Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/37edd5c0-1647-326a-99d3-568a55977180.roa
File:                     37edd5c0-1647-326a-99d3-568a55977180.roa (raw, json)
Hash identifier:          Uj3wQ4UGSIwx4EJAmg1ZkYOKUXaCoqk/PJa6jAjTFLc=
Subject key identifier:   01:71:5E:BC:E2:18:4C:9B:99:94:EC:E6:64:8A:10:D1:A6:86:2D:94
Certificate issuer:       /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial:       010D0C9F4328584F480D4074C7C41F9787747200
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/37edd5c0-1647-326a-99d3-568a55977180.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        198.145.124.0/24 maxlen: 24
                          198.145.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:40:74:c7:c4:1f:97:87:74:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=e53f34f5-a023-4e95-8ece-5b0daa314347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:3e:5e:9c:24:55:04:6e:fb:2d:89:72:60:
                    d3:08:36:9b:81:59:74:b4:3a:13:8f:ca:18:72:38:
                    3a:bd:d2:5e:02:1c:d6:51:9f:9f:89:ad:49:72:27:
                    80:50:d6:e5:88:ac:f0:83:23:4e:37:89:eb:21:84:
                    e2:0b:6a:3c:4a:50:55:43:17:7e:5b:25:52:31:cb:
                    6b:84:7b:ae:46:fd:97:31:cc:9e:e0:a9:55:40:6b:
                    3c:c3:12:3a:d9:3f:6c:d9:7a:70:d6:ca:f1:8f:de:
                    14:c4:dc:b1:9f:57:80:7e:d1:91:92:3d:df:25:1d:
                    8b:7e:3f:05:e6:6d:37:cc:33:c3:1f:bb:8c:61:2a:
                    90:63:94:fc:3c:d0:c0:ac:eb:9e:54:d9:f9:b8:9d:
                    ba:4f:76:62:0f:0a:c1:ae:d2:e3:d7:e2:12:0f:01:
                    31:0b:bd:a1:b0:a6:c4:96:a5:ff:15:25:89:ad:41:
                    d8:e5:4f:53:52:41:54:52:30:ee:db:22:2a:d0:fb:
                    5c:46:b9:f4:b2:db:db:33:22:c2:69:3b:b2:67:96:
                    6c:e9:5c:ae:e8:90:16:a1:22:17:10:1d:e1:52:35:
                    78:cd:e0:39:34:23:a0:8f:c4:4e:c6:bf:41:76:8e:
                    9e:83:8a:b3:b5:6a:d2:c2:aa:8b:10:6a:75:6c:a4:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:71:5E:BC:E2:18:4C:9B:99:94:EC:E6:64:8A:10:D1:A6:86:2D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/37edd5c0-1647-326a-99d3-568a55977180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl

            X509v3 Authority Key Identifier:
                keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:65:03:f3:b0:7e:0e:d4:43:c8:c7:8c:90:33:2d:88:72:de:
         5c:e5:ff:f9:0f:1c:d0:7a:a4:f5:8b:94:a1:2d:f6:46:14:48:
         a8:85:6c:b5:71:cc:0f:69:56:fd:d5:53:3d:df:ef:9a:30:64:
         e6:a4:da:85:0f:b2:b9:a5:ed:97:8a:91:00:be:aa:63:58:63:
         a0:3f:d8:8d:e4:5b:3b:ab:1f:28:f9:4f:26:fb:12:06:47:b2:
         99:9a:28:2e:db:b7:6e:56:33:4f:26:cb:06:cd:ef:5c:75:ac:
         20:65:16:25:57:e1:be:b0:06:6a:9e:d7:f6:95:b0:0d:91:21:
         0a:f5:f3:de:c5:97:56:d1:0f:13:41:d6:e0:f8:b7:1e:68:e0:
         07:8e:3d:48:d2:a4:ef:29:91:f7:4d:1e:a6:0a:01:5c:2e:c2:
         37:03:2d:53:5e:f7:d6:54:1c:e7:fe:53:be:b7:40:68:e1:e9:
         0a:71:ca:09:ca:90:ce:af:2c:6e:dc:75:a4:07:94:a6:1a:3a:
         a2:44:b9:97:fa:ea:56:33:39:9c:4c:db:2f:0b:9a:eb:73:6d:
         77:ac:92:1d:22:ed:1d:60:71:07:55:39:12:82:30:ae:ad:9b:
         9d:50:05:63:24:ee:75:4b:eb:a3:c2:1c:9c:75:ad:af:b1:5c:
         76:b1:b1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 03:04:41 2026 by rpki-client