Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7f3025c8-ac1e-3f1d-bfa6-d623963696f6.roa
File:                     7f3025c8-ac1e-3f1d-bfa6-d623963696f6.roa (raw, json)
Hash identifier:          DbYjQFHdYpb7VjcHeTmPEq0tX8mfWkhEkCqUQVuGK9k=
Subject key identifier:   B2:0E:66:50:76:ED:55:68:E1:88:5C:A8:78:56:40:57:5C:2B:31:C8
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584F49731CEA7A829969E1F925F0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7f3025c8-ac1e-3f1d-bfa6-d623963696f6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2559
IP address blocks:        198.241.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:1c:ea:7a:82:99:69:e1:f9:25:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9f460e93-c416-4201-8db0-16723b8435fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:b1:cb:8d:31:7b:32:6c:83:49:10:5c:96:
                    2b:d1:b6:e8:90:93:1e:9b:a6:d9:1b:9e:24:d5:be:
                    8b:3e:be:7f:f5:3a:20:98:9e:c1:d9:9a:64:42:b1:
                    a4:9a:d4:dc:a1:67:00:20:5b:b0:7a:66:e9:ff:43:
                    a5:27:9a:a3:4c:57:45:7c:55:c8:99:79:7e:e5:5b:
                    96:72:10:a3:64:0e:00:fb:f7:af:d4:4e:72:79:f8:
                    f1:cc:fc:c5:eb:f7:1d:50:a0:5b:97:32:eb:48:a2:
                    dc:47:f3:41:c3:a6:40:18:41:f7:da:50:94:3e:2b:
                    5e:7c:4e:51:ac:51:cc:37:a1:a2:be:01:c1:6a:ed:
                    78:bc:93:81:1e:4c:eb:72:bf:61:e7:f7:6c:f6:a1:
                    ee:bd:aa:83:c2:02:64:05:ad:9c:55:24:1c:86:e2:
                    80:f2:af:4a:9d:54:c7:7a:02:06:cc:19:9a:58:43:
                    42:91:55:e8:da:c4:5b:b0:79:67:15:76:0e:32:2d:
                    a1:de:11:92:3a:ba:93:04:3b:79:97:2f:74:45:7a:
                    79:b5:a4:dc:7e:4e:23:df:c2:99:4c:f4:0f:8b:d2:
                    d1:01:eb:0a:56:a3:11:23:57:c6:00:23:a7:71:39:
                    73:b0:9e:7c:eb:67:dc:6d:98:2c:51:3b:10:2c:89:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:66:50:76:ED:55:68:E1:88:5C:A8:78:56:40:57:5C:2B:31:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7f3025c8-ac1e-3f1d-bfa6-d623963696f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:a5:2d:da:bf:1a:84:38:d9:5b:72:ab:8c:20:96:e7:c9:
         38:72:5d:31:b5:e6:b1:e7:d0:98:68:d4:24:92:9c:28:f8:19:
         88:76:c9:3c:a8:48:5c:5d:07:bb:34:8d:2d:9e:9b:56:01:5a:
         bd:ab:d0:8c:fe:88:39:d7:76:f8:c0:cc:3f:1a:dc:62:12:92:
         69:4d:66:7d:83:98:f3:67:68:b9:37:bb:8c:27:50:b5:5e:05:
         ac:bb:0d:35:9e:6d:78:bf:6c:ae:20:7d:7f:49:28:f6:d2:90:
         bb:f6:30:48:a8:95:d2:fa:e0:20:50:70:bb:a4:29:93:f5:47:
         8e:2a:35:5b:b2:c7:e5:74:ab:f8:8f:1c:d0:e9:ef:7c:09:1b:
         64:ac:ec:ff:91:2f:8c:b9:54:49:c4:88:a5:5e:c4:01:8e:b8:
         e1:6b:a1:04:52:f7:7e:04:aa:32:d3:7a:17:3f:40:77:3d:5c:
         8c:04:8c:0f:45:1d:5d:22:ba:10:ed:11:32:bd:a8:0f:b4:ce:
         0d:3c:92:c6:ba:84:98:42:3c:5b:a9:a5:45:41:7b:a2:1d:fc:
         1f:98:93:88:9f:93:80:03:4b:cc:8a:42:28:17:69:97:5c:45:
         7b:bb:a6:b8:a3:3b:7b:b1:fe:0e:62:5a:82:7f:97:bb:e4:c7:
         a5:de:55:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:53:30 2026 by rpki-client