Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa
File:                     a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa (raw, json)
Hash identifier:          IonddXknmdSS/qhJncZhrX8Z2MJmy2lwsaK6eA+Pi9g=
Subject key identifier:   56:63:8A:CE:B1:0D:E4:F6:FA:67:20:24:21:A3:F8:0E:04:C9:8E:62
Certificate issuer:       /CN=4a2347a0-a386-4424-8887-fb176c5cf0b5
Certificate serial:       010D0C9F4328584DFBD5CF105D55D73F76602640
Authority key identifier: B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397041
IP address blocks:        198.136.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:cf:10:5d:55:d7:3f:76:60:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2347a0-a386-4424-8887-fb176c5cf0b5
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=09d3e815-6a64-4712-a3c2-11ab73e4bc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:b9:1a:1c:6c:23:78:70:f5:7c:34:88:db:
                    c9:f9:00:0f:20:c0:5c:86:b9:d7:cb:34:65:3f:a3:
                    5a:22:68:06:49:8f:f3:b8:70:9c:a1:47:97:f3:35:
                    01:c0:73:b2:8b:54:b5:a4:35:92:85:54:68:d2:fc:
                    ff:ff:89:54:dd:b5:bc:64:17:f9:cf:f3:90:31:5d:
                    3f:7b:43:78:15:67:a7:f0:ef:98:7f:81:56:32:11:
                    63:fb:b4:04:87:41:19:10:b2:c1:2f:08:63:7c:5d:
                    f2:0a:e0:89:7d:a5:6c:58:8c:30:55:f1:d4:9e:d2:
                    a3:87:64:1d:7d:27:d9:9d:6e:ba:ca:c1:e4:02:76:
                    3a:d0:fe:cb:69:46:fa:36:73:d3:a7:d1:bd:ff:50:
                    68:a2:85:24:83:fe:f6:65:9f:40:e1:17:55:3f:7d:
                    43:af:7b:75:2b:75:b8:dc:d7:fe:e7:35:67:f8:cf:
                    33:37:43:b5:e8:e4:29:9a:e0:dd:60:68:eb:71:c9:
                    60:6d:81:b1:ee:fc:1a:c7:36:68:06:8f:21:8f:ff:
                    f9:ff:ab:cc:50:b4:b3:e5:3d:c1:af:4f:ee:c5:ee:
                    8a:4e:ab:49:af:e2:8a:69:3d:44:a5:ee:7c:af:cc:
                    be:3a:48:92:c5:12:d6:ef:dd:f9:f5:d2:9c:87:6d:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:8A:CE:B1:0D:E4:F6:FA:67:20:24:21:A3:F8:0E:04:C9:8E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.136.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:79:26:49:90:21:ba:f2:6b:cf:70:8d:3f:11:7d:59:16:
         a7:29:7b:7f:3c:76:39:68:6d:a0:d0:de:dc:98:c0:c0:e3:0c:
         2e:05:d0:1a:05:ab:14:a8:94:59:7d:65:4f:c2:bd:01:8b:26:
         21:b4:44:0a:05:95:5a:e5:3d:30:94:35:eb:7d:de:ca:33:04:
         3e:2d:c7:4d:ee:82:a1:73:80:45:cc:1b:52:b4:a4:e0:9e:5c:
         e1:e1:ce:46:3d:86:d0:7a:f2:82:d2:1c:dd:5b:e0:9e:80:c3:
         e8:21:bf:b1:ca:81:4c:77:ed:39:64:79:e2:88:bd:c4:51:f4:
         11:25:e7:89:84:d3:c5:3a:e9:2c:f4:50:59:3b:a6:4a:4d:42:
         3a:95:8b:f7:b9:ee:df:cf:10:b7:2a:c9:fa:b7:d6:71:9a:01:
         9e:c4:b8:3c:63:9d:c7:2b:f9:4d:d7:b0:34:ec:e0:ef:7a:cc:
         9d:53:eb:ac:0d:38:88:19:16:2a:92:ff:4f:4a:dd:33:13:33:
         76:06:6b:be:67:31:ea:57:52:29:19:a3:6c:5d:dd:7e:4e:da:
         60:26:6c:3f:78:75:f7:1e:f6:7a:d8:1f:8b:88:07:fe:ef:c5:
         d1:ff:94:e6:26:3e:a8:19:58:d8:d6:3a:b7:5f:ae:85:6e:29:
         df:ac:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:14 2026 by rpki-client