Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/458b765b-027c-35e5-a5c0-dc8c8ea47a93.roa
File:                     458b765b-027c-35e5-a5c0-dc8c8ea47a93.roa (raw, json)
Hash identifier:          UAnOvVmKiujgb4x5IANLiXrNpEwPj1jdlHrIvUGTmg0=
Subject key identifier:   4C:A8:CC:17:07:9C:E1:C1:1E:95:CF:AF:48:42:F5:94:68:03:65:44
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF44CC69BDB8260E9F9DC5880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/458b765b-027c-35e5-a5c0-dc8c8ea47a93.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        198.41.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:c6:9b:db:82:60:e9:f9:dc:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=7fbe1584-f560-4851-9882-f7aa6e5689a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:30:97:61:9d:be:90:56:9d:19:d2:00:fa:
                    e4:d1:31:9b:71:cd:14:f6:56:3c:a8:35:24:a4:f1:
                    02:0a:05:40:bf:74:65:31:02:d3:a5:3c:34:8f:dc:
                    f7:f5:b5:08:06:22:c6:22:ed:7e:de:98:68:1a:d6:
                    f9:b0:a1:a4:dd:50:99:08:ab:a7:7f:7a:2c:14:0d:
                    de:3e:30:1b:74:f8:9d:3d:11:9d:53:47:4a:fa:c7:
                    9d:76:7e:10:aa:7c:81:eb:47:0d:e4:e4:da:17:fa:
                    79:36:30:35:96:5a:36:ce:c9:02:cc:62:d5:0a:45:
                    d5:b9:40:3b:d8:49:c5:d2:81:30:c4:38:b2:c0:53:
                    8b:48:e3:8f:6d:3b:60:9f:2e:d8:b5:23:59:71:d4:
                    1a:96:79:9f:6c:13:5b:d4:96:36:9c:ed:49:16:c7:
                    52:9c:c4:da:0a:9a:8a:73:d7:3d:ae:3e:1d:68:fa:
                    95:a8:84:03:3b:81:ff:39:ab:a1:7c:53:0b:67:62:
                    ab:1d:14:1c:3e:c6:1e:b9:04:c1:d1:4f:2b:42:b0:
                    68:7f:ce:f4:9f:85:e3:98:c0:40:ba:3a:e2:4e:98:
                    7e:69:2b:70:4e:9e:4f:72:2d:aa:27:c2:ff:a6:ed:
                    33:8f:15:4f:2c:0e:30:5a:0a:03:16:d5:96:cf:59:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A8:CC:17:07:9C:E1:C1:1E:95:CF:AF:48:42:F5:94:68:03:65:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/458b765b-027c-35e5-a5c0-dc8c8ea47a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:d4:f4:0c:e8:bd:e5:2e:1d:f2:29:13:68:61:eb:3f:a5:
         c0:71:74:9a:16:ac:c7:00:ba:bc:f2:64:3c:1c:68:e5:48:ac:
         60:20:2c:85:45:15:d2:db:b7:17:43:26:0f:db:22:0a:9d:2f:
         08:fb:18:b9:c8:f6:c2:05:ce:60:2d:3a:6c:36:c8:79:39:8d:
         6f:6b:a1:51:74:9e:ba:6c:8e:ee:0d:86:98:d8:ff:0f:37:ea:
         00:5e:30:1f:4a:6a:4e:5f:16:7a:13:23:ca:d2:88:75:62:82:
         2b:e6:05:d8:8d:57:87:6f:7e:2f:10:a1:f5:34:54:8d:6d:45:
         95:33:33:25:63:25:b9:41:c5:2b:db:f4:20:1a:d7:6d:13:a9:
         7f:e4:f7:d7:25:a7:4c:f1:1d:cf:df:22:3a:1c:3d:e6:96:4c:
         62:37:b0:0f:7f:e8:6e:20:91:44:31:e7:b4:f5:64:68:ba:f0:
         0f:64:7f:02:14:d2:c0:ab:1b:33:7e:2f:08:9e:1a:f5:06:42:
         6f:dd:95:48:21:32:d1:cd:8f:d8:14:9e:18:ce:2b:0f:15:3c:
         71:b7:92:72:28:d5:b2:dd:f3:74:e8:7b:18:4e:61:c7:63:09:
         43:ed:f3:8c:07:8e:ed:8f:86:e6:c7:3d:90:ab:0a:27:b0:a4:
         13:a1:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:07:55 2026 by rpki-client