Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/396f1663-a36e-38e5-8c23-f5d007529714.roa
File:                     396f1663-a36e-38e5-8c23-f5d007529714.roa (raw, json)
Hash identifier:          44UORnRyqSxherbk/dXVXrJeXiuWdtzBn2SfWgLx2jc=
Subject key identifier:   88:26:79:A2:AC:4F:DB:60:06:4A:37:C6:EC:AA:BE:C2:DD:17:9B:1F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA788295783004CB39CA67A80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/396f1663-a36e-38e5-8c23-f5d007529714.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53607
IP address blocks:        98.142.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:29:57:83:00:4c:b3:9c:a6:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b4bf3063-bdd2-4a00-97f4-015a98154641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:9b:c3:5d:c8:01:7d:7e:83:5b:74:41:ef:
                    1c:d2:42:13:7c:c0:10:d9:b5:18:aa:11:f6:ce:06:
                    01:a3:08:77:1c:54:1a:8e:70:f9:b0:6a:28:3f:fa:
                    62:a2:4e:1f:5b:9a:1d:d2:e9:b3:14:d5:fe:e8:14:
                    28:e9:ad:0e:a5:7a:be:a6:5e:b2:ad:78:02:da:13:
                    24:d5:9b:30:17:fd:ae:0c:aa:62:fd:bf:c1:cf:0b:
                    ee:39:38:be:92:df:63:89:93:24:85:be:2f:ff:48:
                    34:57:8a:62:ed:63:c9:2d:03:30:6a:c7:bd:5e:97:
                    68:b5:3b:53:03:36:dd:fb:b5:ad:a0:ec:ec:e3:4a:
                    c1:fe:3b:d4:4c:78:a6:71:84:9e:e8:db:99:03:ed:
                    b0:f7:4c:34:ce:69:34:22:17:32:2a:76:fb:85:36:
                    2d:13:d2:ab:df:70:39:eb:c4:a0:ed:a4:f2:0e:eb:
                    42:d3:56:5c:ea:9b:11:74:65:13:0d:2e:21:e0:6f:
                    39:94:bb:ea:5a:d5:27:9a:26:f0:e7:4b:da:ad:08:
                    11:91:5d:3c:3f:b4:63:3a:e4:df:53:b5:7e:b2:c5:
                    60:cc:f6:74:36:17:66:ae:99:b0:43:ca:4a:98:bd:
                    28:fe:38:4c:bc:7c:00:22:dc:04:c0:63:b7:81:91:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:26:79:A2:AC:4F:DB:60:06:4A:37:C6:EC:AA:BE:C2:DD:17:9B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/396f1663-a36e-38e5-8c23-f5d007529714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:15:0c:e7:51:7e:e9:72:7b:86:b3:89:8d:a4:c1:12:e5:
         ff:32:4f:34:c2:7c:23:12:b3:38:53:16:d5:e2:2b:43:06:02:
         d9:d0:7e:5d:10:e3:5d:73:70:81:24:6e:a1:dc:ca:fd:d5:21:
         84:75:07:12:b8:2f:cf:39:e0:b9:08:77:9b:c6:8b:3e:ef:5a:
         b2:3f:52:f0:76:0d:4b:84:bf:f8:35:60:e5:2b:f5:dc:43:ca:
         8b:15:cb:5b:da:8c:b4:0a:82:3b:b4:07:dd:ce:d7:12:be:e5:
         a7:7d:10:b7:d6:72:9a:73:3b:24:ff:51:1f:c8:11:e6:c1:46:
         28:43:6b:b1:5b:df:71:ea:26:f6:ff:82:a5:44:33:5d:2c:c7:
         be:78:25:99:b4:4e:b1:9b:76:8b:5f:26:87:cb:57:ae:9e:5e:
         50:ba:09:4e:c6:10:3e:5d:6c:ba:b8:8d:6b:7c:7c:5f:b6:ab:
         a4:45:b4:6e:ee:53:4b:01:fa:8f:fe:81:3d:fd:06:d9:d5:a3:
         b9:21:54:9e:9e:76:0a:d0:02:72:67:32:58:ec:51:dc:f9:44:
         77:4c:3a:51:d0:af:d0:73:de:12:cc:c5:e7:b6:3a:68:a6:63:
         69:b6:f1:32:b3:e5:e3:22:e3:fc:fc:da:ad:b8:c2:97:f8:50:
         34:f2:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:46 2026 by rpki-client