Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/18b9d3ba-02e8-3e63-b573-54b8030c8e50.roa
File:                     18b9d3ba-02e8-3e63-b573-54b8030c8e50.roa (raw, json)
Hash identifier:          Yq7EcGoHsSG0lQtIZ1UZvwDUY7v1b2H8aM11FansiZI=
Subject key identifier:   90:43:40:1D:0C:47:DA:AE:11:2B:ED:A1:B9:4F:7D:F5:33:33:85:14
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F49870B85E132AAB9C32691C0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/18b9d3ba-02e8-3e63-b573-54b8030c8e50.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     214432
IP address blocks:        198.1.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:0b:85:e1:32:aa:b9:c3:26:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1b29af5a-07e0-49c6-aa2f-92a8024e9d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:46:20:f5:87:e3:e6:72:58:d3:3b:09:74:
                    fc:9f:2a:8e:97:dd:dc:9e:71:0f:10:f4:05:89:34:
                    44:d9:7b:06:77:a2:2d:25:b4:bc:97:bf:e4:ee:58:
                    34:f5:04:b3:ea:ec:af:29:3f:80:1c:02:07:b6:09:
                    54:73:84:03:7d:12:d4:bf:19:38:2e:50:11:0d:80:
                    cd:77:12:7b:a9:6d:a8:84:da:d0:87:29:1c:b2:48:
                    e4:55:b1:e6:0b:99:e3:7d:4a:fa:7e:1f:94:0d:39:
                    3f:46:21:99:55:1f:40:ec:45:bc:de:5b:9e:1d:8d:
                    68:2a:85:48:ef:ea:1b:e2:04:fd:50:c3:9f:4e:5a:
                    d4:c9:52:e3:19:fa:8f:56:84:1e:b4:37:b3:ea:78:
                    03:70:e3:ed:43:78:b8:49:bc:21:7f:07:77:47:b8:
                    e9:cf:59:35:a6:ee:34:4e:d3:72:43:61:d2:e8:27:
                    c4:fa:78:df:8a:ad:94:66:2b:d1:d6:8b:e7:70:76:
                    50:dd:a4:0f:3e:16:43:7f:cf:b4:f5:9d:f5:36:82:
                    53:ec:fe:4d:b1:3a:7e:ca:2e:92:b4:bc:9e:a6:57:
                    e0:81:cd:80:c5:32:4f:1d:ee:af:b0:6e:43:3d:32:
                    dc:79:0c:00:35:19:04:d9:9a:82:b9:3f:a5:0e:3b:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:43:40:1D:0C:47:DA:AE:11:2B:ED:A1:B9:4F:7D:F5:33:33:85:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/18b9d3ba-02e8-3e63-b573-54b8030c8e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:67:6d:92:48:75:3c:aa:55:fb:7c:9b:56:80:8b:fe:4c:6f:
         f3:81:d9:b8:d3:d1:f7:7a:d6:e4:d6:5e:b3:c3:3d:9d:8e:f5:
         86:c0:4a:51:ac:16:4d:2f:54:fc:ed:43:d5:e3:54:70:b4:5d:
         46:87:32:7d:69:ca:92:f5:8a:a4:9a:5c:93:1c:36:13:de:11:
         ae:93:fb:4a:73:de:fa:f6:1b:e8:ed:92:7f:e3:8e:88:90:1c:
         21:fd:c5:0d:1f:a5:30:b0:1b:af:9c:25:51:3f:c6:bc:f8:02:
         5f:a7:1c:57:28:2b:8e:da:b7:1b:49:be:21:fb:a0:7a:2a:87:
         bf:e2:98:8e:c7:b0:fd:9d:ec:4b:e4:db:77:5b:1c:6a:06:20:
         c2:95:25:fa:fa:ac:d6:36:54:10:a6:04:93:25:cf:67:5f:50:
         df:3d:7e:98:cd:0d:fd:e6:d6:08:71:6d:5a:ca:1e:87:8d:b1:
         7f:12:df:03:a9:9a:57:aa:d9:75:90:df:cb:8a:e0:73:15:82:
         03:d1:03:57:a0:3f:11:52:85:78:60:33:92:38:71:fc:37:a7:
         ec:26:19:cd:d0:e7:b7:c8:48:ad:2a:a9:f2:14:19:ad:b2:96:
         07:6f:05:9f:74:b4:be:2e:3a:ae:45:e8:d9:db:ea:f8:b8:49:
         a0:71:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:00:34 2026 by rpki-client