Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/91e9ef7a-3b63-3d0a-8019-f6ed4707d631.roa
File:                     91e9ef7a-3b63-3d0a-8019-f6ed4707d631.roa (raw, json)
Hash identifier:          RlUFVGrSi4W1OqnOYMtRJ07UJr/bbD7YCQdZms/PhTA=
Subject key identifier:   9B:98:40:2B:7E:DB:B1:E5:6E:99:61:DD:9D:B3:F5:37:3A:F3:12:6F
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584EA787D29CA7765F524DB6A5C0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/91e9ef7a-3b63-3d0a-8019-f6ed4707d631.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        198.154.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d2:9c:a7:76:5f:52:4d:b6:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a953d031-5d05-4208-af62-dd974bcc76a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:3b:fe:ed:94:4b:27:5c:41:30:50:77:ca:
                    08:a1:57:2e:dd:a1:8d:7b:f9:03:3f:f3:63:6e:13:
                    e0:0d:75:02:89:bb:81:8f:9e:73:bb:6c:62:09:ac:
                    d6:57:c3:c1:40:a3:86:21:ad:9c:c9:d3:53:a9:bf:
                    d8:0e:ef:33:70:4b:96:eb:dd:89:9c:28:e4:4a:27:
                    b8:c2:5c:60:8b:aa:04:dc:b6:e6:d5:21:00:70:b0:
                    42:6e:30:aa:1d:d5:5f:7c:40:dd:e3:f6:64:ae:f4:
                    55:56:e6:51:c4:42:8c:ae:a2:e8:04:fc:32:74:d0:
                    27:3e:ce:cc:dc:ca:b3:3f:7f:82:4d:87:ff:e2:9c:
                    71:5c:b9:ed:67:d0:45:2c:a0:63:72:74:c7:75:8b:
                    e6:1c:a5:62:9e:29:c5:a2:18:38:4e:c2:84:7f:ec:
                    aa:18:4d:13:35:18:44:46:a9:7e:e5:0f:f0:b0:62:
                    da:20:cf:12:21:7c:93:02:0b:0f:a9:e9:02:c5:98:
                    99:88:de:6d:da:26:ee:c2:ca:69:7b:6a:c1:7d:f8:
                    70:fb:41:1d:66:89:cd:61:b3:a5:cf:33:3f:01:da:
                    02:a1:32:de:e3:9c:b8:ec:a1:9b:59:ed:64:e7:de:
                    c6:a9:cc:94:15:0d:d0:20:ee:41:81:86:d3:9e:5a:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:98:40:2B:7E:DB:B1:E5:6E:99:61:DD:9D:B3:F5:37:3A:F3:12:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/91e9ef7a-3b63-3d0a-8019-f6ed4707d631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:07:77:ea:db:07:d1:14:36:d1:19:14:2d:6c:61:90:6b:b0:
         a5:d2:10:a6:fb:7f:8e:f0:e9:6a:e4:d5:8c:30:70:76:d9:25:
         36:2c:2e:6e:6a:70:cf:42:ef:65:e9:01:4c:b8:65:32:74:95:
         00:a5:ac:3d:27:49:86:2f:4b:89:12:ee:c9:ff:c6:3e:d8:39:
         df:00:3b:0c:56:37:58:a1:cb:33:60:74:0c:12:89:dc:ba:1c:
         3c:d5:a7:7f:69:46:a6:62:51:60:24:7c:eb:d8:29:1a:69:ff:
         57:dc:6d:24:8a:0e:aa:58:fb:80:88:17:57:21:7d:1d:86:cc:
         c2:53:21:fe:84:41:1b:94:59:0d:4c:d2:e6:2d:b6:b4:bd:ef:
         02:57:73:48:f4:b2:c5:23:bb:b4:39:ae:1b:35:83:83:96:55:
         a6:c8:88:33:9f:9f:75:d8:cc:bd:59:4c:72:2b:f9:22:2e:b8:
         01:bf:5b:8e:c7:27:69:d5:f2:32:f2:87:31:e9:77:3b:5c:44:
         1e:36:40:99:51:8c:5a:9d:ee:e6:97:e5:5f:41:75:8f:3b:0d:
         cd:24:97:dd:cd:25:b5:ad:79:a9:27:19:28:76:d5:97:04:2b:
         07:81:10:44:5b:89:cb:29:04:16:22:e7:f9:90:3d:28:04:52:
         ce:6a:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:42:22 2026 by rpki-client