Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/8b5c0ec8-8c8b-3741-98d8-330f50643492.roa
File:                     8b5c0ec8-8c8b-3741-98d8-330f50643492.roa (raw, json)
Hash identifier:          PAkRe+WjRxhDW/JD+x8fR/miBmmGuDdGRl+O3R8HAGU=
Subject key identifier:   C5:01:05:52:C7:C0:61:22:35:B6:73:3B:BA:8F:23:07:D2:54:3A:40
Certificate issuer:       /CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Certificate serial:       010D0C9F4328584F82AD98FBCBA21FD40AA9B640
Authority key identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/8b5c0ec8-8c8b-3741-98d8-330f50643492.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     46261
IP address blocks:        172.98.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:98:fb:cb:a2:1f:d4:0a:a9:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=18d6721f-9aab-4f62-8c06-dc65aabdc056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:4b:70:ae:71:26:85:83:5b:45:97:80:1e:
                    fe:49:54:5b:22:db:e6:67:cb:ce:64:95:4d:d9:22:
                    71:ff:95:24:5e:92:2d:6a:37:29:99:f7:bc:85:b6:
                    6f:57:93:5e:22:7e:6f:4c:3c:fe:73:4a:a2:e4:e7:
                    8d:eb:19:c6:ea:4c:2b:09:a2:39:01:a3:5f:53:af:
                    f1:f6:35:4e:37:c6:4a:39:e2:52:3d:31:70:e5:b1:
                    57:5a:6f:b2:8f:f3:b1:d1:01:d7:67:a8:3e:04:5c:
                    5f:04:4f:ef:7b:ca:5a:b4:8e:54:64:09:c5:a3:c1:
                    97:88:c2:c7:f3:4f:d2:62:ae:42:77:da:0a:28:99:
                    4b:5e:d8:16:06:b8:4a:e9:da:80:86:73:18:aa:64:
                    fc:90:4f:ed:ef:b0:d2:b1:ac:ea:fe:9b:b3:b5:04:
                    9c:a8:c6:05:28:dc:ed:a6:28:6a:3b:a8:79:92:c5:
                    82:30:cf:bc:15:f0:2e:45:f1:e4:8b:95:71:e6:74:
                    7f:b4:bf:9d:c7:9b:78:f4:2a:62:ed:d6:59:8f:fa:
                    8a:31:ee:1f:f6:58:bc:30:a4:58:f3:91:1b:30:c7:
                    81:70:f7:5e:ac:2f:a9:6d:b9:69:30:0e:bc:07:b7:
                    88:9a:24:e5:52:e6:dd:0d:b7:34:85:40:3c:b1:26:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:05:52:C7:C0:61:22:35:B6:73:3B:BA:8F:23:07:D2:54:3A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/8b5c0ec8-8c8b-3741-98d8-330f50643492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl

            X509v3 Authority Key Identifier:
                keyid:63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:69:ae:28:a4:8c:86:34:93:f6:2a:98:ef:22:7a:e1:7c:cd:
         4e:cc:e4:4e:ba:e9:f2:94:9d:ae:d2:df:ae:49:98:5e:67:bb:
         88:7f:3a:29:59:4a:77:1e:d7:1b:b7:b1:cf:8c:32:03:a6:e4:
         94:7d:c8:50:28:15:40:b7:eb:cf:6e:77:de:01:0b:e0:9f:eb:
         05:1c:02:39:d6:df:7a:7d:4a:74:07:63:44:17:8d:91:30:98:
         dc:03:05:cf:d7:f6:60:9b:b4:81:3d:6e:1e:51:2b:ff:17:de:
         fd:3a:37:4b:d4:56:b3:31:16:ca:63:75:5a:ee:1e:2b:ae:d3:
         2a:b0:77:1e:7b:ec:a8:f0:f5:27:04:d7:07:40:b0:b3:92:91:
         16:91:1a:67:94:d3:47:06:bd:10:23:07:bf:e0:76:b0:27:9f:
         62:82:f1:ba:71:b4:6a:b4:ab:0e:b2:ba:7b:5f:5d:fa:2b:f0:
         f2:ef:5c:50:25:a8:78:91:30:a3:44:35:5c:b0:59:d6:e0:37:
         1f:aa:8c:1d:8c:48:2a:55:38:42:32:08:21:7d:80:5c:e8:82:
         50:00:25:9c:98:be:d3:18:54:e8:68:dc:d9:82:90:a6:b5:c0:
         af:4a:2e:d1:fe:2c:0f:af:11:37:fc:79:2e:ce:12:ce:35:c9:
         2d:56:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:38:44 2026 by rpki-client