Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/9edf4050-3970-31bb-aad9-c77972de3f94.roa
File:                     9edf4050-3970-31bb-aad9-c77972de3f94.roa (raw, json)
Hash identifier:          2F98gcPHqUex2uVKN2hAl8qUHCzgkp4oeDrA36XGlIg=
Subject key identifier:   53:02:BE:2B:21:F2:72:DC:AD:25:73:EF:9F:7C:2F:C8:93:E1:C1:49
Certificate issuer:       /CN=8bd56a04-2ad4-4f34-b979-58f0a9509691
Certificate serial:       010D0C9F4328584D5024F5CEA5039B87B4C32580
Authority key identifier: A5:C9:1A:7B:FB:8D:F6:3B:61:1F:30:82:64:0C:51:7A:A3:B6:96:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/9edf4050-3970-31bb-aad9-c77972de3f94.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     15830
IP address blocks:        198.89.15.0/24 maxlen: 24
                          198.232.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f5:ce:a5:03:9b:87:b4:c3:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd56a04-2ad4-4f34-b979-58f0a9509691
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=0d6efcb1-1010-4730-a977-85cc2848f23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cb:e8:d4:07:b4:86:81:d6:c5:2b:90:c1:34:
                    91:97:c1:e2:34:83:ed:b1:86:ab:11:e4:15:21:16:
                    83:4e:ac:60:68:a7:4c:f4:5b:7b:53:06:ca:34:31:
                    82:b2:39:9c:b0:02:a5:d4:ab:12:5a:05:f2:4f:c0:
                    3f:af:d6:2e:0d:0f:72:2b:df:3a:dc:43:56:4e:48:
                    8d:b6:8e:98:07:04:ee:ac:cc:4a:3b:59:15:55:13:
                    22:1b:d9:92:d3:ed:a7:ac:a5:db:14:d7:1a:8f:af:
                    ba:ca:8d:4c:18:ef:4d:54:b2:ab:e5:94:67:36:a6:
                    1a:7d:cf:c0:72:3d:44:e7:6b:cb:ef:de:c5:72:23:
                    8d:57:69:17:6e:be:14:79:e2:0c:ae:2b:96:57:1e:
                    f5:fc:a9:e9:56:67:4d:54:42:82:71:10:de:ae:d4:
                    6c:c2:af:a5:64:86:24:0f:53:76:65:7d:da:8b:11:
                    6c:6e:62:74:70:43:d8:66:27:88:a4:c3:9a:0b:5f:
                    68:d1:1a:30:1b:04:40:f5:21:ae:4d:da:dc:bd:66:
                    50:ee:ba:15:28:5f:04:c9:86:ba:e0:f3:e9:40:61:
                    ff:62:f7:f1:08:d0:d5:4f:68:31:97:8d:4f:e6:f2:
                    1a:b1:7a:88:2c:a1:99:ab:86:00:10:06:2f:11:78:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:02:BE:2B:21:F2:72:DC:AD:25:73:EF:9F:7C:2F:C8:93:E1:C1:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/9edf4050-3970-31bb-aad9-c77972de3f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.crl

            X509v3 Authority Key Identifier:
                keyid:A5:C9:1A:7B:FB:8D:F6:3B:61:1F:30:82:64:0C:51:7A:A3:B6:96:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.15.0/24
                  198.232.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:fc:e6:a9:16:30:8f:dc:88:33:f9:15:8e:e2:eb:fe:56:
         3a:e7:47:45:e3:82:b9:c5:a8:4c:fd:c3:d5:eb:36:08:e0:21:
         44:91:fb:64:41:00:1d:98:37:f7:42:9d:1c:74:e1:0b:88:c2:
         e3:fc:78:6a:84:2d:bf:e5:65:6f:36:e4:f5:8b:36:6c:64:a0:
         a0:e1:ed:0f:b2:a4:dc:8c:52:a7:ea:ac:50:49:5e:52:e7:e0:
         f4:cc:0f:c0:93:39:66:03:58:aa:d4:21:45:c7:b8:f7:ea:0a:
         6f:81:d2:39:ae:a8:1e:d6:19:24:7c:e9:86:53:f0:36:81:b8:
         82:0b:02:2f:34:88:23:12:2e:3f:46:cc:90:2d:bd:0d:74:3f:
         6a:48:6d:bc:94:e3:54:94:5d:e0:8b:80:cf:a4:a3:6c:12:aa:
         e8:71:20:1f:9f:c8:82:32:74:dc:6a:b1:ed:49:04:27:94:37:
         c1:67:25:b3:cb:06:65:45:1d:04:19:d0:a8:a1:17:e5:43:1a:
         02:1f:f4:30:dc:80:4c:a4:9d:f4:dd:cf:12:5e:f9:c5:7f:f3:
         f9:da:60:a4:ad:9f:f7:a5:cb:20:e4:d1:4c:fd:e2:5c:af:ce:
         e4:af:b5:10:e5:7d:a8:da:7f:37:87:5d:23:22:1d:bd:e4:70:
         f0:39:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:15:39 2026 by rpki-client