Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f8e67cb7-1890-36a8-b180-7d4a5930fc84.roa
File:                     f8e67cb7-1890-36a8-b180-7d4a5930fc84.roa (raw, json)
Hash identifier:          Abkhv2TzlsEg8ZXUFC1iXimZcYxy0rE2zbi2TKjhC04=
Subject key identifier:   68:D8:70:82:AD:4D:B8:7B:05:6B:C7:0B:D6:31:FD:F1:FD:9B:97:34
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584EBC7704AEC9534DCD55AF7D80
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f8e67cb7-1890-36a8-b180-7d4a5930fc84.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        192.254.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:04:ae:c9:53:4d:cd:55:af:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=16476433-ad90-4ee7-b98e-e8baeae4d9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:f7:0d:4c:cd:e8:c6:c4:bb:54:81:55:fd:
                    50:d6:50:ce:f8:57:33:f7:38:3a:15:53:d7:6e:11:
                    27:02:60:92:52:1d:12:55:53:57:2a:9b:88:59:e0:
                    0e:10:cc:7e:1b:08:07:7e:cf:63:b6:10:c6:ae:6d:
                    20:ca:ab:3f:f4:b6:b4:d8:aa:ca:58:7f:62:73:23:
                    92:1b:d7:ec:f6:57:cb:33:61:52:c9:72:14:89:b9:
                    b5:8c:b8:0c:0d:0c:7d:a3:78:0d:a1:5e:9f:e9:f7:
                    c6:97:91:01:74:96:bf:fa:83:82:f2:47:7d:13:e7:
                    d1:fa:33:a8:13:60:65:aa:76:28:90:cd:f4:0c:18:
                    34:0e:f0:28:9e:80:cf:85:e6:05:b1:e3:1c:ca:ca:
                    81:95:89:36:f5:ec:0a:19:08:a8:88:86:3a:9e:27:
                    d2:e1:f1:5f:ad:79:ff:bc:a4:47:7c:b3:65:fa:2e:
                    a9:b6:3e:fd:ec:1d:5c:27:ec:0f:2e:19:d0:75:3b:
                    b3:cf:ec:02:23:47:4d:80:98:a9:27:ac:dc:46:12:
                    e4:2e:a4:42:2e:fe:ab:46:7c:4d:cc:1d:23:19:88:
                    a1:e6:e6:f1:63:e5:db:3e:3e:45:3d:d5:56:2a:2c:
                    d9:1e:bd:b1:61:50:27:de:ee:e2:4c:1d:e3:96:29:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:70:82:AD:4D:B8:7B:05:6B:C7:0B:D6:31:FD:F1:FD:9B:97:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f8e67cb7-1890-36a8-b180-7d4a5930fc84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.254.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e3:e9:eb:d0:86:52:ba:b6:d3:30:d4:e0:13:80:c4:0f:a6:
         b1:7d:5b:c5:97:fe:29:27:2f:7f:4a:b0:d5:bc:62:28:d3:f8:
         f6:ce:4d:2f:af:9e:39:93:1f:27:89:66:0c:8d:42:09:09:2e:
         68:4a:ae:9f:ae:fe:33:ce:ba:23:79:49:e8:8e:cf:f8:cf:79:
         3a:c7:4b:b8:a2:6a:b6:f7:ba:b7:ff:58:a0:68:1b:f0:e6:02:
         87:3a:c4:91:86:46:23:c3:4d:92:95:59:a7:a1:99:e4:e1:17:
         a4:d3:c1:99:aa:17:11:fc:7c:9e:e8:21:84:97:6c:10:34:60:
         00:b8:42:2d:96:be:13:50:41:ba:20:ce:0d:b6:1b:f0:9a:8d:
         89:b4:d4:ec:25:f1:3b:f6:f8:24:71:ef:c9:25:a6:09:39:2f:
         ac:05:2a:24:e6:93:41:de:4e:55:34:b5:ce:b8:0e:12:4e:c0:
         d8:2a:bd:57:97:01:e5:c2:ad:fd:70:ea:8f:33:85:35:ae:6d:
         bc:33:53:74:1e:1e:62:99:d6:10:58:8d:50:0e:ae:4d:91:54:
         51:2f:d5:39:f5:bb:a8:6e:82:fc:14:5e:23:40:90:e1:1d:bd:
         75:46:87:37:f8:9f:11:20:e1:6b:5c:a5:66:ec:f9:8d:54:a7:
         47:8f:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 15:39:00 2026 by rpki-client