Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa
File:                     79f9299b-0362-3137-aef0-5e220b4411a3.roa (raw, json)
Hash identifier:          isBcOsqxbuUveJGgfMeEZIifVvYzRiNxTMXb7pf/KRU=
Subject key identifier:   C8:61:2B:43:1C:DD:CC:1A:81:E9:59:18:0A:51:66:FB:34:18:2E:FC
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584F1467983887697D274767F900
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     205659
IP address blocks:        172.98.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:98:38:87:69:7d:27:47:67:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=8248af19-4cdb-4406-bfb0-aeb1db5e1e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6e:9a:71:a6:c9:c3:3a:31:11:05:ce:ef:3a:
                    7e:61:bf:b1:49:08:09:de:fb:41:0f:44:4d:b6:5a:
                    81:72:fc:81:8a:ea:63:2f:12:a1:cf:7d:50:37:df:
                    cd:8c:ba:48:88:81:62:8c:7e:12:45:c5:c9:66:a0:
                    2e:36:89:95:6c:47:66:b8:a6:fb:2a:93:66:68:56:
                    5d:32:58:3b:ae:9f:ee:a8:eb:df:3a:33:8b:6d:e0:
                    14:c6:47:d8:d6:50:fb:3b:ff:d8:17:40:0a:84:38:
                    cf:b2:30:f9:d1:c2:42:f5:07:fc:88:2c:5d:49:04:
                    55:ed:81:54:93:eb:a1:12:ed:11:b5:36:5c:fc:77:
                    54:49:8a:99:7c:d9:91:b0:fe:ca:d4:52:51:09:30:
                    26:7a:47:f8:ea:40:a3:88:ce:78:a2:01:de:81:fc:
                    db:91:15:1a:6a:77:65:a2:18:65:83:f2:cb:fc:1d:
                    7a:48:74:6c:a2:bf:d5:7d:d6:07:ee:83:f7:3a:00:
                    b1:fc:68:a3:64:67:ed:18:b0:5f:b9:0d:6c:b6:a4:
                    c8:f8:04:86:fc:59:e0:a5:35:e6:f2:a9:d5:17:3c:
                    31:ae:43:be:59:cf:f8:57:15:3f:75:b7:41:97:8e:
                    93:a5:57:2c:0b:c9:de:54:cb:54:26:68:4c:d8:05:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:2B:43:1C:DD:CC:1A:81:E9:59:18:0A:51:66:FB:34:18:2E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:45:e7:b5:ce:b7:f2:a7:ce:44:07:2c:59:2e:18:7f:7b:29:
         d4:4d:de:79:a4:48:c4:47:44:e6:d8:81:da:01:25:fa:92:a6:
         de:ec:f5:a4:c1:85:b0:87:36:a8:92:ec:f3:b1:8f:10:fb:64:
         32:43:23:ec:69:cb:c0:a6:9b:d1:52:78:98:c7:4e:9f:bd:82:
         14:f5:f2:02:e7:58:dc:f9:ed:3b:13:0d:ba:8a:41:74:aa:63:
         1b:81:12:bc:0e:2e:4f:a5:22:a4:04:3f:9c:76:44:67:01:90:
         15:4f:17:cd:3b:a3:07:37:ec:40:f6:d6:f8:09:2f:df:c3:f5:
         9c:31:1b:38:de:85:5d:99:b0:f0:3a:18:dd:d6:7b:96:c1:9c:
         b4:77:e9:a3:ce:eb:6a:35:1a:f2:20:82:19:f1:1e:86:f4:93:
         3c:fb:5c:a8:67:50:3d:96:7c:c7:41:ca:d5:2c:5e:31:03:8a:
         f4:f2:f8:aa:6f:53:bd:44:79:81:cb:9e:b1:29:96:bb:e4:27:
         51:5a:1b:d9:14:2f:67:6e:33:50:8e:db:64:3e:fd:22:b5:0a:
         89:81:53:e3:22:f2:6e:be:7e:6b:de:e1:ef:e5:a5:8e:2d:34:
         95:37:22:1b:bb:2f:ab:50:5f:ff:6f:c2:27:fb:85:e2:91:58:
         b3:ca:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:48:12 2026 by rpki-client