Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa
File:                     c3a4120a-832f-3d49-9b46-e10f35565a99.roa (raw, json)
Hash identifier:          4CXwxJHM4PPMhTfkOakM94FUj37OKPF0NhwEzL8lBzU=
Subject key identifier:   E8:9F:E3:15:D8:3D:B8:20:E8:F6:83:8B:D2:0F:6D:C3:BF:C2:78:65
Certificate issuer:       /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial:       010D0C9F4328584EBDDC61D5EE6522B53D9E5D00
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        174.137.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:61:d5:ee:65:22:b5:3d:9e:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=9a89152f-0df4-43b8-8d00-ef9c858d3c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:17:e7:d0:92:97:44:82:ce:6b:41:c7:24:fe:
                    87:c7:26:62:71:52:d8:6e:be:39:02:7a:be:bf:c8:
                    70:79:d5:32:d3:11:ca:c1:c4:2e:80:64:d6:a3:d3:
                    77:49:f3:6b:ae:31:7c:42:c8:7a:fb:f9:da:48:9f:
                    5a:ca:c3:7b:2e:b0:80:86:13:6f:f4:2a:64:50:c1:
                    ff:67:0c:32:26:f6:36:ce:9b:17:80:42:e9:0c:da:
                    c7:26:fd:76:1a:24:5c:39:e4:ae:6d:5a:f4:eb:42:
                    1f:26:58:4d:a4:8e:7d:b3:a9:45:ff:16:85:26:b4:
                    b3:bc:f4:61:9c:7b:f9:56:cf:bb:df:1d:b1:11:7b:
                    29:ac:73:05:ae:38:f7:51:1b:49:1e:ab:44:4f:64:
                    7f:43:2b:bb:20:3a:71:db:18:9a:a9:b1:45:e6:fa:
                    b9:8f:31:40:18:c3:cb:37:88:78:bb:12:d3:f0:af:
                    a4:67:00:57:73:91:a4:35:4a:10:ba:45:a0:1b:e1:
                    3c:f9:42:cb:f4:65:84:80:02:db:c0:42:a8:7f:d1:
                    e4:c3:86:09:94:23:ea:57:81:f5:00:55:05:e4:af:
                    e1:4c:9d:a2:36:23:a9:20:08:e8:ec:44:34:4a:cb:
                    af:4d:6e:83:65:c5:35:20:1c:bc:4d:c7:84:24:6e:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:E3:15:D8:3D:B8:20:E8:F6:83:8B:D2:0F:6D:C3:BF:C2:78:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:37:02:08:2a:d9:16:de:60:5c:c2:1d:ea:2a:08:26:0e:63:
         7c:89:ad:64:08:90:49:06:93:e4:4a:09:df:f6:e0:64:ad:4f:
         19:ad:73:e7:24:d9:92:7d:62:a2:6e:d2:6c:87:68:47:4f:dc:
         a0:6b:cc:96:52:96:d4:c5:d1:49:89:13:c7:c1:f2:a5:86:0f:
         9d:c6:f7:7f:b0:b3:bc:60:21:0c:07:88:f2:2c:ca:de:fa:d9:
         5a:ad:4f:57:a7:71:a1:bf:d2:0c:1a:12:90:79:51:ed:1b:db:
         f3:0e:07:57:f5:d9:b7:e5:cd:ea:f1:01:8c:7e:6c:f3:88:66:
         24:48:89:ad:d4:c4:f3:0d:48:4c:5d:b3:b9:2c:64:d9:49:85:
         d9:8c:59:53:b4:47:31:12:05:ce:5d:d8:6d:8d:ba:58:05:c6:
         86:ce:66:a6:04:e2:bd:51:c9:7a:1e:00:48:ef:f1:49:f7:29:
         63:b1:38:57:e6:a0:34:90:51:76:4c:6f:6d:72:92:ea:f0:d0:
         ff:bf:5c:d3:51:b2:ee:4d:15:15:a1:d5:76:97:e1:f3:21:c7:
         db:76:23:9f:3c:43:ee:77:04:de:f4:6d:3e:4f:65:c7:e3:82:
         1d:5e:4c:76:c4:fa:95:cb:f6:93:6f:c9:71:51:39:3e:5b:3e:
         9d:90:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:02:14 2026 by rpki-client