Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e6c2ff9-08d6-34db-b8c6-aefc92b9a96e.roa
File:                     8e6c2ff9-08d6-34db-b8c6-aefc92b9a96e.roa (raw, json)
Hash identifier:          q2ike5dYnmdNXiIVXIWbjjcu8mu1QTOrTV+nQ/Xzk+Y=
Subject key identifier:   6C:36:B7:0A:12:6E:83:F5:99:96:5A:F3:2F:BD:09:6A:6C:7E:B8:92
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4234292017968A875FA93C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e6c2ff9-08d6-34db-b8c6-aefc92b9a96e.roa
Signing time:             Wed 19 Aug 2026 18:03:52 +0000
ROA not before:           Wed 19 Aug 2026 18:03:52 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        198.172.138.0/24 maxlen: 24
                          198.173.8.224/27 maxlen: 27
                          198.173.11.0/28 maxlen: 28
                          198.173.13.0/24 maxlen: 24
                          198.173.14.0/24 maxlen: 24
                          198.173.172.124/30 maxlen: 30
                          198.173.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:42:92:01:79:68:a8:75:fa:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:52 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=e733c417-f345-42be-80cc-34bbf111c2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:49:eb:e3:9b:7d:2d:14:44:16:6c:7b:3d:
                    b4:a7:18:cb:6d:61:d9:bf:26:a6:4c:79:a7:fd:31:
                    96:25:17:92:2b:0f:76:d3:d4:dd:4a:c8:af:73:07:
                    6f:89:ae:f8:e5:89:a1:72:f6:5d:96:36:c6:f2:30:
                    7f:13:8a:48:c2:60:83:be:ed:cc:fa:d3:0d:25:ef:
                    5b:57:4b:a3:a0:d8:2a:58:9c:82:bd:d1:aa:e9:08:
                    bd:c5:f6:c1:7a:e7:63:00:29:5f:31:b7:29:f0:ea:
                    6a:79:55:b9:b5:17:03:88:65:47:24:2f:5e:fc:96:
                    87:ee:23:b1:39:eb:fc:e1:38:a4:bb:78:45:8f:e1:
                    04:cb:ce:92:30:a5:a1:46:60:86:97:cc:9e:b7:41:
                    41:d3:d0:be:63:90:19:d9:a7:a8:8c:53:bc:6d:60:
                    71:e6:7a:7e:2f:bc:01:4f:69:91:ac:cf:3b:70:a4:
                    e5:44:3f:d1:04:04:6a:e8:6d:0d:55:d7:85:44:fc:
                    53:5a:c2:56:84:40:11:f9:e1:a7:77:fc:08:a6:a7:
                    3d:ba:fb:78:c2:45:f9:64:1d:5d:4c:ef:35:d0:11:
                    57:01:1f:67:d3:e5:fd:43:d7:21:6d:bb:46:5e:3a:
                    ba:c4:68:23:ff:30:2c:e0:d8:50:46:8a:eb:d9:0d:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:B7:0A:12:6E:83:F5:99:96:5A:F3:2F:BD:09:6A:6C:7E:B8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e6c2ff9-08d6-34db-b8c6-aefc92b9a96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.172.138.0/24
                  198.173.8.224/27
                  198.173.11.0/28
                  198.173.13.0-198.173.14.255
                  198.173.172.124/30
                  198.173.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:5e:16:b9:24:b8:df:9c:0c:e6:3a:19:28:56:43:63:2e:
         96:fb:be:b7:e6:cb:25:ac:9b:e0:95:57:fb:50:a8:63:5a:c1:
         be:5e:41:83:0f:1d:3b:c1:a4:6a:65:8c:bc:93:5f:2e:76:bd:
         f1:c4:f6:e8:90:b2:f8:b1:b8:66:cf:6a:f6:15:03:74:37:97:
         83:13:1c:58:9a:05:4b:0a:14:cb:54:20:86:0a:87:54:e1:01:
         79:53:51:75:46:c2:fb:32:a1:4f:fe:3d:e0:85:0c:e5:4c:ed:
         98:7c:c0:90:30:a8:59:c1:a6:77:f6:ef:fa:d2:00:61:34:5c:
         21:19:72:6e:77:89:48:f2:f4:d9:f9:1a:58:68:f2:f7:d7:a8:
         7e:c3:e0:9c:da:77:92:d7:3e:dc:a6:67:5e:db:72:8e:0e:c4:
         43:0c:e8:6a:80:63:73:09:90:4f:49:3f:a8:4e:41:2c:e5:89:
         5c:bc:96:a7:9e:f2:da:70:c1:85:1e:e4:bd:1a:3f:c4:46:13:
         f2:28:56:4e:fc:28:33:7f:bc:59:a0:51:2d:ba:ee:ab:95:c6:
         02:ce:6d:2b:e1:3f:77:66:74:59:32:8b:38:d6:c3:c5:8d:23:
         f1:e1:b9:36:ff:dc:68:88:e3:7c:35:7b:4e:cc:b7:e2:aa:1d:
         92:15:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:58:46 2026 by rpki-client