Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207/c5439b2b-3291-361b-8a32-845b5e7069d5.roa
File:                     c5439b2b-3291-361b-8a32-845b5e7069d5.roa (raw, json)
Hash identifier:          ylviCf6PRaUawThZxQejIf1XDDYXZRuEyDttK997TYg=
Subject key identifier:   50:4A:20:40:4D:17:42:AE:45:10:62:28:89:DE:09:86:59:9B:CA:D9
Certificate issuer:       /CN=605acee9-cd09-4b1a-b3de-9bdb3da32207
Certificate serial:       010D0C9F4328584F808A939FF0BAB01659667D00
Authority key identifier: A2:07:B1:78:25:12:EE:CA:02:FB:38:B3:C5:7A:81:46:A3:B4:D9:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207/c5439b2b-3291-361b-8a32-845b5e7069d5.roa
Signing time:             Wed 14 Oct 2026 18:38:08 +0000
ROA not before:           Wed 14 Oct 2026 18:38:08 +0000
ROA not after:            Tue 12 Jan 2027 19:38:08 +0000
asID:                     55091
IP address blocks:        198.73.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207/605acee9-cd09-4b1a-b3de-9bdb3da32207.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207/605acee9-cd09-4b1a-b3de-9bdb3da32207.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:8a:93:9f:f0:ba:b0:16:59:66:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605acee9-cd09-4b1a-b3de-9bdb3da32207
        Validity
            Not Before: Oct 14 18:38:08 2026 GMT
            Not After : Jan 12 19:38:08 2027 GMT
        Subject: CN=e94ba1da-f01f-42c7-bf3d-8d061c6ab371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:3f:35:39:df:5c:75:52:6a:06:13:6b:57:
                    24:94:98:11:0d:1f:c6:8d:bd:5c:da:38:37:24:a5:
                    a4:a3:1a:88:5e:fc:0d:08:c3:25:87:4c:e7:67:64:
                    d7:ef:8d:2d:24:d3:d4:81:43:fe:ac:52:4b:c0:c7:
                    d0:d6:04:46:11:07:13:24:fe:0a:7e:e9:c2:75:b2:
                    45:8c:dd:88:7e:27:3a:92:6d:cc:cd:ef:26:e8:aa:
                    c6:06:62:b3:e3:f1:78:45:c4:a1:e3:49:66:55:10:
                    35:dd:d6:a6:d0:7d:bb:f5:82:e0:72:35:16:02:2a:
                    23:88:d1:2d:cf:40:c1:02:36:a3:fd:bd:1d:df:9b:
                    1a:14:7b:c7:1b:9c:35:54:69:45:3b:fe:af:8b:05:
                    27:f4:7a:71:2e:85:f6:82:b4:eb:f5:0f:bc:c1:26:
                    ce:96:bf:34:6a:2c:08:7e:d3:b8:7d:48:66:b0:2c:
                    74:57:ac:05:0b:6f:2b:cd:39:46:50:29:d1:4f:47:
                    34:9f:ef:dc:35:51:ab:ae:44:ff:c0:32:d6:93:e2:
                    0f:b5:fd:36:c2:fb:84:cc:38:44:47:ab:67:c0:43:
                    a6:87:74:2b:04:9d:b3:9e:93:42:6b:28:92:74:59:
                    68:bb:dc:bf:38:9c:17:55:29:c9:94:ac:89:cc:35:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4A:20:40:4D:17:42:AE:45:10:62:28:89:DE:09:86:59:9B:CA:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207/c5439b2b-3291-361b-8a32-845b5e7069d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207/605acee9-cd09-4b1a-b3de-9bdb3da32207.crl

            X509v3 Authority Key Identifier:
                keyid:A2:07:B1:78:25:12:EE:CA:02:FB:38:B3:C5:7A:81:46:A3:B4:D9:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/605acee9-cd09-4b1a-b3de-9bdb3da32207.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d8:ef:40:04:9f:a3:e0:e2:31:d3:6e:98:d1:d5:de:6c:ae:
         44:10:32:36:d3:15:99:ad:29:a4:b6:f9:9e:a6:64:8b:9e:23:
         5b:f5:57:a5:85:94:5b:b0:9f:b7:6d:78:20:27:8b:52:1f:6b:
         b1:74:12:b7:c0:6e:b2:2d:e9:e3:01:96:56:50:22:cf:4f:04:
         36:a6:86:c3:ec:26:1b:ee:5e:47:b8:38:fa:87:33:36:c0:8b:
         94:09:cb:e5:4a:ac:71:12:1c:d4:f4:14:d0:99:80:a1:4a:ba:
         0b:fa:5a:8a:1e:16:98:af:1a:e2:c8:55:da:4a:bc:86:b2:05:
         02:ac:db:93:07:cd:f6:0a:e8:37:62:9a:2a:f6:9d:db:dd:64:
         00:bd:82:7c:2e:06:a3:b1:2a:85:27:80:2b:94:59:f8:b1:c0:
         d3:68:f2:48:7f:20:ed:66:ba:bd:f1:23:7b:72:31:84:10:cc:
         5c:ad:32:cf:14:07:64:c8:c2:79:28:9b:67:b2:7e:19:aa:77:
         ce:2f:77:91:e1:87:ec:3c:a3:c7:9e:4e:fa:a2:24:20:99:15:
         8b:6e:d7:9e:62:21:ff:96:99:f6:78:1f:5a:21:18:1a:6d:03:
         29:82:28:44:88:31:a2:0b:48:be:e7:d6:63:a1:5e:3b:36:ba:
         b7:e8:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:42 2026 by rpki-client