Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa
File:                     1c2caecd-5d24-3447-b3c5-116394c1a96e.roa (raw, json)
Hash identifier:          bqexd4RwH3zUYqpzxxjih42LcuDiowO1K5mEVcI5pzE=
Subject key identifier:   FE:33:B1:9D:F3:B8:B3:FA:48:9D:29:47:10:DC:04:CD:A9:A9:4A:67
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F4328584F4975AB22735AADFD9839EC80
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        166.98.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:ab:22:73:5a:ad:fd:98:39:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=60d70078-53c4-434b-ad53-4381ba3b2d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:4b:51:9b:34:3d:24:1b:38:13:f5:d8:e0:
                    40:a4:59:c9:88:cc:a4:26:08:b0:ef:8b:85:0d:05:
                    2b:e5:e7:50:ff:c0:c2:d8:38:31:d3:94:d4:2a:33:
                    d8:ce:68:7b:a4:ce:41:a2:76:ea:5b:04:f5:7d:ec:
                    78:f1:f5:46:67:0a:55:1e:77:18:70:33:10:ee:c4:
                    ee:57:f6:a2:4d:10:21:58:ed:d6:09:d4:61:29:c0:
                    35:64:f7:3f:84:15:1f:d5:3e:9a:dd:5e:31:40:e0:
                    e7:e7:a3:ec:d5:05:01:01:ab:ae:cb:9a:1f:78:41:
                    53:f1:7a:da:a2:e5:ae:96:7f:c7:46:7f:77:2f:95:
                    56:dd:39:f4:55:62:16:f3:49:ed:35:de:ac:d2:3c:
                    4e:5d:43:78:ea:fc:8e:b4:1d:8e:b2:98:9b:7f:81:
                    a0:11:65:8c:a2:a4:6f:52:0c:3d:8a:c2:df:b8:b0:
                    cb:ff:2e:88:89:d8:e6:e6:a1:db:76:7d:0f:36:ad:
                    0e:21:2f:50:a5:13:66:3d:5c:f6:63:24:9a:ee:01:
                    f2:f1:5c:8f:1f:07:91:4e:73:73:cf:e5:b9:55:88:
                    d7:3b:db:b4:c7:54:e8:60:2f:29:7f:ca:42:c3:ad:
                    07:cd:c2:e2:3e:87:9d:6d:dc:2f:ba:6d:61:ad:5c:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:B1:9D:F3:B8:B3:FA:48:9D:29:47:10:DC:04:CD:A9:A9:4A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:31:0c:0d:60:e4:70:87:5b:87:38:e5:d1:66:de:57:a0:13:
         fe:26:93:23:84:53:ce:f6:34:e8:e3:87:d5:e0:07:ca:af:88:
         14:f4:a7:22:9f:f8:d1:02:05:91:f8:c5:24:14:1f:56:c5:31:
         bf:d0:16:77:81:c2:d7:ef:25:e9:42:dc:b3:f2:65:11:ef:75:
         ca:c8:89:e1:07:ac:db:2d:f5:f6:48:3e:08:4e:04:4b:9a:b5:
         10:d5:65:22:a0:18:aa:45:94:e2:25:a6:95:e6:ae:a5:60:23:
         c8:e8:80:83:ac:62:33:d1:43:26:90:5c:27:6f:06:1a:11:1e:
         d5:db:67:95:e1:e1:63:29:2b:61:47:e6:11:ec:7d:f2:85:09:
         9f:19:50:72:50:94:b9:d3:fe:04:9b:23:33:7b:5a:0c:4c:7a:
         3a:4f:5f:fd:3c:c0:ec:fb:92:e8:7e:11:f7:52:41:96:1c:45:
         fd:be:a4:bf:6e:f7:f8:15:b8:cf:16:6e:88:26:e4:83:c8:37:
         3e:04:48:27:78:f1:f8:3d:b5:79:b4:c7:32:d0:04:bd:ae:44:
         e4:9b:88:bd:d5:e0:07:2e:40:28:fe:9f:fb:d0:e7:9c:c4:e6:
         98:e8:32:53:4c:eb:af:53:79:02:25:0c:07:f1:55:56:4c:4f:
         77:07:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:38:18 2026 by rpki-client