Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02fb0ef7-c121-35d3-92a4-c59a2363e9a9.roa
File:                     02fb0ef7-c121-35d3-92a4-c59a2363e9a9.roa (raw, json)
Hash identifier:          x+MP5GEZpQ+SXsBdjkgK7yFrq0fXfC1Bu5U3PSEH2Ng=
Subject key identifier:   25:F4:73:DF:DC:4E:24:1B:87:7F:97:C6:CF:E3:0F:46:ED:E6:1B:58
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5A32A65386E75D9855FAC380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02fb0ef7-c121-35d3-92a4-c59a2363e9a9.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        198.20.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:a6:53:86:e7:5d:98:55:fa:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=74aa52a5-38a3-41e1-8d1b-5d7f5ba5c1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:d8:a5:cd:dc:17:88:91:3f:69:fe:75:84:
                    c8:28:61:6d:dc:72:29:04:b4:d1:53:9a:bf:f1:3e:
                    4d:5e:eb:86:db:88:a7:06:e2:e8:f5:67:58:1f:6a:
                    b4:42:76:e5:7b:bc:d2:94:ad:60:be:77:68:96:2f:
                    74:e1:aa:6a:3c:5c:60:8a:45:23:4d:b5:50:01:9d:
                    a1:7f:d3:4d:8a:c5:aa:cc:ac:e3:c7:ee:a5:7d:ee:
                    e7:3f:21:bd:fd:57:44:da:26:bb:d4:e4:16:77:d6:
                    87:f8:57:3a:1a:23:a7:aa:d1:88:48:72:03:32:68:
                    46:f7:cc:bd:32:46:b1:56:08:19:fc:c1:08:bd:3c:
                    e6:c3:c1:15:e4:a2:11:39:ab:91:42:b1:28:ec:3d:
                    b8:27:65:82:3b:98:25:88:33:2b:41:e6:25:8d:c8:
                    dc:de:33:3a:79:12:39:b9:95:f8:a0:d5:dd:85:34:
                    d0:49:f6:d2:2a:d1:67:43:2e:f5:26:43:8e:bc:78:
                    88:9b:c7:c0:f0:0b:0a:44:d4:b3:6c:b6:29:c6:3a:
                    89:b0:c7:57:a9:0e:77:f8:c3:e2:02:60:33:72:a9:
                    39:5e:ff:41:ce:81:d1:d9:d4:ec:8b:45:a3:fb:d8:
                    5d:99:a5:9b:b4:59:f6:2e:1a:b1:eb:6c:2c:93:62:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F4:73:DF:DC:4E:24:1B:87:7F:97:C6:CF:E3:0F:46:ED:E6:1B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02fb0ef7-c121-35d3-92a4-c59a2363e9a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:82:0e:58:68:c4:57:3e:07:2f:c7:61:7b:5d:d8:82:4b:49:
         c0:bd:3f:3d:38:4f:2b:e2:d8:a5:44:0c:38:ae:b9:af:68:e6:
         ff:c6:a7:c4:f4:66:c0:1c:eb:37:89:9c:d1:f6:0b:c4:d3:a6:
         74:eb:bd:81:a7:a9:67:c8:04:df:59:84:9b:51:a4:57:7b:9d:
         aa:a3:0e:0e:6b:70:23:bb:fe:56:6e:29:9d:32:26:0b:eb:52:
         29:26:dc:58:5f:9c:ce:fc:13:10:3f:7d:fb:80:69:91:e4:91:
         39:1f:65:93:bc:a8:eb:9e:16:50:df:ae:1a:20:eb:0d:7d:d5:
         78:b7:7c:06:77:93:93:bf:7b:9e:c9:6e:db:e0:12:9f:8a:65:
         a2:a3:c9:01:cd:3b:b7:8f:eb:ca:1c:34:c2:f4:11:cc:98:b0:
         7b:91:76:44:4f:89:12:13:d9:fa:69:b5:13:d9:65:74:dc:e6:
         60:75:27:a6:d9:e4:2b:ca:bd:90:ab:08:f8:80:0b:96:76:9f:
         31:25:c9:65:4b:a6:2d:02:3e:84:3a:10:21:f4:54:af:d0:f5:
         cb:d1:99:eb:41:ed:c6:ba:e5:70:dc:0f:e1:26:c4:dd:4a:48:
         18:48:59:11:01:dc:db:1a:4e:47:c9:b6:ad:2b:1b:ca:b5:fa:
         a6:72:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:58:40 2026 by rpki-client