Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa
File:                     95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa (raw, json)
Hash identifier:          CtAJ234pC4gCHb9YK/yB73CdcsN/Cei6wEU3cKFNbj8=
Subject key identifier:   32:A7:DC:26:AE:46:89:00:91:B8:45:27:66:63:A9:59:FD:93:4A:7A
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584F63F81C7823FFA9112A98E880
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     53334
IP address blocks:        199.38.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1c:78:23:ff:a9:11:2a:98:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=bf6aca25-1af6-4597-b1ce-760dd3d249d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:47:2e:17:aa:62:3c:7a:2c:b4:5f:12:d0:25:
                    c3:10:ca:02:10:00:a5:b9:d8:bd:ff:21:90:2c:9a:
                    a1:a1:63:2e:b0:41:e4:87:b5:9c:8e:e5:85:e0:71:
                    59:fb:fa:f6:de:ca:d0:a2:21:39:6d:06:88:c6:21:
                    81:47:9b:e0:59:70:77:4b:91:b4:04:1b:4e:de:09:
                    13:de:08:3b:c8:e9:ca:97:6c:18:c2:23:17:5b:8c:
                    3d:44:b8:15:de:22:df:dc:fc:91:d8:3d:22:e2:b6:
                    ce:59:29:1d:e0:24:13:2b:14:75:e0:70:52:71:47:
                    27:a2:3c:01:b7:fc:ae:1e:35:42:89:c7:af:53:4d:
                    1e:6b:44:9c:29:3a:cf:bb:38:10:26:f9:c0:18:4d:
                    73:5a:a3:12:21:a6:89:fd:11:2f:d8:99:9a:84:98:
                    25:55:17:b4:b1:13:d6:6f:1f:0f:be:ff:5a:21:a1:
                    d0:f2:b8:9f:05:4f:2a:c7:5e:aa:ac:78:64:e7:56:
                    50:4e:f2:27:d0:b8:c1:d7:cf:05:97:fe:31:1b:52:
                    7a:ac:a5:6c:ce:08:82:20:23:a4:2f:6b:e2:cc:1c:
                    01:e4:25:70:57:24:ed:dc:34:67:58:b9:c9:ad:da:
                    82:a6:f1:8c:dc:ad:ed:b5:3d:ba:9f:42:90:79:6c:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A7:DC:26:AE:46:89:00:91:B8:45:27:66:63:A9:59:FD:93:4A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:c7:9c:53:8e:53:48:d3:23:ed:7c:b1:81:a1:ea:58:a6:8d:
         80:d1:fe:ed:93:e0:7e:c6:9d:d1:fa:b4:b2:ba:0c:5c:7c:33:
         e1:28:9a:ad:10:71:d2:e2:5b:80:f5:e2:8b:cd:2b:e4:d4:1d:
         1f:b6:45:8e:b5:c6:f2:f6:ee:3d:c0:a9:b5:64:73:a3:1f:39:
         f8:82:13:06:7d:db:22:89:0d:d0:43:9c:e1:8e:f9:33:66:a2:
         17:ec:2b:2c:44:ac:bb:fe:a6:0a:d1:0a:81:66:69:15:83:ad:
         45:65:77:c6:58:15:6a:e8:ff:66:ce:49:f9:d4:86:95:ff:5a:
         fa:c1:2d:97:dd:23:b2:db:93:c1:66:41:62:5d:d7:03:8f:ad:
         57:35:73:34:d9:d1:aa:e2:6a:21:31:3b:37:3c:1a:d5:9a:20:
         20:ac:ce:54:c9:52:c9:5a:f7:f0:a9:7b:27:3e:7e:73:ba:0f:
         9f:7b:97:38:7f:10:14:ad:26:b3:4f:22:26:d3:66:9b:b9:57:
         55:82:51:9d:89:5b:a7:d0:bf:5b:10:e8:f1:d0:6f:6d:96:6a:
         fb:74:fc:1b:95:e7:e5:88:31:00:7f:af:ca:a1:3b:f4:80:99:
         bd:87:58:6b:b6:ef:52:28:a1:48:26:54:6f:74:e0:de:7a:e2:
         e3:f4:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:20:57 2026 by rpki-client