Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa
File:                     d750cc30-d12e-3583-902a-d78ec5dee599.roa (raw, json)
Hash identifier:          htHupgiYi4iAknNdLcS8bwU8vup63fsxUEsoedLxIks=
Subject key identifier:   D1:C1:4A:16:89:9A:E0:F8:B3:C8:6C:84:F8:19:87:9F:F3:91:4E:62
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584EAE81962BD025880ABA9D3100
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     399728
IP address blocks:        172.98.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:96:2b:d0:25:88:0a:ba:9d:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=768296e8-9e64-48c9-95ba-f9067792a646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:9c:bd:70:df:1c:b6:a4:27:79:e1:70:38:
                    5f:3b:da:3f:e0:63:2a:62:f2:d9:c6:cc:05:4f:be:
                    7f:76:db:32:97:9a:ee:25:d9:ce:9f:6a:b5:61:e5:
                    2b:4e:a8:78:ec:36:94:f5:1e:57:47:de:9c:ab:35:
                    c5:06:16:ca:0a:a8:ab:fb:2b:ad:55:c7:b8:b0:b3:
                    21:16:4d:33:11:34:1b:4d:a3:9d:c8:bd:5e:f9:74:
                    53:52:f6:96:12:81:0b:09:f6:e7:a8:0c:b1:f1:01:
                    d4:2a:24:9a:c0:a1:6e:c0:21:43:76:c3:de:78:5f:
                    73:32:c0:78:aa:51:d1:84:75:10:7e:76:48:55:11:
                    38:9b:1c:70:53:b4:fc:58:9b:73:2f:b1:38:3f:13:
                    11:c2:0e:bf:5b:e9:89:64:60:69:6d:73:2f:c3:b9:
                    79:70:67:af:72:af:65:56:33:27:a1:4b:6f:6b:81:
                    6b:05:5b:18:9d:f8:44:7c:ee:9e:4b:8b:93:af:e3:
                    cf:bc:ef:e6:1f:a9:a4:bf:58:81:77:bc:4c:94:53:
                    d0:cd:c7:0f:68:14:ae:b8:ba:f2:1e:e6:73:5b:8a:
                    7a:f0:06:2b:32:e2:0c:bc:f6:78:80:8e:1d:59:da:
                    98:69:3d:34:f3:2b:fe:e2:5a:cb:cf:c4:9d:3b:e8:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C1:4A:16:89:9A:E0:F8:B3:C8:6C:84:F8:19:87:9F:F3:91:4E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:76:5b:fa:0b:80:e3:ac:98:1d:a7:72:b4:61:a9:c1:61:
         c7:30:e8:5e:03:22:8a:10:c6:53:e9:ba:d6:c7:e2:d6:50:2c:
         80:eb:0c:33:7e:b6:63:4b:99:36:e9:b9:fd:f8:c1:dd:05:a9:
         a0:00:9d:cf:98:ce:3e:04:ea:33:d8:2b:d8:93:3b:3e:6a:93:
         58:36:63:33:75:71:6e:61:04:22:99:9d:aa:5f:e9:9e:7a:20:
         d5:b6:c9:b0:35:d4:b4:37:14:70:1e:d9:e5:e4:4e:40:b9:f6:
         f0:ae:ed:41:68:08:75:14:ca:6c:d4:2f:d5:ea:37:39:32:cb:
         fc:3e:97:d3:25:9f:8f:c8:1d:0a:54:be:ca:fe:ec:c6:f8:31:
         70:07:42:ef:5f:c3:42:2b:84:4c:be:e6:90:88:01:2c:86:b7:
         f1:18:80:e5:bf:28:c6:05:3d:08:45:40:67:c9:8c:db:24:97:
         dc:17:79:62:64:5a:43:f9:4b:c9:c4:af:8f:8e:21:ff:76:59:
         5a:69:2f:94:0d:8b:d5:44:35:b4:41:46:e5:c7:c3:b2:67:5b:
         7e:95:a3:ee:30:3f:ea:b9:74:c7:38:21:50:0b:71:93:aa:2a:
         07:03:07:3c:30:9c:fd:8d:2c:0b:b2:33:43:e1:a5:54:10:94:
         30:d2:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:13:45 2026 by rpki-client