Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/02b089c4-9047-3c67-8acb-3b2f7b4f4407.roa
File:                     02b089c4-9047-3c67-8acb-3b2f7b4f4407.roa (raw, json)
Hash identifier:          Kp7BDz/3v+t+29UfGMSm18HBrHgjaYSKCmcR6rCG4AA=
Subject key identifier:   0D:6D:A8:23:A0:CC:4C:EF:00:9F:9E:07:68:E0:2D:95:05:0D:B8:FA
Certificate issuer:       /CN=e1484d3a-68b3-4aa9-928a-6ddb7e638ce1
Certificate serial:       010D0C9F4328584EA799CB66003287ECD21F3DC0
Authority key identifier: DF:61:4B:9D:96:BD:BC:A7:9B:12:0B:5B:C9:6C:47:36:36:58:0A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/02b089c4-9047-3c67-8acb-3b2f7b4f4407.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15248
IP address blocks:        198.147.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:cb:66:00:32:87:ec:d2:1f:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1484d3a-68b3-4aa9-928a-6ddb7e638ce1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dd8641bf-b744-458a-9d65-2e119e6666ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:3c:d2:38:f8:a8:87:5c:16:88:54:56:59:
                    83:62:54:fb:7f:98:c8:01:0b:0c:ea:65:fa:d2:a7:
                    bf:09:d6:8e:c7:8c:c2:bd:72:52:64:a4:b5:23:dd:
                    a3:b9:41:e1:23:46:94:cb:ed:b5:32:6f:80:28:fe:
                    f1:d7:99:4b:d3:01:6f:c5:54:e8:db:82:79:a6:61:
                    23:e7:cf:fb:04:bb:e2:7b:27:e0:28:fc:ba:d9:f1:
                    23:75:43:ea:5e:32:5f:d2:4c:52:42:9b:a8:57:70:
                    ab:2d:c8:73:49:77:05:f8:f3:b8:fd:02:b7:a9:03:
                    be:87:59:e9:21:dd:52:0e:75:24:e3:3b:29:89:1a:
                    50:ee:b2:86:c7:0d:9d:c9:6a:2e:10:40:7c:df:09:
                    3a:b2:a4:7c:cf:f5:0b:1f:00:fe:d7:af:e7:97:cd:
                    5d:b9:73:4d:3b:db:6e:8f:53:d2:da:b3:9e:b3:ed:
                    de:bb:b1:ba:91:c5:e7:87:1f:1e:a1:e5:65:52:40:
                    58:7f:21:50:74:9f:d3:36:08:71:05:eb:fb:67:f9:
                    d2:47:4d:3f:95:33:84:fd:44:f0:9e:5f:3a:fa:6e:
                    0b:90:a7:7c:85:24:40:87:9b:19:90:de:9c:cc:5a:
                    0d:70:eb:50:5c:d5:c3:45:32:9d:24:eb:f2:b5:95:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6D:A8:23:A0:CC:4C:EF:00:9F:9E:07:68:E0:2D:95:05:0D:B8:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/02b089c4-9047-3c67-8acb-3b2f7b4f4407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.crl

            X509v3 Authority Key Identifier:
                keyid:DF:61:4B:9D:96:BD:BC:A7:9B:12:0B:5B:C9:6C:47:36:36:58:0A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.147.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:00:15:4d:17:97:29:d5:a1:e4:ba:cc:cc:7d:82:ac:96:01:
         ff:4d:f4:79:4c:44:b0:c6:05:0b:51:a9:c9:64:a1:93:b1:e1:
         84:d1:70:83:9a:15:7a:04:76:25:bb:8c:05:66:86:07:c3:28:
         0e:fc:1b:51:5f:30:eb:8e:f7:eb:4b:ee:9d:56:99:74:72:13:
         89:12:9f:0e:48:5a:e2:b7:8a:39:fe:da:99:34:17:2f:4d:21:
         28:32:83:97:b1:23:31:df:27:55:79:3d:e4:a3:be:ee:1b:22:
         55:90:64:b9:80:92:f0:f1:c1:23:93:54:f4:fa:d8:c6:d3:00:
         24:47:24:97:a3:a3:ad:7d:26:e7:96:c0:a8:a2:b3:3a:dd:be:
         7a:cc:6f:32:57:a7:e2:fd:14:b4:a4:cc:59:df:f6:ce:33:42:
         cd:92:a7:3d:a5:06:c0:fe:a1:90:6c:d6:a3:61:1d:d8:b4:2d:
         bf:07:bf:a5:18:64:8a:0d:e5:ea:56:de:93:d4:06:14:c3:08:
         b4:0d:e6:81:6b:59:61:2a:c2:0a:84:5a:ea:c1:5f:ef:01:9b:
         ba:fb:72:8a:9d:56:01:26:04:90:63:99:0b:a8:c8:92:0d:18:
         85:55:54:42:df:35:b3:c6:15:86:7b:8b:70:39:b5:5b:ba:0a:
         1c:06:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:12:28 2026 by rpki-client