Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
File:                     6f2a8979-499b-3861-8229-f7dcb3b30854.roa (raw, json)
Hash identifier:          ohvc+OylwrCdzdijQfMv+rhXH35oZ591cEq4PQRbiTo=
Subject key identifier:   62:30:DE:F9:E1:4B:59:84:CE:C4:01:B6:1C:66:59:DC:24:E8:A1:5E
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584CB121D6496CA3D8F5C45B6F80
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     30607
IP address blocks:        198.41.8.0/22 maxlen: 22
                          198.41.8.0/23 maxlen: 23
                          198.41.8.0/24 maxlen: 24
                          198.41.9.0/24 maxlen: 24
                          198.41.10.0/23 maxlen: 23
                          198.41.10.0/24 maxlen: 24
                          198.41.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:d6:49:6c:a3:d8:f5:c4:5b:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=25f5e930-92a6-4db1-a972-6308733770f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:4a:98:de:52:14:5a:fb:0b:a0:68:37:8a:
                    74:f6:d7:c7:5e:dd:69:19:f4:d9:0f:1c:1c:1b:55:
                    8d:33:35:3e:ee:8a:cf:cb:08:d3:57:32:d5:ca:62:
                    27:d1:26:cc:b7:f0:38:d1:60:16:30:2c:d9:89:8e:
                    70:72:30:c5:54:6d:54:0f:84:bb:0c:e4:28:bd:fa:
                    b1:2c:59:54:f6:28:db:00:27:83:6f:57:a4:94:c6:
                    a6:56:8e:11:4c:e6:af:99:80:da:c7:80:7d:df:25:
                    be:34:d8:76:76:57:49:12:82:3b:d8:86:c4:ef:cc:
                    96:64:ef:2e:c8:7d:b7:5e:4b:82:6b:3a:ea:ea:c8:
                    91:ae:0d:74:72:46:41:dd:38:54:a8:1c:76:fd:ab:
                    06:e2:4f:16:d4:81:f3:3e:0e:03:14:d7:9a:39:ad:
                    94:55:89:f3:34:da:11:46:67:93:48:1c:4c:9f:e9:
                    42:a5:99:f0:f9:0d:da:b7:bc:53:49:90:fa:e3:c9:
                    cf:9c:a8:30:85:10:0b:01:ed:a8:92:f5:19:34:6e:
                    39:08:f8:0e:4d:a8:25:65:09:1e:a8:8c:4e:9e:63:
                    ba:32:f9:b2:7d:5f:bf:5d:72:52:23:d5:e7:99:d5:
                    91:4f:07:ea:f9:12:bd:0a:36:ab:fe:c5:ce:23:f3:
                    64:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:30:DE:F9:E1:4B:59:84:CE:C4:01:B6:1C:66:59:DC:24:E8:A1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:53:59:6b:29:5f:e8:06:af:04:98:6c:da:00:37:c7:89:d7:
         bc:90:5c:5f:73:13:db:9c:e9:20:de:6c:75:e1:13:1e:55:22:
         9e:2b:66:77:c3:e0:62:d3:77:12:28:a4:1b:39:90:c7:6a:f0:
         9b:55:90:55:02:4c:00:3b:e7:60:49:2d:1a:cf:74:70:5e:14:
         c4:9c:1a:ac:31:c5:29:c8:11:e2:22:5f:94:ca:04:51:8d:0f:
         81:d1:48:86:3b:12:62:ab:d5:b6:e7:0b:f9:2b:d6:d9:00:d1:
         39:2d:13:92:9c:69:fe:a4:65:da:41:e4:9c:59:23:89:c4:dc:
         0f:d7:39:f8:01:0f:fa:61:ec:57:58:0b:77:2e:d9:2b:30:fe:
         8c:dc:06:b2:ff:2e:57:3f:8a:e8:1a:24:ca:12:16:93:53:72:
         3b:68:7a:73:e2:27:95:51:22:02:ac:ec:1a:5c:c1:93:19:84:
         af:b2:f8:9a:ce:6d:f3:fb:d8:59:e4:dd:9d:e4:14:99:54:70:
         35:14:2e:1e:1e:be:46:7f:b7:a8:5e:4d:25:94:25:8d:09:6d:
         5a:03:2a:aa:8c:d5:59:86:82:d3:38:b1:7d:02:e3:6e:60:30:
         ce:b4:a7:11:f0:f2:22:35:8a:58:58:89:53:d1:11:9d:e6:ed:
         39:5c:16:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:38 2026 by rpki-client