Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/8a12c7c2-da96-3d53-aa45-ed61bb6dd3db.roa
File:                     8a12c7c2-da96-3d53-aa45-ed61bb6dd3db.roa (raw, json)
Hash identifier:          1zQFLpZ6rGBOxTFzDZ3jW4Ua709g5aT5kx9hGkFYytI=
Subject key identifier:   FC:F3:6B:FB:93:36:C4:7A:0E:8C:0C:B5:6C:DB:50:35:9C:69:5C:88
Certificate issuer:       /CN=53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8
Certificate serial:       010D0C9F4328584EE0C21CD7149AED5A55977900
Authority key identifier: D7:98:9D:5E:4B:38:59:C6:F3:C4:9E:76:04:8C:7D:7F:10:F9:1C:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/8a12c7c2-da96-3d53-aa45-ed61bb6dd3db.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     398138
IP address blocks:        98.142.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1c:d7:14:9a:ed:5a:55:97:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=a01a2e2d-1f50-41e6-bf20-41a0bee5c9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:65:3f:53:1f:7c:87:4f:05:fd:0e:0b:12:
                    18:33:1e:cc:a1:b3:e8:a9:02:24:a3:ac:66:18:e3:
                    38:55:55:95:41:6e:44:57:bb:21:dd:23:4a:52:6d:
                    52:da:c6:bb:f7:bf:cf:55:61:1d:9d:70:05:e2:6c:
                    f4:fe:1e:0c:77:02:5f:bd:fc:f2:be:b4:d3:40:85:
                    0b:12:68:0c:94:24:9a:bd:fe:45:00:42:47:26:e4:
                    87:b5:0e:c8:a3:31:fc:3b:be:9f:89:86:b4:3f:72:
                    8c:bb:c3:87:16:09:e7:97:13:01:0e:39:f5:38:c3:
                    5c:ea:90:4e:43:27:02:ac:d9:6a:d2:cb:0a:57:20:
                    ee:02:ac:c2:14:51:45:d8:12:83:1a:08:02:1b:53:
                    08:91:5d:8d:95:0e:d2:8c:99:fd:dc:5d:75:46:cc:
                    86:38:0c:ac:1b:4f:25:e9:e4:3d:f2:85:7a:dc:74:
                    e5:14:75:a4:b4:dd:46:e3:6c:51:d7:56:ff:53:9d:
                    a1:87:5b:da:47:83:cf:db:e3:b8:fb:1b:64:ac:68:
                    ce:25:43:4f:cd:f8:ed:9e:82:b5:9b:03:66:e2:0a:
                    53:07:4e:a2:c5:0c:8d:90:72:09:c5:21:c6:e6:81:
                    f5:d5:5b:a0:2d:5e:95:28:1d:c4:b7:4a:6d:ab:07:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F3:6B:FB:93:36:C4:7A:0E:8C:0C:B5:6C:DB:50:35:9C:69:5C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/8a12c7c2-da96-3d53-aa45-ed61bb6dd3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.crl

            X509v3 Authority Key Identifier:
                keyid:D7:98:9D:5E:4B:38:59:C6:F3:C4:9E:76:04:8C:7D:7F:10:F9:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:50:89:a5:50:a6:63:0f:a3:fd:5c:5c:4c:53:27:7d:58:0f:
         91:a9:15:05:02:05:56:0a:10:b0:1c:04:c2:68:d0:8c:1e:6c:
         13:17:5c:2a:97:3a:24:6c:c8:d5:e9:05:ef:0b:96:42:ae:ac:
         bb:81:91:a3:f8:78:48:32:c0:6a:b3:5f:ec:db:a2:1e:0d:9b:
         74:85:4b:ed:6f:4b:a1:e7:b6:75:63:1c:6f:7f:1f:3b:13:f0:
         36:15:f0:ae:a8:10:e5:c8:16:69:65:30:e7:1f:22:dd:a8:ca:
         2b:5d:ed:6d:af:95:83:99:ba:46:25:4c:80:53:83:e1:b5:22:
         c5:0c:2f:86:db:ed:69:b3:b8:53:4a:01:68:f1:87:cc:da:11:
         cb:bc:31:81:2a:7d:4c:22:52:4b:25:9d:4d:58:a3:e9:cb:3b:
         52:6e:d8:78:18:9c:bd:fd:83:8e:35:c9:f5:ff:8f:4d:19:e5:
         05:46:96:79:57:0c:53:9f:55:ef:28:e5:33:84:40:60:3b:bc:
         0b:11:f5:79:c4:4a:37:77:3c:7b:9f:64:ce:f6:06:81:b9:aa:
         5e:b3:6f:1c:59:20:08:c6:07:f8:1b:7f:64:a9:4a:15:23:df:
         d0:5e:d1:1f:0f:32:4a:1e:f1:d9:ac:f3:75:fb:c2:90:32:30:
         2e:ed:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:09:57 2026 by rpki-client