Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/98e69faa-ab71-3400-91ca-489d4657d1a9.roa
File:                     98e69faa-ab71-3400-91ca-489d4657d1a9.roa (raw, json)
Hash identifier:          FkZ4OeM9RFabmYAr9QkKBulFewZtVRBEKglj+xEMYdk=
Subject key identifier:   4F:32:D5:A1:F6:73:00:60:E1:B9:98:BB:14:70:71:33:88:42:0B:5A
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F4328584FA163180CB5CB6A5893861D00
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/98e69faa-ab71-3400-91ca-489d4657d1a9.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     198566
IP address blocks:        162.218.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:18:0c:b5:cb:6a:58:93:86:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=9b112b0b-daad-4473-b658-73d6d58bbac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:cd:7b:00:4e:93:23:41:d9:66:86:7c:74:
                    01:4d:e9:ff:c4:b0:a5:10:70:1b:bb:e9:6a:fa:c0:
                    cd:44:1d:87:a6:cc:70:c5:48:ae:68:c3:04:db:3b:
                    9f:41:f9:56:3f:8a:e3:ae:a6:67:e7:5b:2e:a9:53:
                    da:3d:5e:26:26:29:ed:86:c2:9d:22:7e:48:b5:44:
                    9a:16:df:d7:65:11:3b:49:53:3a:b2:0a:9f:57:a8:
                    36:ef:a1:b6:6c:cd:1f:26:29:df:c3:e6:67:19:ae:
                    38:6d:5c:51:fe:cd:83:af:e8:55:c1:af:ac:26:db:
                    19:8f:84:a1:d1:57:18:2c:8c:35:2e:2f:96:c6:09:
                    80:33:29:c1:e0:75:c8:19:21:01:e4:ff:f2:bc:16:
                    7c:a0:31:af:ef:64:b7:48:70:75:7b:97:f5:ee:45:
                    a2:02:26:6b:34:6d:11:6d:6d:b8:e9:d9:c2:5b:1d:
                    de:5d:14:d9:89:fd:52:12:49:6b:2c:ad:cb:c6:74:
                    10:53:8d:a5:73:cb:c6:b1:b0:10:c7:e1:cf:b0:d6:
                    ed:84:56:03:17:4e:c5:73:5d:15:da:02:7e:5f:c9:
                    84:7d:66:a5:1f:0d:4b:0e:bb:c2:82:0b:03:8e:23:
                    57:6d:71:b2:94:b3:78:ef:bf:8d:de:d3:c4:20:19:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:32:D5:A1:F6:73:00:60:E1:B9:98:BB:14:70:71:33:88:42:0B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/98e69faa-ab71-3400-91ca-489d4657d1a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:17:84:52:7f:ed:10:63:12:30:26:3b:ab:a0:ce:58:c1:4c:
         10:97:64:21:68:4b:a1:da:d1:ac:e2:69:9c:68:20:44:38:bd:
         7b:17:a3:91:1b:3c:51:35:1f:b2:df:da:23:56:ab:76:bc:60:
         9a:17:8b:12:fd:43:65:b7:87:36:14:88:21:44:c2:c9:af:a9:
         c5:37:8e:f5:97:7c:37:ae:81:3e:4d:fe:22:c8:fe:aa:a9:a7:
         99:93:b6:a1:c4:05:8c:29:b9:f9:2d:db:ea:16:37:de:c3:9e:
         92:0c:98:dd:a4:40:2f:72:3c:0c:c9:57:15:a6:d8:a5:bb:89:
         d8:31:9f:b1:a7:5e:12:9a:3a:ae:16:37:27:7f:1c:b6:32:cb:
         ee:b4:76:be:d6:a4:09:81:e3:86:69:1f:ed:32:b3:d2:44:5e:
         61:17:a0:6b:1c:39:0b:5d:46:66:ac:e3:85:42:1b:45:59:fb:
         8c:59:7f:a6:97:c9:f0:8a:e0:87:10:f1:44:be:8a:bd:da:92:
         93:57:c6:55:8e:ee:8d:ad:34:62:36:26:89:51:1c:f9:e9:f9:
         52:20:41:93:b5:91:a2:04:62:d6:34:cd:17:64:40:78:77:7c:
         fd:ec:9d:d6:81:86:86:80:4d:16:e6:fa:df:c2:3f:d3:f8:c5:
         cc:89:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:19:39 2026 by rpki-client