Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa
File:                     4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa (raw, json)
Hash identifier:          iQyTm5t5fQlrb5LHD9z+oN01vRikDZtRd2abkzBBr44=
Subject key identifier:   A4:96:27:61:DD:31:DC:5B:21:AF:F4:CF:C0:D5:E3:5C:2B:E9:39:A5
Certificate issuer:       /CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca
Certificate serial:       010D0C9F4328584EF1820906E573B53176B8EA4C
Authority key identifier: 33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     30001
IP address blocks:        208.64.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:09:06:e5:73:b5:31:76:b8:ea:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=d750263a-948d-4005-81e8-8f43da5a077b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:97:52:b0:0c:2f:1b:9c:b3:29:7f:7d:73:
                    10:af:85:03:66:2f:3e:07:1e:70:2f:8b:5d:53:ac:
                    11:d4:13:f9:49:6a:df:7a:2e:69:fa:6e:42:5c:fe:
                    76:91:2b:c2:6f:fe:16:bd:71:5b:73:79:5e:96:0c:
                    1e:43:1a:bc:f0:f3:94:8f:a6:9a:24:ea:24:85:2e:
                    72:aa:d1:0f:33:a9:12:8d:bc:51:6a:8d:6e:0e:b3:
                    e6:7b:be:9e:b5:a7:34:ff:c8:62:54:de:a8:a6:58:
                    df:58:75:47:72:47:15:2a:6f:48:33:61:b6:d2:fc:
                    22:fe:8a:24:3b:ab:59:0a:5c:3e:35:76:88:b1:41:
                    3e:38:06:44:c5:59:43:bf:06:9f:56:c2:65:30:86:
                    f4:30:44:96:5b:05:15:04:1e:28:83:85:80:9b:e3:
                    69:8a:32:d0:2c:1f:35:92:b5:94:4d:d5:7e:2d:2e:
                    ec:25:6d:bd:fd:0a:10:53:75:e4:4b:9d:0e:b8:f3:
                    4e:9b:d9:93:23:cb:38:d4:2f:46:63:67:b6:18:9c:
                    03:83:af:79:c1:0b:c7:75:5e:de:ec:3e:48:a1:86:
                    4d:fa:be:47:b9:12:5f:13:ec:66:86:3d:60:18:b2:
                    82:fc:25:51:b7:de:45:f8:98:a9:33:86:2c:59:5b:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:96:27:61:DD:31:DC:5B:21:AF:F4:CF:C0:D5:E3:5C:2B:E9:39:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.crl

            X509v3 Authority Key Identifier:
                keyid:33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:31:14:b8:79:f8:51:51:a9:f9:49:a1:c0:72:7b:32:22:01:
         d3:ba:0e:4f:05:ed:de:d2:d4:35:86:67:9c:0f:09:ce:dd:d4:
         f3:ab:18:0e:d3:47:c0:14:4d:0d:b8:80:45:96:be:f4:29:69:
         95:59:56:98:51:c9:3a:e9:13:67:3b:5e:61:94:5a:97:3c:16:
         b6:2c:08:a7:af:ba:80:22:8a:75:36:fd:60:40:d0:b6:40:aa:
         c6:c6:4e:fe:dc:f1:b0:56:cf:d7:b9:20:56:30:f2:6b:f1:76:
         e3:70:aa:60:f9:ae:6c:15:39:78:20:ee:ef:82:85:59:d6:d8:
         93:e9:e0:6a:be:10:60:c5:5c:05:3f:1e:43:26:13:55:69:b8:
         88:0f:44:6d:c2:f3:1b:e7:45:02:7e:0b:09:07:63:3e:10:b7:
         48:01:c5:17:e2:a2:3d:15:69:18:03:dd:da:23:b7:07:7e:f6:
         99:c9:22:93:d9:57:08:0f:47:be:99:12:d9:8e:32:1e:f4:88:
         c4:dc:3f:57:ee:aa:70:83:80:ce:11:88:d4:54:7f:1b:df:4b:
         95:ae:be:58:86:e2:ee:14:09:89:78:ad:fd:d8:1e:1c:f7:6f:
         07:25:6e:a4:69:de:74:8f:7f:1b:35:ca:2b:0b:46:31:cd:8c:
         df:5c:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:05:35 2026 by rpki-client