Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/61ea2067-4f32-3ebc-850a-3f2f0badd118.roa
File:                     61ea2067-4f32-3ebc-850a-3f2f0badd118.roa (raw, json)
Hash identifier:          HdOl9xzGAqJoirlqKgeTgyS/GilPKyJLp+v3dlccyvE=
Subject key identifier:   85:97:DF:22:62:EC:17:74:7D:0A:F8:D3:A6:B6:50:A9:37:EC:4B:05
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584F71EDA204A65C5E918154C940
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/61ea2067-4f32-3ebc-850a-3f2f0badd118.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     10317
IP address blocks:        198.245.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a2:04:a6:5c:5e:91:81:54:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=6cc5fc2e-6e06-4107-9401-c83b900c8bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:81:4b:bd:53:f3:a3:f4:7e:98:cc:17:f3:08:
                    e2:3d:de:a3:69:16:09:22:11:10:de:cb:11:0c:cf:
                    52:7b:31:e6:fd:95:b4:82:6d:74:14:00:16:76:8a:
                    6d:96:f6:e0:f5:42:4d:43:83:4e:e3:ad:07:14:bc:
                    db:c3:90:99:0b:52:0b:70:b6:f9:3d:56:2c:15:0e:
                    5a:7d:65:f0:e4:74:cc:a9:f0:4c:63:4f:3a:33:ef:
                    fb:25:58:a4:a4:d2:07:ef:57:b0:0b:9c:1d:0d:60:
                    40:51:c6:97:88:2d:fd:30:24:7d:71:48:b1:4d:69:
                    9d:c1:aa:2f:b3:5f:87:db:06:82:c2:39:7a:eb:86:
                    27:d7:46:a7:84:5e:db:35:16:3e:2a:10:35:6e:44:
                    7b:1e:26:97:86:cf:fe:ae:ca:35:01:17:ef:44:56:
                    43:89:ce:02:af:4b:1b:1d:a2:5a:25:f6:54:7a:9f:
                    a1:aa:1b:73:97:3f:1c:45:95:52:e8:62:1b:28:98:
                    e2:e9:c9:18:7a:9b:87:52:be:78:bc:48:c5:04:90:
                    93:ae:62:5f:52:d8:59:8c:31:ce:3f:b3:e5:02:97:
                    30:34:3f:94:d5:ed:2f:00:aa:ce:ab:b0:a1:21:e7:
                    c6:59:bc:8f:bd:51:ab:95:98:67:89:56:97:f7:ae:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:97:DF:22:62:EC:17:74:7D:0A:F8:D3:A6:B6:50:A9:37:EC:4B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/61ea2067-4f32-3ebc-850a-3f2f0badd118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:86:18:c2:04:f3:d7:2a:3c:df:8a:69:7c:cc:d9:f8:49:
         8e:e9:4f:71:d6:e6:d0:b9:e8:fa:1c:34:4b:78:a8:12:73:99:
         11:ec:51:27:70:d7:5e:57:24:8a:ff:90:92:d8:42:2f:24:8c:
         61:df:f7:90:16:80:54:d3:30:dc:c9:6b:18:18:eb:59:d2:e5:
         8c:22:a6:f3:f1:83:27:14:34:36:f3:ae:75:d8:24:2d:ea:8e:
         66:d7:23:02:bb:4c:5f:ff:d2:eb:2a:17:9f:4f:27:8c:15:5a:
         ed:8e:54:e0:04:50:3a:fa:c2:4a:8d:81:d6:cd:33:6c:fd:d9:
         0b:1a:b4:f0:8b:d2:6b:35:f2:07:14:00:4e:36:67:04:d4:58:
         97:d8:be:db:b9:9a:15:12:c0:c8:3d:2e:4b:5e:c8:be:1b:81:
         9f:3b:c9:dd:1e:66:76:40:3f:4f:08:57:b1:04:87:9d:dd:9b:
         0f:97:f7:c3:e4:ec:de:d1:06:f0:54:bd:bb:dd:ba:53:8d:47:
         90:22:12:96:68:b9:22:d2:0a:68:27:63:18:26:c2:8b:69:9c:
         69:83:32:13:cc:80:86:28:df:44:2a:ee:52:cb:62:3e:ce:57:
         d7:80:53:6c:50:41:47:4c:ac:c0:cd:d2:3f:d5:94:e3:34:2a:
         36:98:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:38:39 2026 by rpki-client