Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa
File:                     1f5af7b1-5fb3-301d-a898-32a052a6e971.roa (raw, json)
Hash identifier:          g9qCoBy9oVHpC3JawcSrKsf1zn8Vppe4OHVkMpjxI8o=
Subject key identifier:   58:4D:14:2C:5A:D3:10:E0:74:A2:26:AE:BC:9B:A6:2F:80:9E:2B:8D
Certificate issuer:       /CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4
Certificate serial:       010D0C9F4328584D2BDA1D0C512CDF6CA8960700
Authority key identifier: 61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     10631
IP address blocks:        131.96.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1d:0c:51:2c:df:6c:a8:96:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=4eb08ab3-78b2-44d3-9462-68c0d2f20721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:df:0c:b7:c9:69:cc:e9:39:fd:dd:4f:01:
                    76:b6:b3:74:b9:51:5b:b7:39:3a:2f:d4:71:29:d3:
                    ce:dd:b2:4e:40:93:3c:47:2b:26:51:20:7b:d2:4a:
                    32:6c:9b:b9:e8:e5:8c:fd:b4:59:0c:7d:92:88:a9:
                    a9:d0:e2:fd:29:34:35:5e:93:43:e2:9c:70:7c:e1:
                    ae:5d:0a:11:3e:e7:bd:c5:7a:af:ed:0a:7d:27:85:
                    30:2d:a8:2b:b7:e2:a4:c5:fa:71:82:05:65:55:d4:
                    9f:01:70:e2:7f:50:8d:09:e9:ad:b3:5a:06:89:5c:
                    ed:66:65:73:bc:e6:95:f8:30:4c:ca:6f:0b:cf:77:
                    fd:33:0b:2e:86:26:f5:72:e7:df:cf:54:dc:a9:39:
                    29:3d:6b:78:a5:71:3d:11:f2:f6:11:dc:59:51:c7:
                    9e:eb:1a:65:d3:8d:7b:78:d4:ea:f7:7b:15:98:c2:
                    eb:1e:45:b3:5f:0b:ae:9f:e3:2c:56:b9:8e:07:21:
                    73:87:7b:f9:7b:e0:7e:8a:c7:9a:fa:39:85:c8:01:
                    52:0a:93:4c:6c:e3:9a:2f:22:82:76:19:06:36:90:
                    57:e6:ad:c2:ba:79:46:09:49:cb:2c:c9:30:77:6d:
                    b5:17:fd:ee:49:4c:1a:b1:c9:b1:18:8c:0c:5e:be:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4D:14:2C:5A:D3:10:E0:74:A2:26:AE:BC:9B:A6:2F:80:9E:2B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6e:84:e5:13:ff:d8:85:a9:da:36:f3:03:35:19:1a:9b:67:
         08:31:41:46:68:c3:38:a0:b4:49:f2:7e:0d:40:4b:86:fe:55:
         72:4b:87:3b:31:dc:c8:d4:5f:24:ca:fd:2c:7d:70:d7:70:b3:
         70:b9:3f:3a:07:b5:e8:10:43:9c:14:0a:7b:69:5f:72:f0:ce:
         d3:f0:de:63:6d:96:e2:3c:cb:41:72:c6:95:e9:b7:28:af:57:
         bd:2a:65:44:35:79:a4:9b:c9:08:28:2d:7d:1f:f2:9d:da:69:
         d8:88:41:d6:cd:39:78:98:f0:69:7d:c5:07:a8:ac:f3:ba:be:
         51:93:07:38:ba:d6:8d:1b:58:64:61:fb:0c:f1:82:f8:3a:51:
         49:7a:ba:e6:0d:42:cf:f5:69:db:83:2c:bf:f0:ec:80:c1:75:
         9c:97:85:8b:bd:b8:ea:95:5e:d7:b4:f4:19:61:e0:09:ce:5d:
         c6:46:2b:8d:62:8a:cc:71:0d:eb:b5:74:1b:b8:9e:8d:c3:6c:
         86:7d:7a:b9:24:11:e3:3c:33:81:2f:ca:8d:98:a0:6b:df:d7:
         68:4f:c6:b8:a7:5f:0d:86:c6:2e:f6:94:17:6a:12:e2:1f:e6:
         7e:aa:7d:e5:65:33:42:67:b1:42:d6:31:1d:aa:e1:da:5a:5a:
         07:cd:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:37:03 2026 by rpki-client