Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/98d5d8c2-c69d-38c6-b0c4-05dbdfb27eb8.roa
File:                     98d5d8c2-c69d-38c6-b0c4-05dbdfb27eb8.roa (raw, json)
Hash identifier:          e/ajwTk8IAxUBWL9p3zchx3nKPibOId0LMWqjzJGCtM=
Subject key identifier:   7C:5C:4E:79:F8:C9:0E:CB:9E:D0:5C:81:41:DD:71:0C:3B:B4:38:9E
Certificate issuer:       /CN=721773b3-ff70-4a20-99dc-aaba81c23ebf
Certificate serial:       010D0C9F4328584F6292CBA151062D0DA027B180
Authority key identifier: 86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/98d5d8c2-c69d-38c6-b0c4-05dbdfb27eb8.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     40519
IP address blocks:        149.112.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:cb:a1:51:06:2d:0d:a0:27:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721773b3-ff70-4a20-99dc-aaba81c23ebf
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=70930f8c-a065-4fa7-987b-30a1bff65ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:49:c1:1d:e1:39:bc:71:97:b1:90:f0:a0:
                    79:a7:6e:8e:30:84:67:47:5e:d7:9e:6c:bd:50:a5:
                    3b:7c:f3:c5:06:ed:18:fc:d5:72:cd:38:69:02:1e:
                    df:ae:9a:05:c0:1a:11:ad:61:f1:91:44:64:00:bc:
                    81:29:d7:79:9f:ac:d8:1e:0e:c6:1a:61:ee:69:27:
                    42:dc:ca:e2:85:60:47:54:a9:0a:01:37:b2:51:d7:
                    9b:90:c6:b1:d3:05:ec:96:fb:50:26:ea:dc:f5:46:
                    4c:67:59:ad:66:26:71:5c:69:de:29:50:6d:be:9c:
                    90:b2:12:20:d2:43:6f:e9:91:5a:18:7f:4f:3c:ae:
                    69:96:e7:82:4b:24:95:05:39:7a:a1:97:1e:f0:db:
                    7d:74:90:75:d1:00:a8:24:dd:2a:84:61:1c:bb:12:
                    d2:13:8e:5f:b4:de:c9:3f:30:92:e1:a6:b8:6c:2d:
                    07:89:76:99:e7:4e:28:b1:aa:27:3e:1d:82:84:f8:
                    f5:69:da:56:2a:e8:03:f7:09:9e:0c:1b:08:db:42:
                    99:0a:7e:25:3f:dd:1e:71:f9:0f:3d:0f:eb:85:7e:
                    1a:c5:ff:73:3c:6d:30:10:fc:66:79:c2:d7:ce:5d:
                    66:b3:6f:91:3a:98:cb:4f:a4:96:61:f8:65:de:41:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5C:4E:79:F8:C9:0E:CB:9E:D0:5C:81:41:DD:71:0C:3B:B4:38:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/98d5d8c2-c69d-38c6-b0c4-05dbdfb27eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.crl

            X509v3 Authority Key Identifier:
                keyid:86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:44:f4:e2:b1:95:6d:48:f8:0b:e6:d0:26:26:65:0b:11:
         28:1a:57:e5:d7:c1:e9:00:57:5f:09:a3:e4:ff:bb:b7:00:9c:
         05:0b:9f:eb:cd:83:32:e8:52:34:06:2d:df:24:49:52:9f:0d:
         5a:be:23:73:0b:39:c7:49:54:2d:74:f6:b1:53:a7:4a:8a:1e:
         74:c7:af:19:09:a1:c6:0d:98:91:e4:7a:b4:d6:da:00:65:be:
         08:1f:d5:5b:63:bb:f0:9a:bb:bb:bb:af:1d:14:da:22:65:43:
         e1:74:b1:d4:9a:fc:69:da:46:2a:0f:17:24:37:62:4d:99:9b:
         f0:56:64:2a:5f:2e:de:10:d6:79:13:b1:1e:b8:86:51:99:66:
         a8:06:c5:25:2c:d2:ab:9c:c1:87:4b:0b:85:d5:90:e7:8d:9f:
         ca:a4:a5:9b:0f:bc:9f:af:14:b2:f3:ca:a2:de:c8:3a:ad:11:
         30:42:3b:f8:10:47:1b:85:12:fd:2e:d8:61:92:60:6f:09:90:
         b2:89:53:4f:64:04:87:8e:cc:3a:28:77:99:4f:e5:8f:b4:bc:
         fd:9b:41:b0:c5:31:7f:1d:9a:92:49:04:6f:f1:a7:40:98:58:
         94:d0:07:7d:d9:38:c6:ff:b4:a1:36:e1:53:ba:b1:36:8e:e0:
         e1:d3:70:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:29:04 2026 by rpki-client