Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
File:                     e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json)
Hash identifier:          i5okm+5MK6Vk33jtR49Jy2ku8sIT85XSKocLjK+1+0w=
Subject key identifier:   4E:8D:5F:F6:8F:49:93:08:1B:16:C8:E3:8D:DF:BA:71:F5:1C:51:56
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584F8F3DC61411FE61932568C040
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     394437
IP address blocks:        198.35.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:c6:14:11:fe:61:93:25:68:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=417b83a6-525f-4380-9c50-e146e8426c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:79:10:a1:65:e6:9a:bb:23:54:de:0c:59:
                    47:0f:61:09:0e:36:bc:ec:36:f0:f3:46:7a:45:b2:
                    c2:e5:22:37:68:a5:8b:ae:a5:dc:fb:d6:1b:00:73:
                    b7:f6:20:d4:9a:dd:41:ae:fa:c1:0e:3d:b5:82:c8:
                    bf:1a:bc:97:61:0e:3c:4f:e8:7e:6b:73:53:94:63:
                    76:14:16:26:8b:a9:13:c9:c7:c3:42:d8:cd:fb:dc:
                    7c:b0:29:9a:a9:fe:52:52:3f:6d:56:c6:8d:e8:12:
                    9d:24:c1:bf:68:96:e3:d0:e7:66:54:89:32:2e:9b:
                    e8:86:8a:3f:db:44:1e:f9:ec:d4:e5:5d:87:f1:00:
                    df:e5:3e:51:37:06:4e:2e:31:00:0e:84:59:e2:2f:
                    ed:68:de:df:0e:b0:2a:79:ac:5b:86:d5:7a:26:49:
                    5b:ad:37:ea:74:70:2e:96:9e:82:26:0d:80:38:26:
                    1c:87:6e:be:e3:1f:8f:77:27:16:70:45:42:b3:be:
                    cf:bc:21:42:be:72:58:fe:c3:49:2c:58:de:c1:09:
                    15:d3:3d:39:e7:25:d7:55:4c:be:0e:3b:7d:fe:f2:
                    cf:9e:7d:88:a7:9e:e8:76:c7:65:89:1a:31:0d:74:
                    38:4a:70:c2:5b:67:2d:83:6e:d3:be:f2:d0:17:27:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8D:5F:F6:8F:49:93:08:1B:16:C8:E3:8D:DF:BA:71:F5:1C:51:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:88:41:80:53:b8:1c:78:6c:b3:77:2d:f9:38:b2:49:c0:ea:
         14:31:9b:4d:69:fa:4a:92:57:18:25:68:64:d6:44:ba:16:37:
         13:f5:fd:3f:b3:fb:12:67:8c:71:97:84:1b:07:df:8b:b0:68:
         ab:51:ec:b8:3c:91:39:ed:99:8a:a8:f1:3a:6e:49:8f:55:79:
         7a:ae:14:c2:1c:12:a8:4f:5f:9e:4f:2d:18:6b:c5:66:9c:6c:
         48:13:63:68:92:3d:15:46:81:a2:8d:b5:9d:e1:2f:89:fc:00:
         7a:eb:2a:b4:9a:62:82:04:fb:f8:45:84:ec:aa:4b:c8:16:18:
         ea:c4:35:a6:d1:94:98:a8:22:92:a4:20:a1:37:03:cb:0c:12:
         06:22:f8:5a:b6:7e:db:d8:0e:e5:9d:ef:e5:19:3e:96:ac:db:
         02:76:d3:14:82:b7:b2:80:ed:12:af:35:f8:e8:21:a5:a9:c9:
         31:1c:3e:54:b3:ef:d6:70:82:02:84:2a:65:64:df:35:79:f1:
         20:99:0c:18:b9:26:49:fd:a6:28:c3:bc:1d:28:03:18:15:1c:
         d4:6b:46:4c:94:36:d6:69:a8:84:db:fc:1d:20:a2:46:21:1b:
         28:b4:aa:55:10:89:1b:1c:37:a4:48:be:29:cb:46:0a:9d:64:
         69:5f:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:53:37 2026 by rpki-client