Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa
File:                     cf45b857-9660-372f-b9ae-c17fb8c88862.roa (raw, json)
Hash identifier:          JODaWkL6sYKc9y6oKrjizDCQhvqR0tQ0jzzCG7J1baE=
Subject key identifier:   4A:77:AF:96:52:13:D2:2B:8D:3F:06:73:34:35:EE:0F:E5:3B:99:26
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584EFCACED345F93DC7BDD7F5C00
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     198949
IP address blocks:        208.91.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ed:34:5f:93:dc:7b:dd:7f:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=383b7cde-e9b8-4fda-91f0-54835f62d5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:81:5e:aa:d0:a5:11:a2:4a:c4:c9:1a:82:
                    66:06:ef:8f:99:c9:dc:a2:12:0b:df:cd:41:32:3a:
                    cc:e6:1d:53:03:8c:e8:fd:1e:c4:f7:48:dc:37:2e:
                    16:43:89:b1:ec:38:d9:af:e0:73:c6:94:8f:88:37:
                    fd:83:ae:a1:b9:90:03:36:16:01:97:65:cf:fc:c4:
                    db:4c:0e:76:f2:31:89:ac:c1:b7:14:c2:78:90:e3:
                    1b:94:39:4c:1c:41:c1:49:a0:5e:2b:e3:de:e5:21:
                    9d:fb:eb:80:b6:76:46:b6:ab:61:cc:fc:3c:27:fe:
                    37:dd:79:4e:7a:74:7d:62:b0:b2:3e:90:71:7a:38:
                    4a:46:41:05:65:8b:10:51:78:81:61:f4:f8:f4:71:
                    a2:b2:e3:64:65:16:7e:05:b8:30:7d:dd:db:7c:13:
                    31:ad:cf:0c:6c:ef:c4:30:13:45:37:28:4e:31:99:
                    13:07:04:24:0c:25:bd:1a:88:b8:81:17:1a:95:c8:
                    03:84:01:f9:22:16:36:6e:08:3e:33:af:2d:aa:93:
                    fe:61:a5:e6:c8:1f:4d:92:df:5e:83:1e:b7:c6:ae:
                    5f:bd:24:20:36:ac:4e:73:4c:d9:3a:24:85:06:bc:
                    b9:1f:28:8a:13:32:44:05:1d:8c:63:40:5e:ea:04:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:AF:96:52:13:D2:2B:8D:3F:06:73:34:35:EE:0F:E5:3B:99:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:88:b8:f0:ff:00:85:f0:04:8c:4e:d1:0c:73:3b:53:b6:5b:
         63:1d:82:c1:09:a8:ab:86:a9:ee:57:2b:cd:c4:ec:4f:f8:e2:
         a4:03:73:c4:bc:66:05:a2:e6:e3:05:06:02:4c:1b:76:04:e6:
         29:a4:28:b3:7a:04:06:c4:28:99:8e:d4:9e:5b:12:57:44:28:
         99:d8:eb:e3:17:06:8e:c3:81:be:af:ef:4a:d7:ed:17:00:ec:
         68:30:d6:39:54:9a:25:49:b3:5e:fd:98:4b:af:df:7b:70:be:
         ea:cb:18:4d:b1:09:eb:c2:5c:16:3b:59:e7:5e:11:8c:f5:f5:
         63:44:ba:bf:c8:da:83:41:de:7a:ec:1b:8a:27:3c:1e:5b:e0:
         c9:4a:12:45:d6:b8:a4:2a:fa:10:c2:95:12:13:c7:b5:aa:fd:
         00:c7:83:6b:db:a0:c3:c4:7f:e1:b1:e3:be:41:eb:44:42:e4:
         e7:3d:dc:5f:09:e3:6a:cf:1c:27:a2:ba:86:5e:b7:aa:1b:57:
         69:a1:7f:bd:c0:89:77:ae:8c:5d:fb:57:10:55:4e:bc:10:4c:
         c8:93:75:23:8a:06:21:78:d1:ca:2c:4c:79:bd:57:13:91:5c:
         9a:d3:83:4c:aa:ac:a0:3f:c3:89:f6:e0:1a:e3:e8:4a:61:1b:
         16:72:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:51 2026 by rpki-client