Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/98e6ee0f-3817-3a47-aed4-0acea218fcd5.roa
File:                     98e6ee0f-3817-3a47-aed4-0acea218fcd5.roa (raw, json)
Hash identifier:          +IffLJlZz9+6+vCfVYM/Z6UUKfC4a5Y7kIJFUJ5YPNk=
Subject key identifier:   E0:7C:8F:BB:BE:CC:8B:FB:E2:E8:89:0E:EC:39:05:8B:54:E8:E1:8E
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584F2957B36E574BA86234D6DF40
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/98e6ee0f-3817-3a47-aed4-0acea218fcd5.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     2495
IP address blocks:        198.248.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b3:6e:57:4b:a8:62:34:d6:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=ea1c1be7-d707-430c-8bed-fa866be5fdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:f2:3f:20:19:03:dd:e1:af:8d:4c:dc:81:
                    7f:b8:ef:f4:44:fd:94:96:ae:f2:cb:8f:e8:83:33:
                    36:13:9c:9e:ff:5d:fe:29:b3:53:25:05:12:3a:6a:
                    5e:fa:2f:2b:12:7e:4f:cd:20:5c:6c:40:ed:3e:2e:
                    c9:b7:89:a3:85:1e:2e:59:33:9c:14:be:05:e3:9f:
                    a9:56:3f:b5:25:3f:fe:43:a7:5a:21:e9:ee:99:6e:
                    ba:3c:28:14:0d:7c:d1:95:20:70:7f:6a:4f:04:be:
                    c6:1e:27:41:b6:43:b2:60:64:53:6e:06:56:85:b8:
                    ba:72:5a:6f:56:8d:9e:d3:c7:9b:9b:7a:a8:8a:d5:
                    8b:8f:a5:9a:58:07:bf:48:5f:ca:52:f9:7e:68:72:
                    59:b4:d3:27:b0:fe:e7:ac:ea:31:c4:17:16:d9:82:
                    aa:6f:c1:8d:fe:fa:f0:1a:86:46:fd:fc:4e:7c:5b:
                    f8:0d:0e:96:48:05:f0:22:31:6b:b3:27:54:89:34:
                    e3:85:10:d9:df:ec:ad:4b:e4:2c:25:ad:00:3b:f5:
                    b8:b4:7d:3b:9c:03:a7:e7:37:94:28:b0:10:56:a2:
                    0d:63:31:f0:4c:51:dc:7c:96:30:74:c8:6f:7c:8c:
                    ca:b3:b3:2d:04:a3:2e:61:42:f1:e4:6d:80:ee:ff:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:8F:BB:BE:CC:8B:FB:E2:E8:89:0E:EC:39:05:8B:54:E8:E1:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/98e6ee0f-3817-3a47-aed4-0acea218fcd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:be:e2:7f:04:6c:a9:d7:d7:2b:cb:b8:ef:ce:9d:a4:b2:16:
         8c:0c:1a:b9:27:ac:9e:f5:5f:f3:ae:2e:ee:55:ca:ec:a6:ad:
         8e:33:a0:9f:9e:04:03:d6:3d:a3:95:d3:5d:cc:91:9e:dd:72:
         a4:1e:cc:51:de:25:da:2a:05:eb:2c:aa:0e:95:79:42:d4:88:
         9d:96:74:0d:f7:a3:75:f2:8b:48:05:86:eb:85:fc:1f:45:a0:
         63:d3:0f:1d:1c:fd:a2:88:93:91:c4:f8:ca:d0:bf:be:d7:ad:
         be:aa:85:a4:e4:60:5e:15:a8:17:31:fc:31:0a:bb:22:43:5a:
         31:2c:a2:5a:21:e0:27:1e:19:a0:6a:db:17:ec:8d:7c:f0:a5:
         b9:52:dd:16:ff:f6:3b:22:e0:39:7c:96:94:16:26:41:4c:bb:
         7d:70:bd:6f:73:b5:2f:e0:6b:74:e8:07:c7:ed:55:5f:27:fb:
         a3:6d:5d:1f:43:8e:d8:92:c8:b1:fa:35:59:97:e1:a8:28:be:
         4e:12:29:82:5c:22:95:62:9f:f8:37:d2:79:1f:ff:da:07:0a:
         7b:e9:63:3b:99:56:87:2c:26:00:f5:ac:77:6d:d6:28:6c:e2:
         f9:d7:13:ec:94:dc:00:55:97:90:7f:36:df:6c:23:b1:a5:72:
         89:7d:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:40:13 2026 by rpki-client