Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa
File:                     88190764-9983-3779-9082-f64dccc70d7a.roa (raw, json)
Hash identifier:          72fP16vuOJm26En9BigT988Vtx3ZcI6/2xGE139kPEw=
Subject key identifier:   99:5B:5C:57:B7:50:97:95:8D:35:1C:9C:2A:42:68:D0:2A:60:E0:9E
Certificate issuer:       /CN=6201e8e9-68e9-43e6-bed0-be51611bbda8
Certificate serial:       010D0C9F4328584EF87CB3071CBD9EF28795D230
Authority key identifier: 02:26:3E:29:63:4F:E3:A5:E8:6C:C3:C4:0F:89:3E:ED:9E:AA:49:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     399541
IP address blocks:        198.45.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b3:07:1c:bd:9e:f2:87:95:d2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6201e8e9-68e9-43e6-bed0-be51611bbda8
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=ea74f800-1088-4b05-b81d-11d60a23d2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:d2:af:54:ba:4b:40:59:96:a2:bc:39:e8:
                    04:ca:49:38:c5:b8:6d:f2:1c:35:67:b6:3a:e1:96:
                    25:1f:16:79:55:01:29:15:25:16:be:03:7c:b5:48:
                    e5:89:26:8f:22:6a:17:a2:6d:e1:b3:19:36:0c:7b:
                    d7:f2:89:cd:c7:74:78:48:db:88:84:65:6f:5d:b4:
                    84:46:81:8c:c4:0f:91:5f:c7:2c:b8:15:55:4f:10:
                    c1:65:e9:17:2a:66:8f:f0:07:8d:ea:06:3f:f6:ce:
                    bc:62:2b:25:26:23:7a:27:cc:74:f1:f0:b9:65:e3:
                    61:5d:4e:1f:cb:fb:f6:bf:be:24:c7:8c:00:2a:d6:
                    a9:91:a2:3d:b4:47:b5:8f:99:ee:62:10:fe:b1:db:
                    8b:72:0f:30:25:62:82:cf:2e:c1:35:49:b6:28:64:
                    a7:14:1f:41:e1:05:5b:68:a2:bf:19:5f:44:d3:b1:
                    93:54:a4:c2:83:e3:a9:09:96:fb:75:d1:ec:63:68:
                    ff:cf:83:7c:b8:2a:55:a2:e1:2b:bd:15:6d:39:23:
                    49:df:00:ea:d3:4e:8a:b3:54:95:8b:5d:1c:9d:ac:
                    42:a2:ab:4b:c6:e5:25:d5:34:6a:ce:cb:0f:42:2f:
                    47:63:38:25:04:d7:97:d4:76:7c:10:c7:23:52:03:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5B:5C:57:B7:50:97:95:8D:35:1C:9C:2A:42:68:D0:2A:60:E0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/88190764-9983-3779-9082-f64dccc70d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8/6201e8e9-68e9-43e6-bed0-be51611bbda8.crl

            X509v3 Authority Key Identifier:
                keyid:02:26:3E:29:63:4F:E3:A5:E8:6C:C3:C4:0F:89:3E:ED:9E:AA:49:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6201e8e9-68e9-43e6-bed0-be51611bbda8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:f7:f3:c3:56:e3:6c:88:b2:79:f1:da:a9:32:d2:b6:60:
         f5:54:1a:28:bf:e4:9f:de:e8:17:04:f1:ff:17:0b:1c:fc:b4:
         32:f0:6d:ec:ae:96:c0:9c:b5:c2:8e:f4:7b:45:be:72:3a:29:
         d3:c2:61:fd:e7:61:89:04:53:e4:e5:64:34:ff:a5:13:b3:16:
         ac:2d:53:9d:86:49:84:ef:81:c0:d8:c6:72:85:fd:17:3f:16:
         7b:b7:fe:fe:3e:f9:d2:cd:c3:16:40:6a:d5:e0:f6:b8:2e:cc:
         8c:85:24:f5:12:50:87:02:f9:83:6f:8f:65:71:b9:ec:ee:18:
         9b:a4:9f:bb:8c:48:6e:75:1b:fd:6a:c9:60:aa:1c:47:98:fe:
         a8:2b:e2:39:b0:d1:d9:fb:9a:78:7b:0a:f4:9f:99:79:76:63:
         36:cd:c2:87:65:fb:86:74:3a:8f:22:ef:38:44:2a:8f:d1:6d:
         1d:27:bb:52:ad:bb:53:0e:d1:0a:bd:9e:f7:e0:33:b5:c8:1d:
         72:d5:6b:0e:bb:b2:1e:6f:c1:72:43:35:73:67:09:8b:ff:c3:
         8c:26:42:c3:53:b1:f8:04:44:8e:7f:cf:a8:04:57:d2:dc:f4:
         ce:6c:2a:51:a0:77:f0:be:9f:59:9c:d6:18:8f:57:56:cb:a0:
         3f:cd:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:06 2026 by rpki-client