Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a9980e-b741-3831-83e0-2fa1f1481867.roa
File:                     f7a9980e-b741-3831-83e0-2fa1f1481867.roa (raw, json)
Hash identifier:          8o5ZC6R7gehDP22sLu+23jCpbC7dvaWROf2V7DmtfuQ=
Subject key identifier:   26:5D:91:94:15:91:B4:72:3D:EF:40:37:B7:BD:7E:1B:10:9D:E7:EF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ECD3736B2F428C013FFC51180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a9980e-b741-3831-83e0-2fa1f1481867.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     269194
IP address blocks:        198.242.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:36:b2:f4:28:c0:13:ff:c5:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=9826d90c-f41b-4e28-b997-e6b71848c1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:5a:fe:ce:6f:3f:f8:89:93:e8:93:ab:24:
                    20:3a:b2:ea:2c:21:96:9b:f2:c1:15:9b:80:22:cd:
                    ae:5f:8f:c2:0a:48:12:a5:1b:d4:12:f4:87:89:9b:
                    ef:6b:56:6f:54:7c:81:8c:2c:95:77:35:8f:38:d9:
                    23:49:47:44:0a:5f:51:38:81:d2:e7:c5:d7:c5:35:
                    ba:4d:ca:50:0a:14:9a:13:1d:88:17:4a:3d:81:59:
                    93:ab:8d:8f:af:59:4b:b3:05:92:de:c7:0e:02:f3:
                    93:1b:e1:2c:36:91:d6:cb:87:16:9b:a9:d7:c1:0c:
                    a1:5e:91:30:e0:a8:85:a6:73:ba:15:15:e6:b8:d3:
                    82:71:93:d6:90:5f:42:f3:b6:c0:80:ef:8b:11:68:
                    a5:96:bd:3b:f5:01:02:ab:83:ae:3d:94:80:92:11:
                    de:b8:d3:97:0b:bf:b2:34:a9:e9:a2:58:a2:82:be:
                    81:12:64:5f:88:fc:0c:68:dd:a2:93:bf:93:29:9e:
                    eb:65:e8:84:4d:b7:bd:69:32:16:70:73:1b:b8:21:
                    aa:3c:31:9d:18:cd:d6:9e:50:55:d8:db:d3:08:b8:
                    bd:5f:8f:b9:78:e5:d7:84:ab:b5:8b:2c:0f:56:62:
                    63:6c:0d:7e:11:33:54:72:10:69:22:5b:4d:4a:5f:
                    4a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5D:91:94:15:91:B4:72:3D:EF:40:37:B7:BD:7E:1B:10:9D:E7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a9980e-b741-3831-83e0-2fa1f1481867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.242.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:72:91:10:ae:ba:ce:50:f3:f3:06:2b:72:e6:3d:79:cd:
         bc:e2:f4:ac:d3:c8:fa:a4:19:69:bb:26:9e:70:d0:ee:85:2e:
         2b:bf:dc:ce:8c:73:f0:ed:87:c2:52:a8:70:7b:28:ad:1a:82:
         ab:ab:9a:bd:66:52:6d:53:77:e9:3a:7d:1f:41:f2:17:1f:1a:
         fd:b6:86:d0:29:3d:71:f6:4a:db:6f:cd:4e:96:d3:4d:c6:14:
         a2:c6:b5:03:31:09:ef:22:08:65:3c:ce:06:3d:85:6e:c3:12:
         67:78:93:dc:fa:15:5e:ac:1a:fe:b3:0c:f4:01:40:16:f1:fc:
         40:59:e5:5d:32:8e:fa:ac:f1:f3:e9:e1:1e:1b:6e:01:2c:35:
         75:bb:7c:19:8a:98:bd:ad:4b:d5:8f:41:13:d1:38:69:bc:32:
         1f:4e:be:61:34:b0:00:ff:04:07:98:ac:1a:69:76:e3:db:ea:
         ef:50:73:70:3f:4b:7c:b2:b8:3f:12:a8:98:16:3b:5d:8c:71:
         1b:2d:86:92:6d:ee:f4:8c:40:7a:39:7e:53:cf:c7:9c:a6:bd:
         bd:41:b9:0a:ba:9b:49:73:eb:ee:2b:44:02:fe:fd:33:99:5b:
         53:25:1e:c9:81:63:96:8f:51:31:40:eb:80:79:62:8d:de:e4:
         ca:91:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:52:11 2026 by rpki-client