Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9920688e-8a8c-36fc-be24-2118e4f43f68.roa
File:                     9920688e-8a8c-36fc-be24-2118e4f43f68.roa (raw, json)
Hash identifier:          oVMYjpLaJz913feooA1i8ksdh6fHunrkE5J9d9H91i8=
Subject key identifier:   E7:18:11:57:20:91:87:7F:DE:6F:DF:F6:94:4A:A0:21:EC:08:9A:FE
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F4328584F225D04E35CB8624161F77980
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9920688e-8a8c-36fc-be24-2118e4f43f68.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     11588
IP address blocks:        198.145.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:04:e3:5c:b8:62:41:61:f7:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=0d3392f9-b67c-4bc2-abbd-90c3b5ca704a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:73:b9:93:e0:b7:68:49:c3:1d:dd:45:26:
                    f3:ec:69:12:ba:e2:10:82:aa:15:0e:43:1d:b5:b9:
                    b1:4c:4d:3a:fc:65:8b:65:e6:50:40:09:0e:4d:b0:
                    b7:f3:de:bb:26:17:46:7f:53:76:fe:ae:ad:9c:5d:
                    2d:0f:18:5c:8a:4f:a7:20:d6:b6:3b:34:4b:c5:fc:
                    0f:a0:33:2f:cc:f6:b9:c4:40:f8:a0:09:31:98:ad:
                    31:2a:f7:4b:cf:f2:27:22:bd:7b:d2:b9:c6:30:a6:
                    29:64:43:36:86:72:e6:18:c2:08:f8:36:98:9a:b6:
                    98:2a:e5:1a:5f:c7:65:9f:12:1f:93:e3:f7:11:1c:
                    ad:16:2d:2e:7a:14:d8:97:ee:36:72:35:75:f0:4b:
                    ff:69:63:0d:17:7d:3c:c7:a1:29:ac:e3:63:05:3c:
                    e7:a9:4d:4a:d7:f5:4b:e7:97:c6:0b:10:ce:4f:2f:
                    d2:a1:09:05:e6:4e:88:e0:e1:37:84:40:25:69:d2:
                    11:33:ce:d5:3d:9c:7f:0d:7c:81:51:bd:2c:c6:88:
                    8a:db:f1:9a:e2:55:62:fe:d8:4c:5d:ec:b7:17:34:
                    99:32:72:a5:48:3d:a8:48:6c:0d:92:07:04:26:a4:
                    b5:be:4e:b8:aa:42:a2:e3:b5:90:c0:0b:1e:32:1d:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:18:11:57:20:91:87:7F:DE:6F:DF:F6:94:4A:A0:21:EC:08:9A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9920688e-8a8c-36fc-be24-2118e4f43f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d5:0a:b4:83:4a:d0:31:1b:14:20:43:75:58:5e:f0:21:cd:
         df:44:0e:e6:63:43:7f:4d:f4:c4:b4:32:34:a9:29:ca:f1:0b:
         b0:43:7d:f2:d1:ff:f8:21:8e:fd:a3:fb:30:ed:15:e6:49:69:
         60:2a:ad:c4:57:8b:f9:13:01:a4:0f:66:6a:aa:cb:40:7e:c5:
         c0:db:12:d6:bd:15:e9:ac:b8:00:2c:15:dd:49:f0:45:66:d2:
         d9:b5:8a:7d:1f:46:63:ad:1d:ba:be:1f:d2:99:ff:f4:0f:69:
         ce:a9:7c:7a:23:cf:ed:b9:49:fc:12:a4:17:00:33:04:68:de:
         4e:cc:41:bd:45:4e:a4:f1:d2:22:16:0e:3d:69:d3:ca:ce:55:
         85:17:ad:b2:0c:9f:fa:fb:69:29:ce:43:10:b0:d5:61:45:71:
         34:03:c5:ec:19:ef:91:bd:0d:b5:3e:69:17:eb:4d:eb:75:c6:
         7d:e0:40:73:33:2a:d6:51:a6:c6:0d:5b:79:e7:27:4b:4e:07:
         cf:88:ba:31:9e:14:08:69:22:07:3b:3f:31:19:4a:29:94:17:
         b9:6f:20:48:f7:7f:63:df:d1:47:f6:31:8a:23:4f:db:44:8e:
         f9:40:d6:8d:d4:3b:72:4f:46:e5:34:d5:f7:20:bb:b6:44:5d:
         09:91:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:34:52 2026 by rpki-client