Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/8ae005c0-0b42-3749-9428-90697dc5938c.roa
File:                     8ae005c0-0b42-3749-9428-90697dc5938c.roa (raw, json)
Hash identifier:          mf38OO//BGbx71SI68ag9L3nk5vM31DC22wZXc9wxaY=
Subject key identifier:   F2:64:B0:5F:6C:6C:FE:B4:1D:73:BB:72:E2:84:11:1B:65:88:B3:5A
Certificate issuer:       /CN=bbfa0893-69f8-4451-9526-12cfa4bebd97
Certificate serial:       010D0C9F4328584F679D19213F20B4607995A9BD
Authority key identifier: C5:2D:1A:47:91:DD:25:A5:33:FB:E5:43:71:C4:AE:53:17:B8:F3:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/8ae005c0-0b42-3749-9428-90697dc5938c.roa
Signing time:             Mon 05 Oct 2026 20:20:15 +0000
ROA not before:           Mon 05 Oct 2026 20:20:15 +0000
ROA not after:            Sun 03 Jan 2027 21:20:15 +0000
asID:                     402411
IP address blocks:        198.134.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:9d:19:21:3f:20:b4:60:79:95:a9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfa0893-69f8-4451-9526-12cfa4bebd97
        Validity
            Not Before: Oct  5 20:20:15 2026 GMT
            Not After : Jan  3 21:20:15 2027 GMT
        Subject: CN=a2d19566-2166-44eb-a78c-5af6cf7525ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:ea:50:11:0e:5d:1b:fb:d7:1e:a8:c0:8b:
                    21:3f:4b:39:50:48:8c:36:ce:99:a8:3c:57:06:5d:
                    42:3b:cd:c4:f2:95:97:d5:b9:c3:8f:b1:a2:e6:c2:
                    17:2c:5b:4f:9b:a3:0a:34:20:3f:e0:05:76:fd:82:
                    ae:f9:17:fe:e0:54:e6:f0:fd:4d:2a:95:49:37:ca:
                    50:4a:39:90:a8:34:64:11:15:bf:1c:0e:57:a0:79:
                    e8:12:93:40:4e:0a:9a:59:4e:a9:df:fe:93:29:7d:
                    7f:3b:a0:5f:b9:6c:47:e1:ce:db:ef:13:55:72:01:
                    6f:fc:94:41:33:10:1c:04:15:27:b6:0d:2e:67:35:
                    eb:21:ff:8d:82:b8:7b:2e:df:e0:05:46:f7:e2:d6:
                    e9:ad:6a:1b:95:31:51:84:c8:27:80:af:db:28:69:
                    73:14:5b:90:db:4d:9c:7f:2d:11:f6:f0:5f:c1:98:
                    f6:9b:19:1e:e2:6f:35:97:ef:c5:da:25:11:92:47:
                    70:34:5b:6c:cf:70:40:c9:81:0e:3d:49:2b:8a:0a:
                    ea:68:fa:a5:b0:65:d5:bb:a3:11:be:0c:93:5d:77:
                    64:d1:a4:0d:6c:b3:ce:87:e4:e2:05:46:f0:17:33:
                    40:ae:e1:0f:a5:fa:02:90:21:18:9e:c2:42:8e:94:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:64:B0:5F:6C:6C:FE:B4:1D:73:BB:72:E2:84:11:1B:65:88:B3:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/8ae005c0-0b42-3749-9428-90697dc5938c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.crl

            X509v3 Authority Key Identifier:
                keyid:C5:2D:1A:47:91:DD:25:A5:33:FB:E5:43:71:C4:AE:53:17:B8:F3:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:e0:17:41:31:4e:18:58:b4:fb:c4:a6:e8:99:ed:07:bc:
         26:22:4d:8f:49:4f:5a:54:1d:48:ad:95:c3:be:93:54:35:27:
         38:bc:9f:40:55:7a:2a:df:87:94:4c:4e:b2:b6:a4:ff:7e:4b:
         3e:f3:f2:a1:36:34:9c:3a:83:06:88:dc:73:d2:1b:26:59:a8:
         f6:21:e8:ef:e6:93:f5:2e:1a:6e:59:94:4e:c0:c4:c1:e8:8d:
         21:44:67:37:33:4c:17:c8:98:ca:4f:2f:7f:2d:84:5b:82:ba:
         62:9c:0f:64:70:e5:68:1e:f9:42:c3:6f:62:36:c6:d6:e2:32:
         8e:15:8f:93:29:6a:85:73:a8:2a:e0:e5:ec:93:48:e7:50:91:
         86:9a:e5:1e:5d:16:a9:70:33:dc:ac:8d:7f:46:79:02:25:1e:
         98:08:10:04:75:eb:80:ef:fd:b6:fa:9d:67:06:8b:78:ae:80:
         03:b1:e2:c5:89:6c:ae:06:25:91:55:85:ce:c8:9b:ab:fe:ee:
         3a:be:2c:34:a3:50:b3:fc:68:5e:a8:f2:00:d3:9e:e8:b4:99:
         ff:bc:2f:18:2f:a2:f7:52:69:55:8f:1f:7e:53:90:ff:f7:d8:
         c0:97:aa:ef:14:1e:15:3b:5d:ff:b0:15:1f:05:b8:b2:f9:73:
         7e:57:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:06:31 2026 by rpki-client