Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/a578d2f5-66d5-3ea4-9327-04a52eb5ab3e.roa
File:                     a578d2f5-66d5-3ea4-9327-04a52eb5ab3e.roa (raw, json)
Hash identifier:          oGfqVgjCw0GxK6q4KdiuG3lVpxOuExqmux/4d/RvL2M=
Subject key identifier:   05:CD:7A:D1:D8:EC:8D:04:D6:EB:65:48:D7:10:26:EC:D7:B1:2C:3A
Certificate issuer:       /CN=b22497e5-0c43-47f7-b5bb-766cb0487668
Certificate serial:       010D0C9F4328584EA799C0D1251AC6BAD6000B80
Authority key identifier: 76:9B:F4:E0:05:3C:FE:79:05:15:A5:0D:4F:31:A0:A4:58:34:99:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/a578d2f5-66d5-3ea4-9327-04a52eb5ab3e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     56043
IP address blocks:        198.185.214.0/23 maxlen: 23
                          198.185.214.0/24 maxlen: 24
                          198.185.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:c0:d1:25:1a:c6:ba:d6:00:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22497e5-0c43-47f7-b5bb-766cb0487668
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=73a2be22-ffa1-4f25-99bd-9d8066153e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:88:c6:8c:1b:b5:6d:f1:73:95:bd:07:4e:
                    38:c6:d9:f9:57:b4:24:f4:2e:ae:37:1d:30:a7:9f:
                    fe:de:78:da:11:ac:ed:c8:74:d7:ba:16:23:3f:94:
                    86:74:be:70:b2:e0:b7:22:51:77:64:98:bd:2d:5a:
                    2c:77:1a:83:ab:5e:85:78:66:86:8e:e2:f3:f0:0d:
                    78:95:b1:0f:a5:05:fa:22:0e:83:37:9d:94:5e:a8:
                    38:61:a6:da:4a:58:b5:5d:55:9f:78:a4:b6:52:c6:
                    1e:4c:25:70:61:46:a9:d2:21:ca:73:48:d3:4a:31:
                    ba:b6:aa:6b:83:69:f1:80:04:29:f9:a4:f6:bd:59:
                    97:0d:e8:da:8c:e4:1a:47:49:20:da:9d:5d:89:99:
                    72:90:eb:a9:24:33:9b:4f:27:a1:97:f2:86:80:44:
                    0e:08:20:03:91:ed:86:58:3c:81:3e:3d:27:d5:78:
                    66:aa:ba:84:cd:76:0d:12:1f:4c:46:7e:00:ca:1e:
                    20:c1:f7:44:73:40:39:65:7d:b1:22:43:da:b5:80:
                    54:ca:4b:12:69:49:55:fc:44:86:50:4b:98:da:f3:
                    ac:3d:8b:40:2b:87:34:90:65:fb:94:24:6e:08:05:
                    71:00:cb:49:b1:37:1a:c4:84:5c:84:f1:20:42:39:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:7A:D1:D8:EC:8D:04:D6:EB:65:48:D7:10:26:EC:D7:B1:2C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/a578d2f5-66d5-3ea4-9327-04a52eb5ab3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.crl

            X509v3 Authority Key Identifier:
                keyid:76:9B:F4:E0:05:3C:FE:79:05:15:A5:0D:4F:31:A0:A4:58:34:99:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.185.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e2:07:18:71:1d:d0:15:8e:20:8d:50:3a:63:20:ec:34:60:
         51:bd:b3:2e:a5:6f:2f:6f:56:03:34:cc:75:c2:f6:a3:42:33:
         95:46:b5:7e:28:8f:86:06:ab:2e:f4:67:6e:fd:01:be:9f:44:
         a6:a3:06:77:72:fa:9a:6f:a5:45:11:5d:f5:f5:d9:4f:2d:28:
         6f:a0:ef:77:69:1a:3a:9c:22:6e:fa:ea:8d:46:da:98:24:69:
         ad:aa:b7:6b:c4:4c:9a:cf:a0:6a:be:bf:52:af:be:de:05:17:
         41:ea:e5:07:30:03:0b:12:73:81:de:0a:17:3a:bb:33:47:4c:
         4d:59:05:51:43:c6:d2:32:23:f6:94:1c:a8:0d:b4:8c:4e:ad:
         aa:7a:8a:6e:3b:71:93:1e:4a:01:35:bc:a1:91:4d:46:5c:2e:
         c9:d0:0c:15:04:46:76:35:e3:c3:79:7a:f9:dc:99:e9:a3:5b:
         54:65:ac:05:40:ed:52:01:6a:36:66:04:2a:d8:17:77:be:6c:
         6a:a4:ac:b3:65:76:99:13:4b:75:aa:91:70:37:e3:13:4d:47:
         ad:0f:52:03:f0:12:88:01:5e:16:73:10:7b:35:c8:48:82:aa:
         f8:b4:5f:2c:b5:6b:ce:0e:1d:bb:7e:e2:b8:47:58:41:b3:47:
         cb:54:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:36 2026 by rpki-client