Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/4343828f-8ebf-3c8e-83c0-44e2c404eacc.roa
File:                     4343828f-8ebf-3c8e-83c0-44e2c404eacc.roa (raw, json)
Hash identifier:          D3o4TSu3gHvJgqDZ4FeyVADszPi71pvltUj6pWDYoyo=
Subject key identifier:   CA:D5:C6:B4:C6:E3:D4:B1:27:57:05:4D:02:77:CE:8B:DE:F0:D4:12
Certificate issuer:       /CN=b2f7cbf5-2e73-4320-80b9-696eb7d503fb
Certificate serial:       010D0C9F4328584F6C5850AB9E79E082B5E20980
Authority key identifier: CC:96:57:FD:15:57:42:F5:03:3B:58:B1:FD:9A:9D:E6:92:01:FE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/4343828f-8ebf-3c8e-83c0-44e2c404eacc.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     8075
IP address blocks:        198.99.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:50:ab:9e:79:e0:82:b5:e2:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f7cbf5-2e73-4320-80b9-696eb7d503fb
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=91f82248-991d-4a80-bf5d-a4c3b093cdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:cc:8b:2a:fa:69:0c:c1:1f:ce:6c:3d:fe:
                    74:35:fe:e7:7d:c2:a1:8d:57:53:3f:94:48:f4:14:
                    22:b1:23:63:0e:e9:0b:b9:6a:37:b6:ba:16:a9:74:
                    17:fa:00:4e:03:dc:2d:d5:ce:d3:52:c4:98:12:a5:
                    36:cd:b9:1b:ee:11:e5:6e:de:23:5b:fc:59:0c:46:
                    b5:01:21:30:28:fb:cf:e4:99:3e:70:2b:93:7c:bc:
                    83:ec:7b:e6:13:39:70:21:19:7e:ed:2d:59:ee:2e:
                    31:74:2f:02:ef:bf:ee:90:90:4f:23:06:27:6b:b9:
                    f4:bd:8f:a1:a8:9b:8c:3b:a8:56:6c:4b:bd:e8:0d:
                    39:1c:f4:ae:4f:f7:e5:ff:71:e6:20:0c:7b:2f:57:
                    ac:cf:09:dd:16:ea:a8:20:4d:3c:44:d5:e3:02:93:
                    55:aa:06:db:81:1a:ad:89:0d:f1:66:57:6e:6f:c9:
                    ff:96:73:7c:b2:bf:f0:4c:5a:79:a0:82:82:4f:86:
                    e1:3c:40:a2:23:02:67:ca:b3:7a:63:06:9a:e0:c2:
                    75:30:21:e8:0b:a1:7c:68:41:ae:9a:55:47:1b:da:
                    4c:53:59:c5:69:22:1f:d8:2c:18:b5:9f:29:1b:b6:
                    24:09:8c:8f:2e:c0:d2:dc:1f:21:af:41:0e:af:0b:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:C6:B4:C6:E3:D4:B1:27:57:05:4D:02:77:CE:8B:DE:F0:D4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/4343828f-8ebf-3c8e-83c0-44e2c404eacc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.crl

            X509v3 Authority Key Identifier:
                keyid:CC:96:57:FD:15:57:42:F5:03:3B:58:B1:FD:9A:9D:E6:92:01:FE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:71:b9:ff:c5:88:27:f8:fd:63:ab:08:3c:2a:54:72:fd:
         74:cd:11:56:75:16:4d:38:0b:84:b6:a7:d0:92:1a:8e:ab:74:
         5e:8b:c3:fb:f2:e3:6a:01:4b:dd:13:07:6f:22:0c:47:a7:2f:
         92:02:80:28:fa:cd:e9:68:94:b4:11:c5:6c:b7:e0:5e:a4:6f:
         55:64:f0:92:ff:cf:cb:69:d0:ce:9a:18:6b:56:9b:7d:0a:e0:
         67:31:20:86:44:68:4b:cc:6a:ea:7f:31:f7:8a:a8:73:90:b3:
         52:79:3d:c9:1f:db:a3:72:5e:75:0c:6d:e3:57:85:ee:ae:64:
         0e:68:9b:7a:a8:5a:7c:9e:8e:f8:b3:a3:21:22:f0:4c:c7:9e:
         2b:e2:b5:81:ca:71:1e:fa:11:cc:e0:84:f4:c4:52:0a:c5:04:
         73:a9:e4:97:63:c6:93:df:29:b5:e6:ed:7e:dd:d3:c0:b9:09:
         27:e7:2b:8c:6a:a0:4a:d1:8e:52:3c:4d:54:30:95:6a:4b:91:
         78:7b:6d:e0:aa:c8:68:62:eb:cd:d4:9c:2f:f2:ee:dc:bc:58:
         d0:6d:08:c3:aa:de:fa:89:fc:e2:10:2f:49:10:b9:8c:a6:bd:
         ed:23:07:0d:48:a6:24:eb:b1:06:d8:3a:ae:ca:7b:63:74:e9:
         5e:85:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:50:01 2026 by rpki-client