Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/22b7b3fe-71ad-36c7-8cba-6637294deaca.roa
File:                     22b7b3fe-71ad-36c7-8cba-6637294deaca.roa (raw, json)
Hash identifier:          Qx+dFnQyitq5wGqrlWwIuWbBfQ5L5M5WArVCuq7LS14=
Subject key identifier:   32:26:88:E4:E4:29:19:F1:25:DB:C3:03:E6:B0:55:B6:0C:42:92:F1
Certificate issuer:       /CN=1ff41215-3026-434d-963c-327afdcf5cbe
Certificate serial:       010D0C9F4328584F5FC7FEF191B185DD001A3880
Authority key identifier: AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/22b7b3fe-71ad-36c7-8cba-6637294deaca.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     31898
IP address blocks:        198.235.16.0/23 maxlen: 24
                          2607:d0c0:f00::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c7:fe:f1:91:b1:85:dd:00:1a:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff41215-3026-434d-963c-327afdcf5cbe
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=3f130382-917e-4d61-8017-1004495868c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:00:9e:1e:16:d7:c8:b7:a1:d9:cc:6f:f0:
                    91:49:42:87:01:32:6b:9a:af:e0:fd:6d:82:1c:f8:
                    f6:48:e0:7f:1c:19:c0:71:d9:ba:f2:1f:b7:db:3c:
                    03:81:50:e4:cb:c6:e1:13:b0:37:a5:02:64:57:28:
                    04:c4:40:ee:1c:9e:5b:e1:18:c0:59:96:a4:72:08:
                    84:c3:e9:53:b6:38:50:31:f5:87:d1:67:0a:8e:5f:
                    53:3a:29:21:9d:99:6a:a6:b4:03:f0:1f:06:38:71:
                    7c:0b:05:15:dd:d2:20:c7:ba:f9:88:52:e7:46:8e:
                    fa:30:bf:01:1e:af:20:6f:81:9f:4f:0e:4f:d0:df:
                    9a:06:51:b3:d8:f6:bd:14:e1:22:60:63:ba:37:c6:
                    85:e8:f6:e0:45:02:ba:2c:5a:b0:cc:71:be:3e:ba:
                    25:5a:42:3c:80:e0:e3:95:16:c6:51:44:13:49:78:
                    ac:46:0a:11:36:ca:4a:21:bb:4f:22:08:df:3e:92:
                    9b:3a:31:45:5f:c0:4e:68:7a:ac:50:8a:5d:13:04:
                    42:45:e6:24:c2:61:bf:db:6a:7b:8f:0b:b4:9a:26:
                    ae:ed:5c:db:43:d9:70:17:47:52:cc:83:7f:52:f0:
                    75:0b:5a:aa:f5:56:11:8c:91:6c:a2:dc:7e:64:f0:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:26:88:E4:E4:29:19:F1:25:DB:C3:03:E6:B0:55:B6:0C:42:92:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/22b7b3fe-71ad-36c7-8cba-6637294deaca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl

            X509v3 Authority Key Identifier:
                keyid:AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.16.0/23
                IPv6:
                  2607:d0c0:f00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:d2:30:c6:8d:9d:24:5f:86:70:2b:21:80:42:af:2a:69:
         ab:b9:1f:6f:89:88:02:56:ee:01:e6:d5:b6:6b:ad:12:1f:0f:
         7d:5f:cd:40:99:dc:83:86:e2:ea:a7:d7:4d:ff:8e:33:fd:b2:
         9d:1f:11:2c:78:f5:25:e4:47:08:5a:f3:32:20:37:dc:44:49:
         b5:e8:1a:34:ac:7f:48:c3:05:ad:2f:e3:20:a5:75:27:85:6f:
         01:4e:6c:fa:51:70:c6:d6:55:c2:69:44:19:ce:09:6e:9a:ed:
         d8:f9:9e:0e:e6:ff:f1:24:6c:e9:a2:4f:63:20:07:b1:d4:98:
         54:b0:98:23:f8:34:18:18:9d:f2:b1:06:61:44:a5:82:2e:1c:
         33:98:e2:8b:40:94:e2:3a:dd:a7:fa:f2:eb:64:29:a2:e9:9b:
         18:b8:1b:96:5c:64:21:0c:10:fe:ba:7c:ca:18:d4:c4:da:63:
         af:fd:10:f4:37:af:d5:67:17:d9:32:04:c3:f9:bb:ea:94:c8:
         01:72:0c:b7:bf:b1:3b:b8:ae:24:95:43:77:8c:17:ad:7d:c2:
         31:44:58:a1:7d:e5:89:9f:67:56:c6:5c:f0:78:b9:f1:08:17:
         5d:d7:e9:53:1b:d4:07:4a:da:4a:5f:5f:35:c2:dc:cc:84:9a:
         66:00:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 09:12:34 2026 by rpki-client