Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84167010-765c-3754-8e20-fc245fd05fca.roa
File:                     84167010-765c-3754-8e20-fc245fd05fca.roa (raw, json)
Hash identifier:          g/QQ9iX7lTWbMlgFcPtMHMUG+1zJQ5rKXKvKXKgL88s=
Subject key identifier:   91:57:9D:69:96:5C:2D:2D:8E:2D:82:C5:E9:EE:D6:6D:C3:FD:62:10
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F093CCCDB6FE9898FE5972CC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84167010-765c-3754-8e20-fc245fd05fca.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     2763
IP address blocks:        156.151.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:cc:db:6f:e9:89:8f:e5:97:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=2fedd89a-bec4-4113-989f-4bd4c8ee59b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:8d:ba:10:26:ab:ba:a9:eb:10:11:b7:33:
                    b0:24:d4:ed:c7:69:9e:08:04:90:8d:90:00:19:9a:
                    1f:31:e0:c6:25:f1:ae:08:c4:10:9a:3f:fe:fc:ec:
                    ac:d2:fb:69:bd:13:66:b0:f6:ce:06:2b:a6:36:71:
                    67:17:6a:83:a9:56:ec:a5:1b:6c:b7:93:9e:71:fc:
                    3f:b6:80:a0:d5:5c:ab:5e:e5:9e:09:50:b9:25:78:
                    65:f6:35:74:4d:be:b8:c3:7c:47:c0:35:47:53:2a:
                    a5:97:ef:91:80:0c:36:40:6e:bd:67:77:8f:52:8c:
                    ae:0d:11:fd:0c:1d:1d:df:4f:12:d0:c3:9b:16:5c:
                    28:54:b4:8b:1c:82:8d:43:4c:4f:05:85:d8:63:66:
                    c2:ea:3a:66:33:de:f3:db:0a:57:88:42:f6:4e:f5:
                    b2:49:02:99:3d:cf:9e:f0:0c:43:c5:84:d1:a0:3c:
                    35:68:1e:aa:60:48:58:33:c9:40:28:6b:33:26:2e:
                    fa:b7:a8:c3:1a:0f:02:67:5d:f5:35:dc:dd:35:7e:
                    b3:c8:d8:1a:cc:35:31:83:b2:9c:5f:c8:0a:7f:10:
                    02:76:1f:2e:08:ec:c3:e2:9a:27:43:dc:65:53:2f:
                    f2:82:48:07:a8:9e:0d:fc:2c:45:70:c9:bf:79:67:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:57:9D:69:96:5C:2D:2D:8E:2D:82:C5:E9:EE:D6:6D:C3:FD:62:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84167010-765c-3754-8e20-fc245fd05fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.151.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:16:82:d1:80:33:1c:74:b9:01:d2:77:c6:b3:8e:09:86:
         92:b8:d9:84:c8:c6:bd:b6:81:05:65:b4:7b:44:d2:72:89:9c:
         fa:13:ed:df:59:cd:5c:91:c1:fe:62:a2:6a:09:0a:b0:56:bd:
         ae:85:d5:99:0e:47:8c:d0:a2:e9:0c:8c:0d:7f:75:ed:7f:c0:
         87:14:0a:51:7e:68:eb:33:de:89:12:ef:a2:a7:01:d8:bd:3c:
         d3:62:2c:50:99:53:21:37:a0:85:83:5d:ec:79:1e:c3:d1:15:
         6b:de:35:c8:67:fe:26:07:d4:c4:2f:6d:b4:9c:96:08:73:1c:
         8e:8c:08:d0:72:2f:a8:49:14:a6:8d:c1:a7:3d:51:4a:16:3f:
         48:2e:b8:81:79:ea:0c:65:cd:74:9d:7f:ba:db:85:de:f6:93:
         11:65:78:b2:ec:c4:4c:e6:dd:d4:64:7f:62:6a:6f:d3:18:f1:
         ee:b9:d0:c4:8e:05:6e:21:07:0c:8d:e7:1f:19:d0:93:3e:12:
         99:cc:95:e0:ab:c5:7c:25:df:a4:fc:ad:fa:4f:e4:eb:ab:3d:
         2f:5d:37:0c:75:3a:35:09:66:c8:8e:b2:51:be:cc:85:94:49:
         16:0d:7b:20:bb:a6:7d:2b:fd:62:26:98:4a:ae:01:df:c3:1d:
         de:68:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:23:07 2026 by rpki-client