Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/a99784f6-f7e4-3ea1-87fe-307072418b7b.roa
File:                     a99784f6-f7e4-3ea1-87fe-307072418b7b.roa (raw, json)
Hash identifier:          9klFGRBLla4S+XT1aMPvYbKSvTsBZv3nq72nS/EbOd8=
Subject key identifier:   B6:31:19:AA:0A:A9:78:9B:7D:74:A0:A5:E9:06:1F:C5:0F:C3:F8:BF
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F4328584EDC92133246D67FDD4CB39180
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/a99784f6-f7e4-3ea1-87fe-307072418b7b.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     397559
IP address blocks:        198.7.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:13:32:46:d6:7f:dd:4c:b3:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=2db9b26a-7850-47b2-9abf-e07d604c4273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:43:86:73:12:3f:5c:97:f4:ba:5a:4a:9e:
                    3b:78:f1:15:6e:bb:9b:8b:73:bf:93:ed:52:57:33:
                    74:47:09:23:17:5b:e3:3d:7d:33:94:fb:f4:c3:00:
                    2f:e5:f9:4e:95:3d:53:6d:a8:9c:88:fc:5d:b2:35:
                    ff:3f:62:52:9f:d3:7b:85:42:e8:cd:86:87:3e:9b:
                    77:c4:c8:ac:d0:04:b7:82:37:13:b7:1f:df:41:60:
                    62:4e:3f:5e:19:7e:d5:3d:88:32:e5:23:ba:83:df:
                    7a:5e:86:c2:b6:0f:38:6c:b1:2e:2a:bc:f8:9f:7d:
                    26:d2:8b:69:9a:35:ed:e9:1d:38:7e:38:60:a7:85:
                    59:be:74:7f:c2:a5:e7:29:ba:99:16:ab:85:0f:26:
                    2b:0c:85:62:52:2a:c9:f7:60:3e:0a:2f:af:dc:bb:
                    50:b7:7d:f0:9d:d2:5a:19:2f:04:60:1e:9f:d7:bc:
                    16:d1:69:69:df:07:b2:ab:54:3b:fe:a9:ce:ac:dd:
                    de:f4:b9:ae:4a:70:9f:8b:ea:d3:39:89:19:5a:70:
                    88:7d:b9:02:51:7c:b5:cc:b4:7c:4b:05:ca:7f:ee:
                    ad:82:8e:cb:b4:34:0e:71:f4:66:4e:e0:03:b5:22:
                    3f:4e:9b:1e:cf:fb:e7:e4:b5:06:f4:60:22:a6:d8:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:31:19:AA:0A:A9:78:9B:7D:74:A0:A5:E9:06:1F:C5:0F:C3:F8:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/a99784f6-f7e4-3ea1-87fe-307072418b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.7.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:20:ba:c1:81:81:23:9a:0b:44:63:71:96:90:b7:da:28:
         5a:8b:78:22:bf:ea:40:9b:89:83:14:93:ae:fe:cd:a3:85:19:
         6e:35:dd:a8:5d:fa:26:9f:5b:30:cd:fc:79:97:b5:7b:49:26:
         ae:74:84:8a:4e:29:1e:cb:d2:9d:21:3b:21:5e:59:6c:61:45:
         32:45:f4:c7:b4:85:06:2a:10:6d:33:eb:ce:ba:12:89:66:5a:
         e7:4d:35:50:96:b1:0d:6c:af:27:d8:81:e0:c2:1c:e4:a6:ee:
         c2:29:a4:88:f5:40:62:d0:ac:9d:bd:a0:a7:af:66:30:bd:90:
         ed:08:e0:e8:e7:ba:51:5b:70:b2:52:69:eb:cd:38:f0:2a:bd:
         16:2a:b0:f3:ba:12:1b:31:ef:fe:66:97:a3:f2:99:24:5f:be:
         54:ae:f1:eb:f8:84:97:85:7f:b3:01:5a:3c:ca:02:38:02:50:
         90:ce:89:93:e8:e8:8f:58:d6:55:fb:8f:77:87:5c:d3:15:bf:
         5d:d0:4b:85:13:b2:7e:99:55:87:23:7e:30:df:34:90:63:c3:
         2a:47:8f:ab:9e:fa:64:2c:fc:90:6f:63:40:7c:e6:55:47:e6:
         8d:4e:cc:de:f3:f6:84:25:21:e9:9a:59:8c:e7:02:6c:76:bb:
         68:cf:e1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:05:56 2026 by rpki-client