Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4/5ed52148-2a94-3b04-9c30-ae484a5db725.roa
File:                     5ed52148-2a94-3b04-9c30-ae484a5db725.roa (raw, json)
Hash identifier:          NwfU5pdDRrYurevbYFwM9hREDqSpBDKRJkzr1rjHwiY=
Subject key identifier:   98:6B:8C:EC:C4:AF:56:B5:9E:8A:E2:70:38:02:A5:DC:7E:91:79:44
Certificate issuer:       /CN=60e9abfb-9f0c-490a-a548-6fc8411cfcb4
Certificate serial:       010D0C9F4328584F7B5BA6B1AF0C800CE05C2E40
Authority key identifier: 41:76:22:BB:8B:3D:F1:EC:92:3F:73:1D:05:13:A9:E1:2E:98:4C:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4/5ed52148-2a94-3b04-9c30-ae484a5db725.roa
Signing time:             Mon 12 Oct 2026 22:04:33 +0000
ROA not before:           Mon 12 Oct 2026 22:04:33 +0000
ROA not after:            Sun 10 Jan 2027 23:04:33 +0000
asID:                     402681
IP address blocks:        198.148.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4/60e9abfb-9f0c-490a-a548-6fc8411cfcb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4/60e9abfb-9f0c-490a-a548-6fc8411cfcb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:5b:a6:b1:af:0c:80:0c:e0:5c:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e9abfb-9f0c-490a-a548-6fc8411cfcb4
        Validity
            Not Before: Oct 12 22:04:33 2026 GMT
            Not After : Jan 10 23:04:33 2027 GMT
        Subject: CN=8db9129f-1f1f-4968-95c5-4def543b810e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a4:0e:30:04:e1:ad:b0:b4:38:54:5b:42:3e:
                    d7:63:83:76:bc:c9:d1:80:ab:d7:3f:63:02:a6:2d:
                    89:91:89:3b:8c:54:0f:97:b4:a2:a2:d5:9a:a1:08:
                    02:6e:f4:e6:dc:37:dc:76:22:73:3d:e9:70:a1:e4:
                    ee:c3:d9:e6:b1:66:fe:b5:6a:e4:11:71:9b:43:56:
                    16:ae:66:0d:e8:39:3d:ba:0b:76:7c:c8:5a:e8:07:
                    74:40:70:d4:fc:a9:60:6e:3d:ae:6d:d2:aa:0e:d0:
                    cc:83:7d:7d:39:cd:90:6f:a7:2a:66:2b:98:39:91:
                    8e:30:f8:3b:45:98:50:6a:e6:8f:5a:2c:6a:52:00:
                    de:97:63:26:b3:f0:f3:5d:64:c3:ae:68:6e:75:75:
                    ef:3a:ff:d7:70:2b:a6:4e:6e:51:f1:32:42:e5:55:
                    30:44:61:4b:89:db:65:4f:c0:8b:62:b6:4a:c3:10:
                    bc:84:15:f0:40:9f:76:05:da:88:6e:75:88:ad:a2:
                    05:ff:f4:12:24:d4:cc:27:40:aa:40:99:a7:da:4d:
                    5a:86:64:4e:84:0e:ba:b4:62:6d:71:87:40:91:af:
                    5e:a6:23:cf:3a:04:e2:17:11:88:e5:c0:74:1b:a3:
                    65:75:c8:58:64:db:2b:7c:de:82:a7:45:eb:8e:60:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:8C:EC:C4:AF:56:B5:9E:8A:E2:70:38:02:A5:DC:7E:91:79:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4/5ed52148-2a94-3b04-9c30-ae484a5db725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4/60e9abfb-9f0c-490a-a548-6fc8411cfcb4.crl

            X509v3 Authority Key Identifier:
                keyid:41:76:22:BB:8B:3D:F1:EC:92:3F:73:1D:05:13:A9:E1:2E:98:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/60e9abfb-9f0c-490a-a548-6fc8411cfcb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a4:f7:ab:71:b0:e7:bf:55:0d:c4:a9:0a:94:35:7a:ba:4b:
         4c:8c:01:b2:01:fe:8f:8b:3e:04:ef:8c:7e:ed:c5:de:78:c3:
         43:f5:de:bb:05:56:ad:df:10:8a:d2:44:db:63:1d:a7:e5:ac:
         c0:ca:e7:4e:25:25:78:0e:9c:23:40:88:86:86:26:45:30:86:
         b7:c6:85:77:3e:6c:14:b9:39:df:da:5f:82:66:2e:76:21:a4:
         11:02:ec:d5:79:07:74:4d:6e:64:a4:0f:44:a9:bf:62:e6:49:
         57:f2:3d:b4:36:18:79:82:a6:89:1d:97:c8:fa:24:98:7d:10:
         ca:35:4b:bf:eb:39:4f:0b:2d:40:87:2b:18:5d:38:30:da:62:
         b2:c5:f9:99:98:d7:bb:9b:cb:b4:c3:42:1c:3e:4a:ff:2b:4a:
         42:f6:eb:57:22:dd:84:cf:bf:82:f0:41:15:c0:11:b3:63:7b:
         bf:d1:29:67:70:b7:f5:3a:bc:9f:a9:46:b9:cf:2f:3b:b9:12:
         a9:3d:cd:fd:97:30:0e:88:c7:44:3c:75:aa:2b:34:a5:1a:ab:
         5d:ae:f1:fb:13:a4:63:bf:4c:d6:c7:40:49:5f:df:1e:73:9d:
         05:65:2d:9a:ff:cb:c3:89:f1:d2:11:e8:f3:bb:08:7f:77:45:
         09:a2:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:56:14 2026 by rpki-client