Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1034457c-db53-3d98-8538-76536f27c62e.roa
File:                     1034457c-db53-3d98-8538-76536f27c62e.roa (raw, json)
Hash identifier:          wklkWqTOF87IY9IZQlkF+3zehxvoPFlKX78NO52N4+M=
Subject key identifier:   28:D8:40:4C:90:06:FB:85:11:22:41:59:5F:61:05:7B:23:25:55:37
Certificate issuer:       /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
Certificate serial:       010D0C9F4328584EABB6F303B49E55E815B0A4F0
Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1034457c-db53-3d98-8538-76536f27c62e.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     26077
IP address blocks:        192.104.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:f3:03:b4:9e:55:e8:15:b0:a4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=a80ca691-ced6-4c53-8f8c-148a802dec6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:07:3f:4c:0d:d3:e3:6f:4c:9e:27:aa:da:
                    6f:eb:9c:cb:20:13:15:f9:6c:bc:5b:f1:fb:10:29:
                    49:f4:fa:1a:58:98:d0:c0:10:97:b2:8d:43:ae:96:
                    31:1f:6d:51:34:82:2d:ea:2a:8c:0c:3b:52:0b:d2:
                    8e:b2:57:7b:e9:42:1d:f8:06:93:4b:11:2f:5c:16:
                    ec:2d:52:db:b8:08:e8:d0:93:50:25:7c:df:c8:e6:
                    06:90:5d:87:ea:3f:29:a0:d4:4f:c1:27:8a:9d:50:
                    23:00:47:82:cd:12:44:d4:79:e3:39:50:2e:5b:00:
                    e1:ae:33:2a:fc:c8:7c:89:d0:9c:50:fb:4c:0a:59:
                    81:75:62:62:d2:18:d9:17:58:71:91:a9:f4:f5:15:
                    bf:9b:80:9b:d0:59:58:f9:4e:12:ac:32:a0:8c:33:
                    7f:3d:ba:ee:ae:c1:65:11:c2:b2:b0:28:63:40:53:
                    35:76:f6:07:c5:b5:f5:c1:5f:03:79:aa:03:b5:f1:
                    2f:d3:43:79:02:30:19:72:40:b7:12:a9:9a:cb:ae:
                    46:d5:c3:21:07:5a:83:44:d8:c9:cf:bc:c2:aa:db:
                    a0:21:e6:40:84:81:48:a9:2e:60:20:83:ff:d2:07:
                    9a:5c:72:5a:c1:d6:20:2d:e3:98:b0:54:76:ba:5f:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D8:40:4C:90:06:FB:85:11:22:41:59:5F:61:05:7B:23:25:55:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1034457c-db53-3d98-8538-76536f27c62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:93:bc:ea:5d:46:3c:7d:32:19:4f:f0:9e:1c:e9:19:b3:3c:
         ea:98:61:7c:5c:fc:8c:1a:ce:69:72:9f:80:1e:ce:97:ca:d8:
         cd:d1:c9:7e:0c:e9:99:ff:d3:4f:13:7b:c3:dc:45:30:81:66:
         6a:81:0d:a9:08:5d:e1:4a:b9:74:2f:30:e8:f4:f9:a8:26:ea:
         93:2f:52:ee:47:6f:49:c8:ac:84:52:6e:24:41:43:17:26:e1:
         0c:8f:c3:f3:ea:25:61:f3:8d:36:31:a0:f0:d3:4a:6b:68:c3:
         7e:cc:85:46:03:45:98:2c:2f:82:ee:b8:7a:2c:20:9f:83:d1:
         c0:0b:98:18:07:e2:69:1d:4c:c6:d8:30:9c:1b:1a:19:c9:66:
         8e:6a:0c:a2:9f:94:40:f6:5b:a9:f0:07:98:6d:30:45:df:f0:
         68:c8:9f:76:d8:3b:43:94:fc:97:a3:1b:a9:42:05:d5:94:e3:
         f5:fc:41:0f:8b:40:e6:78:68:4d:d8:74:f8:8e:a5:ef:f6:c8:
         e1:b6:a8:5a:11:42:6a:19:f6:82:4a:37:11:5c:0c:14:67:f5:
         ae:e9:48:58:89:2f:c0:bd:27:58:7e:86:35:70:0b:60:ee:11:
         eb:a5:e8:53:07:ae:40:1a:93:4b:64:c5:3e:54:fe:5d:2c:bc:
         ad:0d:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:36:56 2026 by rpki-client