Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ab92787f-ed30-399a-938c-32801e7007a5.roa
File:                     ab92787f-ed30-399a-938c-32801e7007a5.roa (raw, json)
Hash identifier:          YtMcK4G7e9Pq7182X/Xy758VbXpnR7FndjHmCqfdnLU=
Subject key identifier:   D3:09:32:EF:E2:DE:3C:5D:4B:59:9B:81:3F:C5:41:B3:33:9F:42:56
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584F0ED2346EE5F490BA47047280
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ab92787f-ed30-399a-938c-32801e7007a5.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     3136
IP address blocks:        198.150.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:34:6e:e5:f4:90:ba:47:04:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=73edadca-03c0-4743-8f07-8ec248dd5d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:ad:f6:11:d0:f6:0b:1b:18:06:5a:e5:c6:
                    37:51:53:ca:cc:b4:92:96:21:de:49:8e:cf:6e:b0:
                    c3:c8:53:04:2e:9f:2f:40:c7:c1:31:90:fd:4f:93:
                    bb:ef:5f:58:22:b3:57:05:96:30:99:cf:e2:60:a6:
                    cb:1f:1a:f1:a1:7b:85:a4:4c:19:21:ce:9d:77:e1:
                    e7:76:48:dd:1e:3b:4c:9d:13:75:d8:21:37:e1:30:
                    e3:b7:ee:a9:fd:fd:6c:f5:e9:ea:d2:d5:74:e7:b6:
                    f6:74:ea:95:8a:91:c8:25:e1:60:01:46:a0:90:5b:
                    42:2b:0c:f0:16:85:2e:5e:3f:dd:a0:10:da:47:3e:
                    fd:34:8e:6f:23:70:71:5b:b1:46:b6:bf:d2:2d:a5:
                    f5:ac:80:04:bc:41:27:40:5e:db:cf:3c:43:8e:4e:
                    8c:33:18:c3:22:f2:1d:e0:76:7e:bd:31:77:a2:0f:
                    d6:fd:fc:ec:26:d5:6c:d4:25:c0:e3:93:90:af:c9:
                    2a:32:92:4e:d9:0f:83:5d:75:91:5d:ff:01:ff:76:
                    12:82:41:3b:42:e7:82:58:0e:54:91:f2:f0:9c:ad:
                    42:2e:c3:75:af:27:c0:97:66:a2:2c:b0:1c:7b:dd:
                    0e:c2:c6:b3:38:26:00:7f:90:3a:ac:39:05:b0:9f:
                    7c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:09:32:EF:E2:DE:3C:5D:4B:59:9B:81:3F:C5:41:B3:33:9F:42:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ab92787f-ed30-399a-938c-32801e7007a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:15:73:e5:fe:30:41:aa:a8:a4:fe:8e:60:f7:ce:a3:3b:
         c9:8c:ad:a6:88:22:e9:8b:e5:37:4a:a2:82:91:39:33:bc:ab:
         5d:ee:86:f8:9e:fa:e7:6d:b6:78:f2:c6:31:1e:db:cb:2a:72:
         bf:00:db:82:23:cd:3c:44:44:0f:66:d3:8d:a1:ae:de:4b:aa:
         93:ca:c1:41:48:03:ef:14:44:62:e3:88:12:4a:71:de:95:13:
         3c:5d:94:e5:fa:ce:42:44:47:4a:48:70:c9:05:d7:ff:cc:48:
         e3:cd:32:01:6a:8b:b9:b6:72:66:77:46:7b:05:2b:70:28:e9:
         be:0c:d6:23:d2:24:3f:df:60:b9:5c:53:5c:5a:41:60:d7:4c:
         38:94:a9:4c:69:be:71:5b:a8:06:10:dd:a6:ff:56:a1:a8:e0:
         36:a6:36:44:12:d7:e9:a4:95:22:59:59:43:44:e9:c4:70:cb:
         f5:d8:57:db:58:4e:9e:2a:75:c7:81:ce:b8:b6:34:c1:49:9b:
         83:a2:a8:5f:b1:e1:de:63:4a:1b:5d:1d:17:cb:59:ec:90:47:
         c3:13:be:77:10:86:a6:62:2a:19:e8:b5:63:91:d1:8d:f0:87:
         af:8f:79:85:42:3e:8c:68:89:5a:e1:e8:fe:3a:18:10:66:57:
         9e:fa:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:33:57 2026 by rpki-client