Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a571f54-a72b-30e7-ad50-5f33af214f15.roa
File:                     9a571f54-a72b-30e7-ad50-5f33af214f15.roa (raw, json)
Hash identifier:          nm0fapodHzYqDDKmPHHclheWLxOIk6nBMOl8l+2mOIg=
Subject key identifier:   B5:52:1C:01:60:D7:A5:BC:93:08:8C:74:CD:CF:2E:84:D0:80:6B:BB
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF2350C55ECFD6172762F500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a571f54-a72b-30e7-ad50-5f33af214f15.roa
Signing time:             Fri 31 Jul 2026 18:26:08 +0000
ROA not before:           Fri 31 Jul 2026 18:26:08 +0000
ROA not after:            Thu 29 Oct 2026 18:26:08 +0000
asID:                     81
IP address blocks:        198.86.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:50:c5:5e:cf:d6:17:27:62:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:08 2026 GMT
            Not After : Oct 29 18:26:08 2026 GMT
        Subject: CN=1ea052b5-9a1d-4765-b744-83051a9f381e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:d7:8a:c5:02:a5:0e:ef:83:7c:ee:e0:57:
                    0d:8b:a4:38:eb:73:f0:fb:0e:d1:5d:68:d1:95:f2:
                    58:91:02:04:c6:c0:ca:dc:68:9e:59:1d:54:fe:d1:
                    3a:c2:57:ed:a7:67:b4:21:b2:81:e5:11:11:69:3e:
                    ea:b7:fc:70:7d:00:11:6c:ef:1f:3a:0b:4b:ce:b8:
                    40:4d:05:1c:82:e7:1b:63:08:e2:46:c0:f2:90:f0:
                    9d:0a:9b:14:bc:83:37:4a:4c:3d:18:21:6b:2e:71:
                    49:3e:5f:e9:71:fb:07:73:4b:5d:bc:57:1e:3b:4c:
                    87:b5:e3:b6:99:5e:c5:db:64:ab:2b:60:c4:56:c4:
                    e3:80:39:f5:28:e6:33:8e:99:fa:95:10:2d:ae:61:
                    cc:35:d6:03:c3:9d:99:49:5d:74:00:48:84:ea:36:
                    fe:0d:76:24:04:9a:19:cd:e5:8c:3e:cd:e1:7c:66:
                    bc:00:3a:6d:45:c6:43:25:ea:7c:1c:f6:19:87:2e:
                    58:3b:9b:01:d6:48:e9:78:94:34:53:b9:f5:b7:13:
                    86:d5:43:2a:45:4c:32:ee:7c:05:00:67:4e:90:86:
                    2a:70:f9:18:33:8f:fa:c7:0f:0a:d3:21:9c:ba:98:
                    24:2a:50:f0:bf:8f:ac:b0:71:db:7f:33:bd:e8:7c:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:1C:01:60:D7:A5:BC:93:08:8C:74:CD:CF:2E:84:D0:80:6B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a571f54-a72b-30e7-ad50-5f33af214f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:15:9c:9e:e0:a2:f5:a2:b7:81:56:ba:3e:31:b4:3b:5a:f5:
         e8:58:9c:25:f1:ea:15:68:45:a1:74:52:fd:f7:88:2e:a0:80:
         d3:30:b0:64:38:fa:fb:d9:f4:72:ab:45:81:9f:74:6f:fe:49:
         93:ef:63:17:58:05:d3:e0:cf:f9:f9:f1:a7:26:a9:70:da:ce:
         d1:fc:df:9c:d7:3a:cb:ba:fe:e8:68:c5:a4:d2:91:ed:2e:62:
         58:88:d1:6e:bc:52:a5:00:e2:cf:bf:6d:19:06:68:4e:77:09:
         5e:d0:db:4e:79:f4:54:6b:7c:0a:39:ce:e4:3c:d7:b3:ca:f2:
         ac:6a:4f:fb:8f:e9:0c:dc:79:29:95:0f:51:6f:f3:c9:16:d5:
         5f:0f:0a:33:52:fe:ea:e4:1d:7b:57:13:24:fc:cc:f6:ae:d3:
         71:20:74:54:21:97:5f:52:f2:3d:ba:df:4d:76:24:96:93:83:
         2e:7a:92:3a:e9:58:30:75:bc:cf:47:78:01:2a:f2:3f:46:9e:
         0e:0c:ba:58:a0:98:ba:03:7f:67:8c:ac:11:b7:d8:78:1d:b3:
         fa:49:bb:a5:d4:f1:1c:97:aa:96:6c:43:32:af:a2:21:9d:c0:
         8c:f4:20:ed:de:d5:6e:2e:8e:38:91:0e:22:78:a6:d7:28:03:
         64:5e:dd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:01:34 2026 by rpki-client