Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/ba5866b9-98b7-30d4-9c0d-02a5be7cffd0.roa
File:                     ba5866b9-98b7-30d4-9c0d-02a5be7cffd0.roa (raw, json)
Hash identifier:          IwHsjVDlZieAivOUWhUysPYSNMOnpiWOYZLdp0BGDbg=
Subject key identifier:   89:16:41:4E:B9:F0:D0:86:86:C7:A5:96:A3:B3:AD:F4:79:CD:7C:FF
Certificate issuer:       /CN=c175f825-3b85-4838-a06a-704b8afdb54d
Certificate serial:       010D0C9F4328584EEA8748E64D2478A04EDF28C0
Authority key identifier: C0:5A:14:BD:01:37:59:F0:0B:79:8D:F0:7C:D0:48:37:24:72:70:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/ba5866b9-98b7-30d4-9c0d-02a5be7cffd0.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     393406
IP address blocks:        198.32.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/c175f825-3b85-4838-a06a-704b8afdb54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/c175f825-3b85-4838-a06a-704b8afdb54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:48:e6:4d:24:78:a0:4e:df:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c175f825-3b85-4838-a06a-704b8afdb54d
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=63b83a55-34a0-4f6d-85c2-8bd53fd8cac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:79:23:42:5c:a2:f8:3e:45:c3:d1:d8:2f:
                    11:e9:b4:58:29:8f:ba:63:94:c6:98:48:09:a4:ab:
                    f3:6d:58:e0:56:27:c9:de:34:bc:31:90:c9:e3:10:
                    8f:74:c1:27:91:93:9e:78:83:66:47:f1:4e:e9:51:
                    db:bb:8d:5d:78:d1:17:f2:7f:91:8f:ab:1f:56:54:
                    41:56:dd:40:26:7a:c4:b6:56:56:36:c9:a6:66:e8:
                    20:05:73:57:26:c1:11:76:85:3c:0c:c8:a7:36:32:
                    08:6a:27:ba:9c:de:d7:14:5c:d0:08:a5:5d:8e:cc:
                    56:0f:7c:0d:b0:aa:60:74:0e:c8:41:86:ac:7b:ab:
                    c9:ce:9c:2e:1c:8c:41:59:1c:98:1a:e4:51:86:5e:
                    59:89:ed:66:4d:6c:44:55:0e:74:1f:a3:f0:1d:bf:
                    b6:3c:f5:da:4b:b2:91:84:60:3b:b2:e3:63:db:cb:
                    4e:eb:e1:83:9e:9f:54:32:38:05:27:a3:99:4c:8b:
                    fd:3d:0c:d4:2a:c7:61:d6:69:a9:a6:1a:c6:3d:1c:
                    90:e7:ea:ce:fb:90:15:7a:6b:55:7d:e9:4b:ec:af:
                    3b:34:ab:b2:d4:22:a9:c0:f8:dd:93:c0:50:6f:01:
                    39:a0:45:2e:02:9d:32:92:55:b1:4e:8a:3e:37:ea:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:16:41:4E:B9:F0:D0:86:86:C7:A5:96:A3:B3:AD:F4:79:CD:7C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/ba5866b9-98b7-30d4-9c0d-02a5be7cffd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/c175f825-3b85-4838-a06a-704b8afdb54d.crl

            X509v3 Authority Key Identifier:
                keyid:C0:5A:14:BD:01:37:59:F0:0B:79:8D:F0:7C:D0:48:37:24:72:70:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.32.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:80:5f:a0:52:3e:b2:69:2e:63:c0:a4:76:d6:e2:9e:1c:b8:
         25:0b:88:96:b5:35:72:51:c2:11:64:18:5c:a5:19:85:8d:d0:
         57:38:51:d7:c2:58:ec:02:46:84:55:3d:5e:ef:29:fd:e7:92:
         ed:ef:ff:de:4d:62:3a:a3:1f:56:24:7f:30:e0:fe:05:f0:93:
         e6:97:b9:5d:14:f5:3b:e4:ef:30:86:aa:fb:6d:6f:0c:bc:d3:
         45:99:45:75:61:11:6b:07:21:ec:f0:f1:0b:d3:70:ac:40:82:
         37:19:64:de:7b:06:49:73:ae:3d:e1:f1:04:28:3a:67:c1:bb:
         f1:e3:0a:00:1f:64:5b:27:99:cf:8b:90:66:14:f6:f3:2c:3a:
         1b:aa:fb:67:65:cc:20:c8:e0:6e:7c:2a:f5:71:d4:61:c4:bb:
         d3:88:57:56:81:96:d0:ac:bf:f4:4b:52:fe:b8:44:8e:f4:c4:
         bc:ea:11:08:96:6e:ef:04:de:48:ec:18:7a:9b:42:17:8a:82:
         70:2b:87:b7:89:c5:28:53:e0:13:3c:c0:db:f8:7f:2c:43:6e:
         0d:7f:75:8b:c1:1c:ec:ef:f5:e7:57:87:a2:1b:7a:4a:c1:8d:
         85:44:86:cc:74:75:f8:f5:e2:e1:67:8c:f4:fe:82:2e:3a:1a:
         cc:6b:12:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:51 2026 by rpki-client