Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/db950819-2bed-3fee-879b-ea294d2abbe5.roa
File:                     db950819-2bed-3fee-879b-ea294d2abbe5.roa (raw, json)
Hash identifier:          XZODhhsFj1HKYstzOEsgiex9NY9yt+JdhMPiLqVVevo=
Subject key identifier:   58:3F:E4:F4:5B:51:25:06:64:64:84:46:C0:D8:E1:9B:23:19:85:A5
Certificate issuer:       /CN=a04b5188-7d31-4ad3-8474-090b809c8408
Certificate serial:       010D0C9F4328584EBC770B05CE27345EF8121320
Authority key identifier: B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/db950819-2bed-3fee-879b-ea294d2abbe5.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     54235
IP address blocks:        198.136.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:0b:05:ce:27:34:5e:f8:12:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04b5188-7d31-4ad3-8474-090b809c8408
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=8d0939a7-9f87-45b4-9f65-9d6c4b91178d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:0c:6a:8e:fe:ba:29:7e:b1:89:af:2e:57:
                    89:f6:6a:87:46:2f:fe:40:5b:4f:78:b7:72:42:d3:
                    0a:0c:cf:67:d0:44:d6:08:aa:6c:68:f8:e9:50:94:
                    91:77:0c:49:ee:99:58:61:c3:42:02:5d:f8:ff:57:
                    c6:52:b0:cc:b3:79:12:53:3e:8b:90:b6:fb:7c:18:
                    49:e3:b5:53:10:e5:49:7f:62:08:d2:d7:d2:c0:c8:
                    bd:a9:2c:7b:77:10:1d:f6:58:68:fd:11:37:da:0a:
                    a2:27:76:81:ac:0a:f2:37:b4:df:1d:84:76:be:5b:
                    ce:a1:85:14:d1:7c:e4:c7:82:9d:02:2c:f3:e9:d0:
                    e2:8c:3e:c4:cf:41:ff:2a:7e:62:26:93:c9:c7:14:
                    32:1f:29:64:11:30:a5:21:1e:f7:21:d5:18:43:5d:
                    f8:38:28:26:ea:7e:59:57:0d:1e:01:d5:43:e6:07:
                    9b:af:f4:40:73:99:c4:33:46:b3:d4:bf:fd:aa:85:
                    d7:85:50:dd:5d:17:c6:26:43:95:b2:a7:36:25:d7:
                    21:7e:a7:a6:39:58:96:9d:38:f5:78:05:3c:38:a0:
                    a5:ac:b3:4d:80:8c:9d:25:eb:f3:3b:6f:3d:eb:ea:
                    03:50:74:16:12:35:7d:31:0a:85:07:f8:64:44:7a:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3F:E4:F4:5B:51:25:06:64:64:84:46:C0:D8:E1:9B:23:19:85:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/db950819-2bed-3fee-879b-ea294d2abbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl

            X509v3 Authority Key Identifier:
                keyid:B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.136.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1a:4f:a2:9f:66:ab:1e:d6:dc:6b:7d:80:4b:3d:a8:ad:7a:
         f5:84:8a:18:70:39:08:44:9b:5b:62:c2:46:2e:3d:24:94:f2:
         cd:cf:1e:63:53:2b:fc:7d:a9:4a:aa:4a:b8:ae:81:ab:e1:fd:
         c5:ca:74:3b:dc:a8:c7:21:98:d5:ff:97:00:a8:44:47:fd:83:
         6c:7a:0d:e0:13:0f:ad:8a:fa:b6:28:8b:92:4a:cb:d7:51:de:
         f7:5f:f6:e1:5a:6f:92:7d:64:92:5f:df:2c:a9:f1:9f:9b:fa:
         25:5b:8d:da:6c:fd:73:e3:5f:65:31:20:25:23:e3:2d:74:90:
         52:35:0c:29:fc:04:12:c8:0d:4b:3f:e8:75:63:9f:f2:65:3c:
         6e:b6:16:ca:23:2e:2c:54:79:44:1a:1d:34:6b:cf:44:e0:d7:
         60:6f:08:e9:57:56:c2:04:ea:2c:51:62:35:7f:c0:27:36:43:
         83:61:c4:cb:22:d3:04:56:b6:9e:03:4a:e7:aa:71:b0:0e:0e:
         f1:f7:7e:1a:61:a8:cf:76:40:30:0a:d6:18:e1:b6:e6:1e:38:
         66:04:14:e5:b4:61:4d:3a:be:a0:b1:f7:af:55:12:ff:d5:fe:
         95:f3:86:a6:fb:df:9c:97:2b:1f:ed:09:23:cc:ea:64:e7:0d:
         61:99:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:52:58 2026 by rpki-client