Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/5b5879cc-2836-3287-99cc-7eb00a754886.roa
File:                     5b5879cc-2836-3287-99cc-7eb00a754886.roa (raw, json)
Hash identifier:          dfsJDlDPRYqaQJLd8UfQz4PDXi4sruOUHx7VKswDW9o=
Subject key identifier:   F4:F2:EB:86:20:D2:74:38:02:59:0C:F0:82:43:27:FE:B0:CF:75:A6
Certificate issuer:       /CN=b22497e5-0c43-47f7-b5bb-766cb0487668
Certificate serial:       010D0C9F4328584EA797DECC4322FF19A49FFF60
Authority key identifier: 76:9B:F4:E0:05:3C:FE:79:05:15:A5:0D:4F:31:A0:A4:58:34:99:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/5b5879cc-2836-3287-99cc-7eb00a754886.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22460
IP address blocks:        198.185.214.0/23 maxlen: 23
                          198.185.214.0/24 maxlen: 24
                          198.185.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:de:cc:43:22:ff:19:a4:9f:ff:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22497e5-0c43-47f7-b5bb-766cb0487668
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b18ea295-6fa1-4d18-a11f-8bda25fe59cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:4e:74:05:13:82:4e:79:22:63:72:1b:a5:
                    8e:85:4c:54:82:3c:e8:bd:99:41:c4:c7:58:38:40:
                    d9:44:01:88:a7:3a:44:b3:30:4c:99:d2:7f:c3:b2:
                    80:df:28:47:97:7a:64:c4:58:c6:0b:68:be:9f:9f:
                    54:e4:9f:e9:56:2c:60:20:9e:e6:b6:eb:61:e7:14:
                    9d:ca:45:e6:ed:51:4c:1b:25:93:f1:2a:e4:12:d5:
                    e9:dc:cf:1e:70:0a:38:d1:59:12:cd:23:21:00:e8:
                    0f:3c:89:c9:79:34:8e:99:c1:e4:79:43:5e:06:89:
                    77:19:27:a2:2f:37:95:cc:72:84:a8:00:22:f0:c5:
                    46:f3:72:bb:12:10:b5:b5:83:1f:37:26:51:17:3a:
                    5f:f9:d9:82:92:e2:3a:64:b9:71:f6:86:ba:d3:00:
                    27:62:d0:5a:d4:62:c6:56:66:0d:d0:3e:6c:f1:09:
                    cb:fc:0c:9f:39:6b:e9:69:16:9e:87:8a:65:0d:1e:
                    bc:10:49:bb:0c:15:6b:97:2e:b9:a3:49:3e:2e:7b:
                    2e:be:4b:87:94:79:2c:0c:fd:da:57:87:9b:25:d6:
                    dd:37:6a:a9:c9:e6:d9:dc:61:7a:e8:58:fa:5a:47:
                    eb:a2:62:c5:66:53:5b:ed:d0:14:26:17:1b:f8:e0:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F2:EB:86:20:D2:74:38:02:59:0C:F0:82:43:27:FE:B0:CF:75:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/5b5879cc-2836-3287-99cc-7eb00a754886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.crl

            X509v3 Authority Key Identifier:
                keyid:76:9B:F4:E0:05:3C:FE:79:05:15:A5:0D:4F:31:A0:A4:58:34:99:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.185.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:ba:35:6b:2d:0e:58:74:88:ee:10:92:8c:65:4c:f4:c5:
         a1:90:2d:48:38:f6:c3:19:9e:e3:d2:8a:23:47:23:3b:a8:ea:
         df:04:ee:44:bb:c9:f4:4f:3f:ae:4e:f7:d6:27:61:ac:10:43:
         5e:2e:8e:cf:1c:1d:0f:26:d7:a3:84:8d:53:f8:4b:c3:73:dd:
         5f:30:10:41:e8:ef:2f:0d:11:43:3c:0a:ad:c4:b2:d0:95:33:
         1f:a4:a4:fd:4a:c9:89:d0:a1:e8:f3:8f:a5:48:e1:3f:12:54:
         fb:3e:6c:14:a7:0d:1a:da:53:7a:08:7f:97:03:d6:f3:7a:03:
         91:4d:3c:b0:4b:df:01:f8:b8:e9:82:46:38:e7:ae:14:fb:8e:
         31:59:9a:c4:83:b2:a8:5f:e4:8e:3d:0e:fa:06:0d:9e:67:2b:
         75:b9:a3:33:1d:ea:5a:03:25:d3:07:a8:17:2d:dd:f7:3f:a0:
         34:19:b3:6a:0f:8f:45:93:fd:ad:33:25:ea:86:f2:51:de:01:
         00:3a:8e:e4:8f:fc:f2:f1:70:91:d3:64:8a:6e:4d:64:df:ad:
         b7:43:57:cd:b3:55:2f:96:15:a4:8e:77:99:04:17:33:e6:18:
         20:ea:f3:92:06:9e:dc:d2:09:76:6b:95:63:2f:f3:bf:93:22:
         4a:9a:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:02 2026 by rpki-client