Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa
File:                     ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa (raw, json)
Hash identifier:          1A3as9SLUf4Z/lKlAFKhA7nKEoeyf1seupVvoqRknHQ=
Subject key identifier:   45:13:9C:53:32:91:C8:D4:AD:96:1D:99:E4:55:0A:FE:F2:FE:C7:AC
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584F49770443B3FA735D8241CAD0
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        199.187.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:04:43:b3:fa:73:5d:82:41:ca:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a6bcecbf-91e4-4b74-8629-d7957b557b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:05:bd:d7:44:23:3b:4f:69:e3:02:8b:18:78:
                    9e:dd:c2:e9:6b:4f:61:e1:96:7e:73:56:f4:90:93:
                    62:02:1f:03:e7:18:2e:69:68:ad:03:7f:4f:07:35:
                    f6:74:da:a7:da:51:9e:74:25:6d:1e:53:60:3e:d3:
                    17:32:ab:4e:9a:42:a2:0f:29:01:84:75:e3:c2:a1:
                    a3:44:34:af:13:74:3b:b6:62:31:d6:ce:f0:ef:9c:
                    75:8f:f7:d1:dc:00:fd:69:6e:df:a1:a1:66:93:dd:
                    31:91:de:fa:bb:a5:c6:55:38:f4:d2:4f:a7:04:19:
                    a5:f8:97:64:5e:b6:04:ce:d9:2f:9d:a2:f5:af:22:
                    80:85:32:26:d4:95:de:74:5f:82:d0:b7:9c:45:57:
                    0c:99:8e:e1:31:d4:4e:98:89:5b:d2:61:58:da:a6:
                    8b:98:d5:94:32:a7:2e:4f:86:18:e0:93:42:b3:45:
                    f4:54:a0:ec:69:6a:fd:c3:6a:c5:6e:84:b8:b7:c7:
                    e2:0a:17:3b:1c:69:6d:87:e7:5b:3c:20:61:b8:9b:
                    b5:78:f5:a5:16:89:de:7d:bd:55:e7:a5:da:1e:da:
                    31:5d:8e:a3:01:e0:88:bb:ef:85:8c:eb:09:eb:e4:
                    90:14:7b:21:ae:17:b4:b0:da:b0:5f:82:f3:90:e2:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:13:9C:53:32:91:C8:D4:AD:96:1D:99:E4:55:0A:FE:F2:FE:C7:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:10:1a:1c:8d:eb:76:f9:91:4d:07:02:97:f2:2d:9f:a5:34:
         b8:f7:8f:96:4e:a2:16:5f:4e:5f:9b:71:e2:d6:ae:0a:c1:6d:
         40:9b:da:f3:99:cc:ff:83:40:5b:e7:03:55:f1:87:a9:9f:f7:
         1d:6e:37:52:32:33:57:f0:39:95:3b:a4:eb:e3:a9:3e:47:89:
         08:79:b7:f1:df:da:bd:a5:95:b4:ef:aa:7a:e3:b2:3f:b2:ea:
         6c:61:e2:bb:ab:7b:55:43:fc:21:5f:aa:0b:64:a1:df:60:ff:
         f6:8c:03:eb:64:10:61:90:22:d1:f6:35:f6:63:ce:b5:0d:7f:
         5d:2a:6d:cf:6c:bb:63:8e:dd:de:cf:e9:16:2e:4a:36:33:c4:
         37:4e:4f:7c:37:2b:24:07:a1:e9:08:12:f1:56:51:27:f1:ea:
         6e:a0:92:6b:4d:4d:28:e8:50:a6:48:12:6b:52:77:6d:0f:6d:
         37:ad:cf:f0:11:37:5f:78:33:27:ca:35:b8:a1:03:87:c4:c5:
         f4:ca:92:6d:88:eb:0e:34:51:14:31:4b:6b:b8:5b:c6:31:b2:
         0b:23:b6:29:dc:e7:a0:52:91:33:9a:cc:56:67:6b:48:a8:c2:
         61:93:39:d0:74:6e:90:d0:88:c6:d6:61:e5:c4:92:64:2f:59:
         52:90:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:27:38 2026 by rpki-client