Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/141e86bf-93da-3c89-b7fe-722894eb00ec.roa
File:                     141e86bf-93da-3c89-b7fe-722894eb00ec.roa (raw, json)
Hash identifier:          xZREYlOx8SUTTp5OiL5au8cKVriikAsFb/+T1QxBRbE=
Subject key identifier:   DC:FA:86:31:C6:4C:4C:70:3D:A9:34:12:B2:A8:BE:21:B8:33:53:F7
Certificate issuer:       /CN=1b8475b2-e8c1-422b-8853-c21bc9cd4a47
Certificate serial:       010D0C9F4328584FAC98A990F96B7CCDD7273B80
Authority key identifier: 22:8C:9E:94:F2:6E:94:F0:6F:3A:FE:5C:55:CD:7A:D4:24:46:32:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/141e86bf-93da-3c89-b7fe-722894eb00ec.roa
Signing time:             Fri 30 Oct 2026 13:22:05 +0000
ROA not before:           Fri 30 Oct 2026 13:22:05 +0000
ROA not after:            Thu 28 Jan 2027 14:22:05 +0000
asID:                     14618
IP address blocks:        198.136.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ac:98:a9:90:f9:6b:7c:cd:d7:27:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b8475b2-e8c1-422b-8853-c21bc9cd4a47
        Validity
            Not Before: Oct 30 13:22:05 2026 GMT
            Not After : Jan 28 14:22:05 2027 GMT
        Subject: CN=13c71563-ce76-4ab8-917b-b4e6e9a202d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:0e:b9:cb:71:73:7a:4e:25:09:e3:26:64:
                    29:7a:07:aa:5f:ee:5f:dd:74:83:0c:63:1d:9a:f9:
                    1a:08:e0:1d:7f:4a:80:a4:69:03:f4:4d:94:7d:1d:
                    a7:dc:d9:71:8e:69:d1:df:40:d7:8b:c6:a4:0c:5a:
                    de:6e:79:7f:b4:7e:42:02:f6:10:dc:59:b5:d7:a6:
                    24:e9:c2:dc:7a:7b:0b:d7:47:da:3e:34:97:12:d9:
                    2a:10:4b:43:81:70:ff:b6:ed:3c:06:8c:c1:25:fa:
                    9e:16:ed:c1:8d:b3:a7:fc:2c:44:c5:bc:90:f7:ee:
                    6f:c9:f7:80:5a:31:57:f4:4a:2e:3d:c5:48:06:59:
                    87:f7:15:43:a2:1b:a1:4f:b3:62:1c:5f:cb:c6:63:
                    c3:fc:86:43:a4:f0:90:04:03:a8:90:d5:82:2c:b5:
                    e1:d0:61:6f:b3:96:27:f9:d3:82:58:e3:c7:de:86:
                    10:d8:1c:b1:e1:55:ad:52:aa:74:b7:2e:15:b9:24:
                    3e:91:6e:90:36:1a:41:54:2e:43:33:f1:04:88:c2:
                    b2:5c:5b:b8:d9:07:6f:cb:f4:cf:b1:e4:70:70:63:
                    b6:6b:8a:ef:8c:e9:07:82:fe:c5:86:e7:5e:e4:36:
                    ac:1b:75:84:72:de:cb:ac:4a:b1:18:0e:52:76:26:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FA:86:31:C6:4C:4C:70:3D:A9:34:12:B2:A8:BE:21:B8:33:53:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/141e86bf-93da-3c89-b7fe-722894eb00ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.crl

            X509v3 Authority Key Identifier:
                keyid:22:8C:9E:94:F2:6E:94:F0:6F:3A:FE:5C:55:CD:7A:D4:24:46:32:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.136.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:65:6a:c2:fb:c0:e5:89:08:cf:2f:4c:c7:b7:e5:0a:73:74:
         5a:5c:4d:9f:d7:34:07:82:d4:e2:54:1e:37:87:01:05:22:b2:
         a4:bb:af:2d:6d:03:19:ac:61:89:d0:5f:ac:4d:7a:85:5d:dc:
         42:a9:02:4d:99:45:84:96:ff:c3:9b:9c:14:52:48:a5:be:13:
         2f:50:9a:cc:64:9b:59:b5:b2:c5:30:d9:28:fa:35:ce:81:e3:
         36:57:61:a7:38:ba:c4:f0:41:18:f4:d9:28:e1:32:39:46:ee:
         4b:9b:14:87:b5:a7:ea:c8:fe:3e:87:a9:68:23:7a:39:de:b2:
         71:76:d7:37:b6:aa:9e:f4:72:80:79:c3:ba:49:dc:e1:29:18:
         cc:13:2c:84:b9:ec:07:62:ba:cd:89:d3:2b:2e:44:c7:10:36:
         b7:42:71:b2:28:fd:ff:05:22:ec:7d:48:59:88:e4:a2:f1:28:
         4e:74:c4:2c:1d:19:47:60:9e:41:d0:22:eb:8d:bb:1f:84:e9:
         47:f5:c3:ae:50:98:22:36:fa:e4:73:05:a1:d4:e8:6c:69:7f:
         93:7b:ae:2d:22:24:ec:58:9b:d6:19:8f:ed:b0:24:80:28:32:
         50:22:e7:87:20:9f:76:60:36:44:f6:95:fb:00:7e:94:26:4e:
         10:c6:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:44 2026 by rpki-client