Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a7a74262-690c-3716-a6dd-60a2f8154fb2.roa
File:                     a7a74262-690c-3716-a6dd-60a2f8154fb2.roa (raw, json)
Hash identifier:          dhhKUiEcWjvp+POMRMGP7EUGVmqP9BB0ns0hKeH+JFA=
Subject key identifier:   B0:89:D0:D2:8A:C0:DB:DC:E0:A5:1E:E9:14:CE:98:D3:2E:45:6A:0A
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584F2957B362674EF3CAFF832AB0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a7a74262-690c-3716-a6dd-60a2f8154fb2.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     2495
IP address blocks:        198.248.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b3:62:67:4e:f3:ca:ff:83:2a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=2c5cd834-0e81-4dab-83e0-29a9639520f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:3a:7d:02:97:a0:04:58:a6:5b:44:2f:94:
                    e5:ea:53:ce:c4:44:0d:3f:37:da:9c:49:81:44:79:
                    0d:7c:c8:d1:2d:56:2e:32:62:48:c3:a6:79:13:80:
                    fb:15:7e:7e:b8:0b:be:4d:1b:3d:f1:0e:95:34:dd:
                    eb:6c:cd:69:07:e3:a9:e8:43:53:d8:76:28:c2:15:
                    f3:14:87:92:db:49:53:32:38:c1:97:2e:08:c1:30:
                    df:dc:fe:8e:b5:f1:94:f9:32:5a:ce:18:08:7b:4c:
                    ac:d0:1f:f3:53:9c:47:88:07:79:5c:ec:ea:8a:d6:
                    d2:f6:7e:a7:8f:c4:a3:d5:24:fc:6b:10:f9:fe:53:
                    45:c8:3b:0b:d9:46:87:c3:9a:b9:56:46:bd:84:97:
                    bf:21:2c:3b:84:99:63:86:69:18:6b:c2:4d:52:25:
                    d3:94:56:3d:5a:36:ad:5b:1a:e2:05:19:34:f9:87:
                    7c:e1:b6:84:11:8b:f4:e6:1f:91:8f:81:78:f7:f1:
                    98:08:84:f5:80:dd:6e:6b:ef:05:18:87:7c:16:a8:
                    39:58:e2:d0:e9:18:21:67:f5:ed:01:9d:36:cf:5c:
                    e8:ad:cc:3c:06:b7:5c:93:61:84:cb:56:a9:64:4e:
                    14:db:24:2a:d7:ec:0e:88:c6:73:55:cf:4c:67:b1:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:89:D0:D2:8A:C0:DB:DC:E0:A5:1E:E9:14:CE:98:D3:2E:45:6A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a7a74262-690c-3716-a6dd-60a2f8154fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:f4:92:92:f9:df:6a:0f:98:85:e8:fb:23:75:bc:21:2f:
         10:1c:aa:9b:7d:59:73:62:de:52:96:3d:3e:67:cc:67:d9:7a:
         be:d6:a8:b5:2f:79:90:f5:8f:ef:a0:55:af:50:8c:0d:84:5c:
         bf:c9:9f:68:1f:c1:5c:ba:a7:0c:a0:38:42:4c:3b:67:c4:36:
         22:82:c8:0c:2a:18:cd:8d:be:72:01:48:75:56:fd:a0:07:ac:
         c8:9c:c0:47:fd:f8:50:6b:fe:4c:e4:f8:ff:f9:6e:c1:15:99:
         f6:c2:89:66:7c:68:75:2e:16:1e:20:a1:f0:e5:49:44:f2:5f:
         1d:32:b1:f0:26:ff:b1:49:57:ca:c0:6b:b9:21:32:95:19:6b:
         95:6e:70:a0:84:cd:a3:64:6f:35:4a:ff:75:0f:0d:5d:d7:5c:
         79:2e:74:ef:2a:c0:89:c0:a3:e2:9b:74:b6:73:3f:ca:2b:ef:
         b1:56:b1:a9:17:e7:3d:78:1c:4a:18:c0:f7:54:03:c2:04:03:
         19:38:3d:9c:af:18:d2:b3:25:41:76:2f:62:5d:0a:24:58:6c:
         3a:2c:41:7e:c7:ab:04:3c:27:38:fd:b8:d5:19:2b:38:5b:8a:
         5b:f9:ff:d7:2f:be:b1:e3:ca:53:40:ec:2a:ce:54:1b:e6:ae:
         11:29:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:43:43 2026 by rpki-client