f6a5a9d
Certificate serial:       010D0C9F4328584E253EECD2DE8512AC875E7A00
Authority key identifier: CA:BF:30:60:DC:47:25:2D:5F:DF:15:19:D0:7B:25:39:C5:36:4A:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     401470
IP address blocks:        198.202.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:ec:d2:de:85:12:ac:87:5e:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63284bd2-12fb-4094-b79d-d52c0f6a5a9d
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=017bfa83-07ec-4826-9021-36977da6f4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:3c:c5:1a:78:57:e9:dd:ba:9e:66:2d:7b:
                    0a:fb:32:1a:5b:59:b9:8d:55:2e:f4:6f:9b:df:45:
                    fc:9c:b6:f8:a3:88:1a:65:92:93:31:2d:d4:32:ae:
                    68:c3:68:09:85:46:44:ee:86:a5:2d:f1:29:b6:73:
                    b0:78:1e:ee:e0:60:dc:ea:e6:21:2b:26:08:42:bb:
                    8d:99:bf:a8:e6:b1:74:eb:71:1e:05:ed:85:d1:5a:
                    93:2d:e5:3b:de:2f:5b:d4:80:8a:3d:68:0e:d7:3f:
                    a7:64:e3:ef:0e:3d:eb:17:88:d0:f5:96:03:fc:61:
                    56:20:bd:05:be:64:b9:46:c8:74:fa:39:e0:8a:a5:
                    7e:73:d4:93:59:fa:e5:5c:e6:0f:03:56:27:a1:ba:
                    c7:d7:f4:88:0f:18:d2:31:2b:61:16:46:a4:6d:f3:
                    54:bf:8d:5d:ea:a6:c6:32:3a:36:29:55:cd:62:cb:
                    36:06:2f:0c:a4:98:77:95:4f:6f:9b:6c:56:07:8f:
                    65:a0:a5:26:d3:91:f2:f9:02:8e:59:09:1b:84:0b:
                    f9:a5:62:bd:09:cb:05:6e:b6:a8:8c:cd:e5:7d:cb:
                    97:97:88:8d:2a:e8:94:59:38:78:34:0e:89:8f:9b:
                    65:2f:ac:0b:43:30:30:76:2f:96:dd:a0:4c:33:e5:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1E:59:6B:F7:D8:F7:C6:66:A8:9C:70:8B:47:79:15:22:66:46:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:BF:30:60:DC:47:25:2D:5F:DF:15:19:D0:7B:25:39:C5:36:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:f4:54:2b:46:88:79:6d:0c:f6:9f:38:06:39:7c:c2:08:
         3f:4f:7e:9f:09:a1:5e:5e:e0:08:24:d0:29:5c:0b:47:4f:61:
         ec:44:02:8d:26:03:c4:e7:a9:77:ce:79:78:cb:8d:79:dc:72:
         66:f7:d3:c7:3f:2c:b2:f8:d7:30:57:2e:55:a5:a7:50:44:fc:
         6d:96:3f:c0:1e:b4:9f:7f:80:52:c3:3b:22:25:83:f0:09:79:
         b9:43:e3:92:c7:58:22:56:56:f1:9b:88:a8:1f:b2:0a:33:1d:
         81:87:99:7e:1a:8c:6e:1b:ea:90:62:8e:81:82:c7:65:8c:8a:
         1d:b5:27:06:26:7a:12:26:30:0b:73:56:e1:79:ca:38:72:6d:
         dd:da:12:17:bc:d9:c0:20:eb:1c:db:dc:54:00:6a:84:d6:61:
         6c:9f:68:36:c2:44:44:a9:27:50:19:e5:2f:b8:08:2f:f3:36:
         1e:61:a7:c1:80:21:27:1a:49:69:02:b1:92:72:0d:f6:4e:6a:
         a2:c3:fc:a4:2a:56:98:0b:36:d4:a5:9a:13:d6:84:87:55:de:
         fe:0c:26:af:45:b3:6b:7d:46:6e:45:99:67:d0:0f:1c:20:eb:
         16:88:14:e8:78:f5:c9:14:b5:16:07:26:75:c4:7f:95:cf:d3:
         f4:31:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:11 2026 by rpki-client