Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/08666148-34e2-3c46-b6fe-570b57b38ca8.roa
File:                     08666148-34e2-3c46-b6fe-570b57b38ca8.roa (raw, json)
Hash identifier:          H652jdZM2O+KrRmEiFnlq/ayplQ+Suj1ET1k81Zpcuw=
Subject key identifier:   D9:3C:16:C9:4F:C8:46:8D:18:CF:15:D8:23:86:24:65:2D:4B:A3:87
Certificate issuer:       /CN=98f21885-21e4-4f38-8c7d-26696d802c35
Certificate serial:       010D0C9F4328584F03AF79380AA76197C3AF95C0
Authority key identifier: 4F:2E:32:6E:17:06:CB:FA:65:24:A3:90:A6:E2:CF:A9:3F:2B:B3:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/08666148-34e2-3c46-b6fe-570b57b38ca8.roa
Signing time:             Mon 31 Aug 2026 01:16:26 +0000
ROA not before:           Mon 31 Aug 2026 01:16:26 +0000
ROA not after:            Sun 29 Nov 2026 02:16:26 +0000
asID:                     394258
IP address blocks:        204.108.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:af:79:38:0a:a7:61:97:c3:af:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f21885-21e4-4f38-8c7d-26696d802c35
        Validity
            Not Before: Aug 31 01:16:26 2026 GMT
            Not After : Nov 29 02:16:26 2026 GMT
        Subject: CN=7c9b7a16-3bc8-42d0-a8c4-bdbe665f00a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:7e:27:5e:e0:2c:65:2f:4c:5b:c9:83:eb:
                    e4:ba:80:00:47:d8:4a:44:55:ce:eb:9f:73:b0:ea:
                    db:79:2a:37:c4:13:16:77:23:72:63:1a:47:99:e9:
                    ef:33:a0:e4:d5:2b:2d:3f:d3:e9:8d:16:99:14:d2:
                    3e:05:8f:d3:10:38:09:3b:74:80:e4:0d:b2:85:f9:
                    30:7e:5f:59:11:a5:0c:ba:e1:10:5f:2c:45:dc:df:
                    d6:f5:08:93:1a:59:ba:c1:7b:1b:bd:b4:21:4a:fe:
                    34:16:23:e8:cc:17:b5:14:28:5e:ae:e2:81:14:88:
                    b8:73:30:6f:b5:1b:57:34:26:d9:19:a0:77:fa:22:
                    62:aa:67:72:93:b5:fb:af:c1:5e:f7:f5:ac:2d:bb:
                    b1:81:5f:d2:02:af:5a:ba:cf:f0:34:91:ad:ad:3d:
                    cf:69:82:a3:6c:74:78:ab:10:08:6c:3e:0e:11:e8:
                    f1:82:0e:cc:1f:90:7d:e6:f3:e3:d3:9e:3e:6c:33:
                    98:34:eb:1a:8a:b7:6c:d3:f3:de:5f:39:45:0f:7e:
                    51:34:8f:d5:35:f1:66:4f:58:6b:51:55:3b:9b:30:
                    ba:99:a1:2e:39:08:c0:96:8a:09:fb:de:8b:16:7a:
                    2e:17:04:f9:b0:42:07:77:0e:9e:07:58:51:7c:e8:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3C:16:C9:4F:C8:46:8D:18:CF:15:D8:23:86:24:65:2D:4B:A3:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/08666148-34e2-3c46-b6fe-570b57b38ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.crl

            X509v3 Authority Key Identifier:
                keyid:4F:2E:32:6E:17:06:CB:FA:65:24:A3:90:A6:E2:CF:A9:3F:2B:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:78:a9:4c:1b:50:b0:4e:10:32:7d:69:ea:a4:a1:13:f8:
         d6:77:0f:e7:35:21:98:b7:3b:8e:2e:9b:9d:12:4d:3e:69:96:
         88:f6:e0:29:5f:d3:ff:cf:39:90:73:c4:07:37:28:c5:7f:2e:
         a7:38:4c:2f:4e:48:3e:e8:90:86:1b:89:75:34:fb:e6:5c:f0:
         ce:70:63:4d:fa:78:43:df:f4:11:1c:f8:0d:2d:40:ec:12:98:
         8d:d9:71:88:9a:f0:f0:1e:4d:47:7d:c9:ad:6c:f7:7c:1e:1c:
         38:3c:06:24:9d:54:22:e2:0b:cc:a2:42:c9:75:53:12:96:77:
         14:66:dc:0e:53:c8:de:b8:06:cd:9b:ef:52:5c:56:30:41:92:
         30:87:33:0e:78:ec:35:09:90:6d:b6:ee:92:50:bf:ff:7c:07:
         b4:da:c1:a5:88:cf:a7:9c:31:a9:cd:b8:6c:0b:9c:63:67:95:
         86:c3:73:9a:c2:54:c1:d7:07:ff:d5:2a:22:02:49:93:7c:2f:
         1b:29:94:d1:70:14:12:bb:f9:2d:aa:26:d2:22:8e:0a:92:52:
         e8:59:6f:42:f1:4c:97:d8:fa:c2:26:e9:04:6a:e0:b9:d4:2f:
         cc:c2:8d:7f:67:a7:e2:7b:2d:a2:70:0d:bb:ab:f1:fd:de:91:
         8d:a7:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:49:04 2026 by rpki-client