Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
File:                     0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa (raw, json)
Hash identifier:          I6Y5fWgWMeH5m68m0jt6Uk9rz9hAT6koKlguqI8PHFE=
Subject key identifier:   6D:EB:3F:67:B0:AA:07:66:49:63:61:2D:39:EB:92:4E:5D:37:B2:24
Certificate issuer:       /CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Certificate serial:       010D0C9F4328584F94D34AD1E712799A470B9D00
Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     393906
IP address blocks:        198.153.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:4a:d1:e7:12:79:9a:47:0b:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=be004723-fa75-4c3e-85e3-fd051e1252d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:fc:ba:24:aa:94:2e:5e:aa:09:06:92:da:
                    0a:00:18:af:2f:4f:f4:04:af:85:89:2c:b4:ab:d1:
                    20:dc:bd:4b:7a:f1:aa:2b:92:c9:15:da:87:bd:b1:
                    c0:24:94:17:a5:0d:91:a3:4f:89:bc:bd:d7:c5:8b:
                    83:14:70:31:75:50:f0:0f:ae:9d:b5:89:6b:30:ba:
                    02:51:15:b3:1a:eb:a6:1f:8b:a2:36:ac:5f:c1:78:
                    ea:49:7a:b0:99:b1:f3:58:33:2f:45:c4:b5:f7:d1:
                    d3:8a:6d:6d:58:15:d3:31:32:b6:14:0f:63:9d:25:
                    0c:26:8d:49:35:4e:cd:36:f2:ac:5a:27:4f:0b:19:
                    e2:40:ea:65:f9:31:9d:d0:56:95:d1:10:0c:ba:fc:
                    c8:17:81:3e:8c:39:17:be:05:cd:44:fd:8d:d5:0e:
                    e7:0e:e3:43:65:72:2a:3c:01:42:96:60:af:5e:48:
                    86:a8:ce:cf:85:33:2e:e4:6a:0f:dc:f4:50:98:5e:
                    47:96:b7:1b:4f:4d:0d:cb:58:4b:10:05:af:40:23:
                    76:ae:51:01:b8:a9:1b:2e:97:e4:0a:f2:ac:7d:36:
                    17:53:b5:9b:bc:3c:a9:4a:19:40:10:dd:de:da:72:
                    86:33:65:6a:ea:d2:47:9c:18:cd:f3:03:67:44:b8:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EB:3F:67:B0:AA:07:66:49:63:61:2D:39:EB:92:4E:5D:37:B2:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.153.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:1d:ab:6d:15:19:98:68:6a:5e:51:8f:6e:5b:53:80:2e:
         ab:4c:d0:0d:a0:d0:7c:df:0f:e9:c5:94:0b:4f:9c:d7:91:d9:
         ad:84:27:9f:62:72:9d:ae:12:96:4e:9b:68:89:d2:9b:30:88:
         ff:b1:c0:3f:6e:af:e4:34:9e:e4:04:f2:d7:7d:89:49:5b:e8:
         3d:f3:fc:12:72:d4:8c:9f:bc:25:9b:dc:fd:c9:d0:fa:70:f2:
         97:5a:b1:a8:d5:70:b6:f1:e5:f7:cf:be:9e:4a:a3:5b:f0:69:
         1b:c5:11:22:a6:f1:f5:34:aa:44:5e:a5:ac:8b:36:90:04:2c:
         79:62:51:d0:ff:dc:f9:ce:12:ed:59:4c:57:25:ae:a8:00:4c:
         dc:77:89:1a:d0:d3:98:1d:1d:17:88:b6:f4:ec:6f:97:c1:6f:
         de:50:be:8c:78:a9:58:86:87:6d:99:77:97:6e:0b:44:98:57:
         29:99:59:f5:dd:2b:a9:4e:e0:ba:c1:4f:a0:72:cc:07:7c:6b:
         18:c4:23:b0:cc:38:d5:99:8d:db:03:75:d0:ac:97:00:96:d7:
         32:35:25:ee:35:5a:8a:13:e0:fb:2d:5c:4f:8c:3e:eb:5f:6d:
         b2:02:23:38:f3:3d:61:08:e5:79:ee:0d:dd:99:f4:ac:22:f5:
         8a:30:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 14:40:40 2026 by rpki-client