Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa
File:                     5b047369-1853-3c0b-830c-d67137c9c298.roa (raw, json)
Hash identifier:          I+ecHGleQkHtjXi+b+zLLb3v+zFqh9ibdEiR3OqPsEw=
Subject key identifier:   3A:7F:B6:FB:D6:A9:61:F2:EA:30:FE:CA:AB:C5:A9:79:AB:6E:3F:1C
Certificate issuer:       /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Certificate serial:       010D0C9F4328584F43DD55CC007646EE1D134D00
Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     59
IP address blocks:        198.51.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:55:cc:00:76:46:ee:1d:13:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=aa938ced-a306-415b-a37d-d96d19de4996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:87:72:c5:36:36:8c:e3:36:18:29:ac:88:
                    34:35:fc:2b:74:c1:39:53:56:69:c6:18:ad:5f:76:
                    f3:61:ef:25:10:49:a9:18:1a:16:11:b9:80:8b:68:
                    f2:28:15:0c:59:01:d0:eb:de:42:fa:ce:37:45:5f:
                    96:7f:71:08:73:ac:7a:3c:65:9f:67:ad:73:05:cb:
                    d0:90:ac:80:4d:db:a8:2d:80:60:84:af:8f:43:18:
                    b1:22:e3:ec:9f:59:6d:aa:ae:89:ba:3d:bb:9d:69:
                    d9:48:4e:4a:f9:16:b0:86:91:4b:e3:eb:79:c9:ae:
                    c9:6e:10:6b:c6:d6:be:0d:cc:25:61:85:b0:e5:2f:
                    20:b6:4d:3c:4e:4b:f5:99:94:e1:72:f8:8a:1f:da:
                    96:1a:40:43:5a:8c:c5:fe:91:35:e0:12:6f:30:5b:
                    1d:33:91:9d:2f:88:8e:e6:55:60:50:a8:00:ec:9c:
                    2c:35:4a:c9:ed:37:3a:33:f9:4a:fc:f6:1a:8f:47:
                    fe:96:55:7f:64:dd:c7:01:71:1c:5d:d5:39:10:d8:
                    42:a5:05:5a:b1:31:2e:6a:d5:e5:6e:81:97:92:e1:
                    48:e3:e2:1b:6b:14:b6:88:a2:73:33:ea:6a:ba:2c:
                    93:f1:1f:3d:bb:bf:0e:d2:ba:d5:aa:d0:54:9b:d8:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:B6:FB:D6:A9:61:F2:EA:30:FE:CA:AB:C5:A9:79:AB:6E:3F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:22:56:2f:24:a8:8d:79:fb:19:ac:da:26:e1:08:db:ca:b1:
         61:ce:29:36:e9:7a:5c:f8:c7:73:78:31:67:be:61:6a:51:13:
         ac:94:aa:38:85:eb:77:eb:e5:38:ed:0f:2a:7b:3d:51:cc:2b:
         d1:a4:a7:ef:c6:71:49:3d:82:d3:81:d8:9b:ba:6b:b5:fc:c1:
         64:eb:eb:10:37:0c:89:2b:ae:f1:c0:49:7b:20:6a:3d:49:c3:
         a7:39:eb:a6:0e:81:88:33:9f:6d:4f:87:d9:e3:d1:ec:7d:d0:
         ef:89:ab:52:25:ce:0a:77:43:9c:02:20:4e:ad:9a:1e:46:fa:
         e6:b5:01:2f:c5:57:89:fb:76:20:89:12:a6:17:29:9e:22:a8:
         5d:ec:e1:a7:41:c3:7e:7f:75:93:70:10:9f:7f:d3:db:c6:dc:
         f3:7c:65:75:32:f3:e3:6d:cc:a5:07:16:42:a6:52:21:4b:b4:
         1a:ca:a5:3a:e8:55:08:16:73:88:cb:59:66:5f:ba:f3:bc:a6:
         fe:5b:09:3e:d5:b0:17:40:69:3c:08:9d:75:fe:90:aa:11:91:
         9a:cd:8d:1e:b2:e5:22:d1:b8:67:be:60:87:cf:7e:3a:27:e8:
         39:a3:7a:c9:35:04:64:4c:2a:7d:e3:dd:d8:1e:ee:82:f5:7e:
         5f:87:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:47:24 2026 by rpki-client