Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fb898a7-0187-365e-a249-dee00c2c8587.roa
File:                     3fb898a7-0187-365e-a249-dee00c2c8587.roa (raw, json)
Hash identifier:          L5k561Wijg8jNSC+q8Bj0yCG6x7kJzXxLgjdVK9LRKo=
Subject key identifier:   F3:BA:F8:C0:89:65:FE:5B:BE:26:9C:65:5D:38:DE:DE:9C:2A:61:27
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F4974ACC0676D5F3C9B8E1EC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fb898a7-0187-365e-a249-dee00c2c8587.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     49608
IP address blocks:        96.126.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ac:c0:67:6d:5f:3c:9b:8e:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=10582966-d9b7-43a4-8e62-88dc3c7eb44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:d6:d1:2e:e7:3c:f5:a8:d8:73:95:0c:71:
                    b8:95:8d:71:fc:ad:28:ee:92:59:68:6b:93:1c:8b:
                    58:e9:d7:29:1a:bd:4a:36:5a:59:c9:ae:d6:ce:aa:
                    5c:b1:aa:54:96:1b:d5:4b:70:bd:75:9b:32:78:7a:
                    04:d2:25:80:81:3e:ee:aa:2d:99:5c:27:d8:e0:51:
                    dd:b0:98:d4:6f:11:ad:f8:ce:85:96:72:af:a1:5b:
                    46:fd:69:78:8a:42:60:7e:02:c8:8b:50:b8:1e:6e:
                    59:a7:0a:9d:e2:eb:3b:54:33:59:b1:af:d6:56:0f:
                    21:f8:e5:4c:c5:ed:d9:dc:15:61:27:18:80:f1:02:
                    93:0e:e2:8b:fb:3b:14:08:2f:47:6d:77:33:35:08:
                    bf:32:48:84:21:d6:1f:a5:97:06:5b:75:37:f1:aa:
                    76:24:16:b9:3f:6d:c9:e5:ab:58:12:02:07:ef:d4:
                    e8:e8:93:9f:68:ca:30:8b:b7:04:6c:0f:83:9e:f4:
                    70:04:7a:a0:5a:12:fa:49:d0:9e:a7:f0:a5:31:93:
                    2b:31:a7:d7:67:fa:ee:b9:90:a6:d0:e0:80:07:da:
                    6d:9a:1f:6b:74:3e:e3:7c:16:97:fb:09:9f:40:de:
                    52:35:2c:0b:c5:8a:94:99:7d:42:10:7c:6e:e9:52:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BA:F8:C0:89:65:FE:5B:BE:26:9C:65:5D:38:DE:DE:9C:2A:61:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fb898a7-0187-365e-a249-dee00c2c8587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:9c:22:24:3e:aa:e2:a4:08:3f:42:c2:45:ae:f3:f5:40:
         4f:c3:15:ae:58:28:7a:34:fc:71:30:ef:04:54:7f:29:0a:24:
         7e:3e:51:cd:8b:18:dd:95:8a:85:8b:fc:90:3a:05:97:75:c9:
         48:94:7f:56:25:87:15:bc:62:a5:f2:64:c3:e4:b1:f8:23:34:
         f2:7c:8e:7d:81:e9:2f:30:94:52:67:e2:bd:65:31:25:80:52:
         85:83:95:07:e9:fa:71:d6:94:82:8b:d3:32:f3:21:9b:b3:e4:
         c0:c0:3f:0b:91:0b:81:3d:4b:27:6b:86:b1:a8:77:aa:1a:30:
         27:80:f9:35:72:81:76:d6:8f:16:99:67:bb:0b:30:09:73:49:
         93:d4:28:30:f0:12:06:4f:b7:ba:e1:19:5b:a1:2e:32:56:f1:
         0a:a9:b9:6f:5f:ba:21:26:1e:64:24:6a:fd:a9:8f:f8:f3:d0:
         d0:1b:dd:11:18:f6:d2:51:0c:f1:b5:24:d5:ed:34:b0:17:99:
         79:94:b2:a6:e7:e1:9c:62:ab:c4:25:33:a7:e9:f6:39:b1:f3:
         03:18:88:82:ef:ea:c5:14:49:1e:9d:ef:d1:6b:d6:08:74:f2:
         02:cd:08:2c:1c:4e:c6:80:0b:f0:e7:06:40:0b:a2:00:98:8b:
         25:fc:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:54:37 2026 by rpki-client