Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/2d0f54e8-9bfe-31c2-8db9-01b2bc5038e6.roa
File:                     2d0f54e8-9bfe-31c2-8db9-01b2bc5038e6.roa (raw, json)
Hash identifier:          zjz9JfN3Vr9NvMBj1AOVMUZ8fYCElFAMOkOoTwurM9M=
Subject key identifier:   46:1B:10:D2:65:D9:65:73:8B:4D:71:9C:B5:21:D0:8D:3F:15:6F:33
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584EDC91DE7BB76F51B5B71339A0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/2d0f54e8-9bfe-31c2-8db9-01b2bc5038e6.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        198.1.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:de:7b:b7:6f:51:b5:b7:13:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=c11d405e-45d6-49d1-b91b-6658a72f393b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:1a:38:11:84:3d:46:8b:f2:06:8b:05:0e:
                    2e:2d:a5:2f:10:3d:aa:05:f9:28:9a:81:d3:73:1e:
                    43:bc:fc:ee:38:7a:d0:31:55:c3:e0:e3:59:4c:7f:
                    b9:cf:82:a7:83:4e:01:dc:75:f9:87:49:d5:41:9e:
                    a2:78:2f:79:5e:11:83:dd:63:91:95:1d:1f:09:67:
                    dd:9a:3a:78:ac:72:05:7b:82:9b:c4:f8:66:33:c9:
                    6d:56:c1:b4:cd:00:38:62:29:0a:e4:44:5c:de:d0:
                    42:ef:da:2a:14:d0:e6:e0:94:00:cb:2e:4d:eb:dd:
                    fc:90:57:a1:2c:87:e8:64:ac:63:20:80:84:19:3b:
                    13:a9:84:eb:8b:c2:d5:2d:b6:dd:f4:7f:a6:36:b6:
                    5e:c3:c0:62:aa:bc:88:4b:66:14:e5:05:f7:31:70:
                    08:9a:11:2f:85:58:bc:0e:01:b5:9f:48:23:46:8c:
                    12:bc:dc:ab:f1:28:c1:5a:65:80:67:71:c9:51:0b:
                    a1:c1:fd:fd:4e:69:dc:32:52:7a:4e:01:d6:1c:0f:
                    3e:c6:e6:38:f2:fd:0b:69:0c:a3:f5:45:28:bf:e0:
                    44:86:04:ce:9a:a9:e1:c1:d3:82:21:68:7a:39:3c:
                    3a:55:9a:3f:6c:9d:2c:e3:8a:2e:b2:b2:8b:a1:d9:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1B:10:D2:65:D9:65:73:8B:4D:71:9C:B5:21:D0:8D:3F:15:6F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/2d0f54e8-9bfe-31c2-8db9-01b2bc5038e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1f:2d:77:33:d9:d5:0d:f9:c7:fe:fe:ee:93:dd:88:34:b7:
         c2:cf:f3:6f:d0:a6:e7:d7:3d:eb:f4:34:5f:f0:ef:cf:d0:69:
         1c:ac:c2:0d:57:73:a6:f8:6b:83:69:c6:7a:a3:77:be:c4:9d:
         ab:4a:05:ae:8a:ae:44:81:da:40:d3:3f:e1:93:6e:76:b4:16:
         45:ab:21:19:ee:ef:7a:af:1f:f7:03:22:a7:09:16:ff:d7:19:
         2b:e3:ac:a4:cc:a1:7c:72:07:be:f5:b7:f4:e8:03:47:39:68:
         53:df:d0:f8:88:ba:a0:9b:b7:c7:61:0b:02:49:a5:8e:1f:10:
         62:e8:54:1b:60:e3:e0:4f:71:a5:93:2f:00:0f:e4:dc:f6:cf:
         a2:a7:22:81:df:50:d6:3f:8e:85:d6:07:5c:61:74:9f:08:e0:
         a3:b5:f5:2c:9f:d4:63:6a:cd:25:a3:9e:3c:e3:a3:87:15:76:
         8b:ce:24:9f:b6:37:84:39:94:a2:8a:ac:43:5d:3b:e4:7f:7f:
         20:eb:59:f4:c1:02:da:fd:cd:96:24:07:65:92:f1:3d:da:32:
         34:7f:b1:55:5d:3e:2e:4f:63:11:96:68:ea:80:57:55:1a:66:
         be:0d:e0:28:16:b5:3f:1e:c6:1c:d4:7b:ae:1d:fd:e6:b2:58:
         12:a4:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:58:28 2026 by rpki-client