Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/793e6ca5-3c8c-36c0-ad5e-4431c63c212f.roa
File:                     793e6ca5-3c8c-36c0-ad5e-4431c63c212f.roa (raw, json)
Hash identifier:          YkMJN/oGY598NPr2eKuOgVCeKUTi5VKeJW9dxwgrlis=
Subject key identifier:   B8:35:7D:10:11:80:1D:F3:F7:C4:7B:3C:D3:2B:17:EC:14:83:D2:40
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F4328584EA788244B22C39E8A7FD53480
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/793e6ca5-3c8c-36c0-ad5e-4431c63c212f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        198.176.124.0/24 maxlen: 24
                          198.176.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:24:4b:22:c3:9e:8a:7f:d5:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ecbbc8b4-b808-4a01-affe-491eb317da11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:f8:37:e7:c5:bb:21:24:ef:b2:a2:75:9f:
                    75:a4:45:6d:50:78:06:78:d3:ab:5d:ae:f0:2c:9f:
                    84:6a:bd:05:68:e0:db:f2:b8:c6:4e:41:07:61:88:
                    1e:a7:a1:d1:25:7a:56:c4:2a:c0:52:e9:50:9c:9f:
                    e2:1f:61:49:c5:dd:ac:c7:a4:34:c1:23:a4:b2:5a:
                    35:f9:80:51:1d:61:fc:0a:a0:ef:9f:01:31:3b:02:
                    53:23:05:16:2d:8f:27:17:3b:fc:49:c0:d1:be:49:
                    e6:9c:fa:8e:dc:4d:b4:d6:d1:19:28:aa:9c:74:13:
                    2e:18:4e:df:77:a9:8d:de:19:12:70:7e:46:08:29:
                    58:3d:3f:f6:d9:4f:ea:ec:1f:91:2d:50:00:b8:42:
                    b2:71:1d:09:c8:d4:90:95:db:26:0a:db:0e:af:ea:
                    85:ed:b1:58:71:76:89:d3:ce:17:38:ae:30:30:53:
                    81:b7:99:b6:b5:be:ad:04:9d:3b:31:45:4d:5f:ca:
                    99:8f:fd:9a:0d:2d:83:b1:50:60:55:d0:a5:4b:51:
                    2b:0a:5f:74:a0:17:e3:ed:99:77:6f:9b:a7:17:fa:
                    f9:0b:70:63:4d:7e:b3:bf:a6:3b:cc:5f:a8:4b:70:
                    04:0d:69:c3:9e:c3:1a:30:2a:89:8c:07:e7:39:ae:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:35:7D:10:11:80:1D:F3:F7:C4:7B:3C:D3:2B:17:EC:14:83:D2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/793e6ca5-3c8c-36c0-ad5e-4431c63c212f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:1a:d6:7a:4e:a0:64:3a:37:06:db:f2:3c:d0:09:c4:22:
         82:7f:4f:2c:cf:96:b9:a7:c8:f7:dc:2f:9b:42:91:15:3a:53:
         50:76:a6:f2:51:63:11:5b:cc:d8:ed:32:cf:50:ae:0b:24:a7:
         61:21:35:f3:35:1b:f6:63:7f:42:a5:17:2b:13:75:db:50:47:
         97:b5:6c:61:bf:98:df:ec:e6:39:26:08:05:84:2e:dc:4a:4c:
         5e:35:dd:3e:c9:c5:13:01:4f:71:5a:93:e5:2c:5b:da:f2:bc:
         a7:62:be:5d:cc:e6:25:d0:a8:da:59:a2:22:18:a4:d1:66:63:
         fc:8e:19:10:26:ed:44:bf:ff:d3:18:43:4f:05:d5:c0:0c:a4:
         8c:93:47:e5:df:35:b5:89:f0:bf:62:83:e2:f8:6e:56:1c:7d:
         86:5b:38:f0:ce:5f:b9:39:1b:5e:2a:3c:da:3d:5c:b1:a9:96:
         1e:8d:0f:5f:c0:dd:2f:0e:38:7b:39:7b:58:a0:46:33:56:08:
         9d:ae:e9:24:1a:9c:8e:6a:b0:0e:e8:2f:8f:2d:6d:b9:36:76:
         2d:8a:b0:32:b2:8b:ad:8d:56:a6:06:86:42:bf:64:07:39:ac:
         79:16:08:ae:ec:e6:7e:ce:85:24:44:ac:96:7d:48:12:96:7d:
         c2:89:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:15 2026 by rpki-client