Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/e53269a1-cfc2-3187-b80a-146dddd77630.roa
File:                     e53269a1-cfc2-3187-b80a-146dddd77630.roa (raw, json)
Hash identifier:          m8X9SpB50K31A3uTzqaXD9H++XoVgOSTry5erEVKonQ=
Subject key identifier:   2A:F9:4D:93:04:5D:2A:D3:58:54:61:EF:86:11:F6:B4:36:EB:DE:B1
Certificate issuer:       /CN=201220ff-d9b0-4de3-ae59-82fd519ff7d1
Certificate serial:       010D0C9F4328584F74B82C35E0439CF0E3AD2AC0
Authority key identifier: 92:9B:C2:A0:3E:97:0D:1B:DF:3B:73:F9:2C:B4:B3:02:89:BB:4C:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/e53269a1-cfc2-3187-b80a-146dddd77630.roa
Signing time:             Sat 10 Oct 2026 13:00:13 +0000
ROA not before:           Sat 10 Oct 2026 13:00:13 +0000
ROA not after:            Fri 08 Jan 2027 14:00:13 +0000
asID:                     46746
IP address blocks:        198.160.28.0/24 maxlen: 24
                          198.160.29.0/24 maxlen: 24
                          198.160.30.0/24 maxlen: 24
                          198.160.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/201220ff-d9b0-4de3-ae59-82fd519ff7d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/201220ff-d9b0-4de3-ae59-82fd519ff7d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b8:2c:35:e0:43:9c:f0:e3:ad:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201220ff-d9b0-4de3-ae59-82fd519ff7d1
        Validity
            Not Before: Oct 10 13:00:13 2026 GMT
            Not After : Jan  8 14:00:13 2027 GMT
        Subject: CN=537a9712-0b1f-4ae6-954f-e7f06a9a7239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:ec:13:26:2d:34:5d:97:e4:31:f7:5e:c1:
                    74:20:3d:89:0b:ca:a5:21:48:a7:90:e8:62:80:18:
                    7d:39:91:ea:b1:1c:95:88:6b:73:a9:63:2c:7d:68:
                    21:d8:23:f1:af:90:5f:39:5b:4d:b0:9d:7f:2b:ce:
                    e1:a3:bf:ca:8f:a9:e6:31:c8:27:43:4d:0b:5f:6e:
                    b7:e2:f3:0d:df:32:43:63:cb:01:32:11:03:43:b3:
                    47:9a:53:3d:a5:cc:d8:62:38:69:be:f3:b0:96:49:
                    a6:82:05:57:79:11:7e:b0:f8:3e:4f:c5:9d:c0:45:
                    14:48:09:7f:9f:60:ff:78:9b:87:18:ed:16:25:0c:
                    18:da:b0:00:2d:b9:f8:e7:e4:0c:da:60:64:0a:b6:
                    8c:37:fd:43:97:03:c2:a9:f4:d6:05:a5:6a:f7:1d:
                    db:9f:58:6c:e3:9b:ac:2f:18:f7:34:89:19:54:ce:
                    bc:82:82:d8:84:59:8d:38:2c:d5:bd:30:52:a7:7b:
                    46:92:98:f0:10:11:61:94:ea:a8:c2:e3:6c:b1:44:
                    93:54:60:f0:6b:08:de:b4:d9:b3:2f:3a:36:6b:29:
                    1f:e3:80:46:ca:fc:a0:8e:e1:e5:de:80:fc:d5:21:
                    dc:da:73:6a:8e:d6:f1:39:e1:98:bc:cd:89:e5:28:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:4D:93:04:5D:2A:D3:58:54:61:EF:86:11:F6:B4:36:EB:DE:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/e53269a1-cfc2-3187-b80a-146dddd77630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/201220ff-d9b0-4de3-ae59-82fd519ff7d1.crl

            X509v3 Authority Key Identifier:
                keyid:92:9B:C2:A0:3E:97:0D:1B:DF:3B:73:F9:2C:B4:B3:02:89:BB:4C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:16:d1:c6:03:4a:58:2a:10:52:a5:a5:1e:f6:a4:52:12:46:
         f4:d5:6a:6b:ca:59:56:bc:bd:65:ca:14:c7:dc:e2:08:bd:52:
         b4:f2:70:86:70:5f:05:f6:b7:20:d2:51:0b:00:82:46:c2:28:
         ff:3b:34:fd:93:83:86:ce:06:b6:60:2c:f5:6f:0c:cb:b2:a5:
         72:75:77:06:e8:9b:50:92:29:96:f9:ef:4a:9c:7b:23:a6:f7:
         da:ea:de:90:b7:04:cc:33:27:04:ed:87:8f:7f:fe:34:69:0a:
         bb:31:0a:71:32:5d:70:cf:7b:89:f0:e4:d3:08:bc:27:f6:f3:
         c3:0e:71:88:1d:9c:2a:9c:40:ad:3d:d7:9d:67:23:b4:65:d9:
         a4:fc:82:a4:53:41:a0:08:61:87:92:0d:54:63:44:b3:52:33:
         55:f8:71:64:4b:33:31:a2:e4:1a:53:59:a2:09:20:fd:94:03:
         52:a8:68:a2:47:cb:c6:f7:4a:83:16:2f:f2:a3:7e:8a:50:f1:
         9b:99:2a:0c:56:c2:e0:09:f1:90:55:45:6c:13:a5:59:e8:d5:
         10:b4:f1:36:4d:ed:52:93:1e:e5:ca:74:d2:e0:bf:db:94:63:
         bd:60:76:ee:fe:71:41:47:7f:a3:36:33:39:3d:fc:13:7b:08:
         f1:87:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:09:30 2026 by rpki-client