Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e00cab30-7063-3483-b958-18a8d3695a5f.roa
File:                     e00cab30-7063-3483-b958-18a8d3695a5f.roa (raw, json)
Hash identifier:          KWMh4v7boJJufDuXmIm5EADR47v2McPW6VkX/MK29rs=
Subject key identifier:   06:5E:BC:47:31:13:EE:E8:09:E4:7D:88:1D:1C:A9:48:A5:91:27:5F
Certificate issuer:       /CN=998a132f-4994-4d96-a767-25e4ce264bc4
Certificate serial:       010D0C9F4328584ED2CC7E20381A91513A797AC0
Authority key identifier: 58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e00cab30-7063-3483-b958-18a8d3695a5f.roa
Signing time:             Thu 13 Aug 2026 13:00:12 +0000
ROA not before:           Thu 13 Aug 2026 13:00:12 +0000
ROA not after:            Wed 11 Nov 2026 14:00:12 +0000
asID:                     19520
IP address blocks:        198.169.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:cc:7e:20:38:1a:91:51:3a:79:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998a132f-4994-4d96-a767-25e4ce264bc4
        Validity
            Not Before: Aug 13 13:00:12 2026 GMT
            Not After : Nov 11 14:00:12 2026 GMT
        Subject: CN=6559de00-d669-458d-a558-1ea91150e40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:e5:a4:3b:63:be:be:9a:95:e8:ee:20:21:
                    e0:13:32:6e:06:22:90:1c:25:b1:82:af:12:70:95:
                    d4:1a:08:08:b0:cc:b4:a7:83:bb:cd:dd:0b:2d:36:
                    dc:5b:03:52:f4:11:79:85:5e:b8:7f:73:63:7c:cc:
                    e2:48:03:af:56:63:f4:c8:58:30:66:b9:58:a2:20:
                    7d:13:21:5a:35:04:bf:7f:1e:82:14:3f:0e:ad:03:
                    13:9d:23:09:c8:02:49:86:cd:61:f0:8c:af:fd:94:
                    3a:7c:4b:40:1b:08:8e:ed:e1:8e:ba:56:2c:15:da:
                    d4:f8:d0:e1:f0:1a:a7:8f:87:15:21:6c:68:e2:a7:
                    87:69:61:38:ea:3d:4e:14:7a:5c:17:3d:10:0b:85:
                    65:1d:31:9a:d7:22:f7:6f:d6:f9:5b:5a:90:67:fa:
                    52:7c:cb:0c:de:b7:cc:ff:a8:d1:68:cc:cd:54:24:
                    4d:26:6e:f1:54:09:f2:44:9f:f7:b4:56:c2:96:f0:
                    3b:7a:90:74:5a:c6:b4:38:c4:ad:3b:da:bd:a3:80:
                    21:ae:4f:7a:91:c7:5d:9b:c7:35:ed:52:73:18:6f:
                    7b:fc:32:9c:68:b1:3c:14:56:e0:1e:f0:98:20:3e:
                    76:50:82:13:a1:b2:fc:eb:ee:85:c6:22:09:8e:bf:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5E:BC:47:31:13:EE:E8:09:E4:7D:88:1D:1C:A9:48:A5:91:27:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e00cab30-7063-3483-b958-18a8d3695a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl

            X509v3 Authority Key Identifier:
                keyid:58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:6d:0c:d4:6f:9d:c1:ed:da:d3:ed:a2:5f:45:74:e6:86:
         06:65:c2:80:b2:c5:63:da:1b:58:ff:78:b7:05:78:b5:e8:19:
         7b:2c:14:cd:47:bd:ff:c2:35:bd:bd:99:4d:78:95:41:75:6a:
         ac:b0:1a:bb:02:76:25:d0:e1:b2:c0:50:5f:b3:fe:0f:6f:2b:
         e9:d3:ac:ca:55:56:9b:8f:76:9b:6d:c0:0f:fa:5c:bb:ae:22:
         a5:33:a6:9e:f8:f7:27:b1:22:c0:2a:34:3a:f6:7b:88:ae:74:
         5b:3f:3d:04:0f:b9:93:0d:a4:c9:da:57:de:45:ca:f7:96:9b:
         95:f4:9d:0c:45:ea:0b:ba:00:9c:8d:23:b1:6d:fb:fc:2d:4e:
         c6:5d:a9:8e:03:0b:ae:1e:cb:3c:4b:10:85:bb:e6:d0:cb:99:
         58:51:99:ce:54:9b:1a:1c:ac:3e:5a:c9:ae:fc:d8:87:fd:37:
         41:8c:9e:3f:49:d8:20:3a:75:e6:ec:9b:47:a2:6c:c6:35:76:
         a1:d8:fb:45:9b:c9:b9:6c:4d:51:da:63:36:f9:76:fa:8d:61:
         5c:a7:e8:13:91:90:71:1c:7e:fd:e2:b4:c3:29:2c:a9:dc:f0:
         80:5e:c1:0f:62:51:10:93:60:6f:7e:f0:66:55:fd:09:4a:d4:
         b6:d2:59:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:53 2026 by rpki-client