Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c98833cc-b227-3b98-b57f-b42541067cd5.roa
File:                     c98833cc-b227-3b98-b57f-b42541067cd5.roa (raw, json)
Hash identifier:          fLAAe6koko7zupzDqbZFcEY8I/7Kj8wwwNGmYsrztRE=
Subject key identifier:   0B:D8:43:83:D8:34:74:2B:33:6E:28:B4:AC:B6:33:0C:F1:AC:D7:D6
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F4328584DFBD5DD185A13D96F4FE94E00
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c98833cc-b227-3b98-b57f-b42541067cd5.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     5650
IP address blocks:        209.166.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:dd:18:5a:13:d9:6f:4f:e9:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=f5b333ae-eb40-4818-9952-f29005723ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:41:d3:49:12:e5:30:8d:da:60:8c:64:08:97:
                    c1:79:f9:d2:18:30:da:9b:f8:0a:77:97:d0:c1:38:
                    72:9f:cb:b3:b5:67:6d:8f:3a:e9:d9:52:05:1c:54:
                    c8:67:1f:1e:8a:42:0d:1a:77:a7:c0:27:5a:a8:9e:
                    9a:11:bc:f1:b3:00:db:0e:82:4b:90:e9:7b:07:8d:
                    4d:cf:8e:9a:de:85:5b:76:c4:35:21:bc:72:64:cf:
                    3f:f0:db:3e:ed:f0:12:dc:29:81:84:c4:11:b0:74:
                    7d:c8:eb:df:7a:25:cc:f5:c4:22:86:2d:bd:80:0d:
                    9f:73:96:58:a8:93:07:9b:33:dd:c4:c1:77:e1:ed:
                    5c:bd:39:4c:95:34:8a:31:6b:bd:55:09:cd:91:76:
                    cf:01:39:65:99:71:6b:68:86:11:6e:e5:f9:d1:b8:
                    e3:67:33:7d:8f:68:a0:b5:95:e3:fd:61:2b:57:03:
                    06:43:c4:b9:1b:b9:b7:26:51:64:53:65:9f:33:8e:
                    a2:69:fe:07:55:4b:1f:55:48:cc:3f:2c:de:0c:6a:
                    54:ff:14:bf:b0:b8:fc:15:68:6e:02:b7:27:df:78:
                    80:68:b0:67:e6:38:f1:8c:09:3c:a8:8b:d4:38:00:
                    8c:2b:b5:80:90:50:68:ee:64:07:6f:79:97:09:6f:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D8:43:83:D8:34:74:2B:33:6E:28:B4:AC:B6:33:0C:F1:AC:D7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c98833cc-b227-3b98-b57f-b42541067cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:23:9b:78:8a:5d:73:4b:23:3b:ac:c8:1e:f5:46:84:0b:54:
         1c:74:b1:4c:be:bf:bc:8c:cd:99:f6:36:23:36:5f:44:03:71:
         2c:3d:77:70:cd:2d:3e:66:9e:62:16:3e:3c:f8:4b:7d:94:4b:
         fd:cf:c5:da:62:00:23:2e:e4:93:48:77:94:7e:cd:d0:75:e4:
         41:37:16:19:6e:66:e2:cc:8b:18:d3:1e:02:89:4c:ca:5d:00:
         58:0e:2e:a4:16:4a:ea:ac:6b:d2:08:13:b5:b9:b1:b5:8b:38:
         6f:12:b6:c4:60:48:b8:10:10:2b:2a:66:eb:9e:49:b9:4b:7c:
         80:6f:7d:38:2f:7c:fa:95:98:20:33:2f:67:68:66:d4:3a:3e:
         81:ff:18:f7:94:2a:41:28:61:38:44:f8:f1:fe:c7:04:2d:99:
         2c:83:55:62:87:1b:d9:27:cf:01:59:8e:4d:d6:22:44:ec:9b:
         07:9a:ec:e6:37:15:e0:c0:4b:8b:cb:f6:50:fc:11:a5:40:bf:
         5d:db:b2:ff:42:e2:53:ac:5c:66:df:12:f0:e7:e6:60:d3:f1:
         c6:1a:89:c1:d3:2f:36:cc:25:3d:9c:e0:fd:fc:9a:95:99:69:
         43:0d:5d:67:e2:db:30:38:34:0b:9f:7b:43:ba:ca:e9:47:50:
         23:b3:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:55 2026 by rpki-client