Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa
File:                     20b12159-fae1-324b-856e-4ffaaa0299f4.roa (raw, json)
Hash identifier:          kWXAz8BVx+weuhIO53EUQd1WeuKc7Zdsu4fThXcuKZQ=
Subject key identifier:   5D:8A:E7:10:4A:18:D7:02:35:13:73:37:8C:66:BB:42:F7:5D:92:0E
Certificate issuer:       /CN=12a9b198-d23d-4f41-8397-cc467b398bc3
Certificate serial:       010D0C9F4328584EF2E765E71564B7D267F7E200
Authority key identifier: 72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     16796
IP address blocks:        198.163.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:65:e7:15:64:b7:d2:67:f7:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a9b198-d23d-4f41-8397-cc467b398bc3
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=5af5db10-aceb-48d3-b7b7-e18f92c4f632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f7:59:db:4b:d9:f5:60:df:de:5d:60:fb:b8:
                    5a:e6:c4:42:98:60:59:3d:81:33:b9:50:fd:82:4f:
                    32:fc:aa:49:ea:fd:1d:d5:aa:3b:df:4d:78:27:7f:
                    36:9e:08:4a:e5:8b:81:ea:ad:34:6e:9d:69:3b:a9:
                    e7:41:40:39:10:b0:70:dd:6f:6f:b2:7c:97:a3:a9:
                    9c:3b:20:5f:7a:c5:e8:c9:71:51:93:1a:08:5c:bc:
                    db:64:82:b6:02:9d:38:af:d8:a1:a2:65:f8:9e:05:
                    41:15:03:8f:8d:55:85:c8:03:dd:4b:9d:d4:ca:fb:
                    16:b1:13:34:5e:80:0a:f9:05:9d:59:fb:a0:7b:7a:
                    7d:e4:95:a4:62:68:e0:e4:bb:b7:fe:97:42:e1:2e:
                    b8:22:af:45:32:e9:06:cd:b9:9b:55:71:03:cb:78:
                    41:8e:01:25:0d:0d:09:ee:24:62:5c:20:40:c1:a6:
                    79:02:75:0a:18:4f:db:43:51:b7:a7:6f:6c:0e:ec:
                    84:9c:72:da:48:80:a5:06:76:b4:09:13:c9:be:e8:
                    13:67:35:0e:4c:8c:3c:52:d0:5e:a3:f5:8c:8e:9e:
                    0c:f9:7a:97:6f:6f:f4:99:90:fe:b8:f5:b0:4e:be:
                    ca:8e:13:bf:77:dd:9e:f6:55:38:4d:cf:a9:a9:c1:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8A:E7:10:4A:18:D7:02:35:13:73:37:8C:66:BB:42:F7:5D:92:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl

            X509v3 Authority Key Identifier:
                keyid:72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:dc:7b:17:70:02:13:79:a1:26:a4:b5:4b:3a:24:40:af:3c:
         2f:51:e1:ff:f7:65:72:91:bf:79:4f:fb:45:50:e2:28:cb:c1:
         2c:ab:fa:bf:93:ce:b2:e4:1e:54:ca:1e:39:2c:20:01:d1:5e:
         60:c1:e5:f1:df:bc:13:a3:72:a6:5e:7a:64:94:37:a8:64:26:
         cd:f4:53:c8:fe:ed:88:af:dc:ea:25:de:8b:e4:7c:85:98:7c:
         8d:4f:75:be:6c:52:38:2b:f5:c2:b8:d8:db:e5:0b:7c:15:11:
         5c:25:f7:19:5c:84:9b:69:58:ea:52:5e:52:77:f5:32:74:43:
         42:e5:e5:3e:a2:d1:ab:02:f6:a7:5d:d6:6c:f2:74:1e:b7:c9:
         0f:c4:75:cd:de:fc:ab:fe:bc:2e:8b:6b:c0:65:8e:d1:c5:dc:
         41:39:52:61:95:a6:b8:ec:98:bd:2c:0d:f0:17:21:91:e1:07:
         bb:7a:53:8c:6c:3c:42:c3:e0:48:2f:be:08:2d:ce:76:ae:4d:
         f8:05:c6:fd:c2:22:31:cd:cd:bc:00:7e:ca:f1:3a:a8:6f:81:
         e1:d1:93:ae:97:66:37:e3:aa:14:5f:3a:df:8f:0a:00:50:79:
         25:b2:ff:6b:c9:2c:a5:11:d3:c6:40:9d:05:18:b0:b1:09:1d:
         f7:3f:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:02:27 2026 by rpki-client