Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/681dc50e-3ead-3000-ad27-9b19f00dbb5d.roa
File:                     681dc50e-3ead-3000-ad27-9b19f00dbb5d.roa (raw, json)
Hash identifier:          ACAWnNdZVsisxygd5HvlKQEk7OxGZouE1zeXxr3HkMQ=
Subject key identifier:   F4:54:F9:57:36:4F:66:30:2B:F6:03:04:04:98:80:F4:8C:D5:5D:24
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584BA9327313A3B294779ABAF400
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/681dc50e-3ead-3000-ad27-9b19f00dbb5d.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14956
IP address blocks:        172.86.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:73:13:a3:b2:94:77:9a:ba:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=07966f2c-9342-444e-89b5-aa0d22329b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:c6:13:d7:ad:38:f3:e1:ad:7e:57:9f:70:
                    03:1b:6a:29:c2:ea:ea:0b:fb:83:f9:f0:35:e4:5e:
                    c8:0c:a2:5d:fe:07:48:9f:1f:81:b8:57:a0:a5:cc:
                    f7:4b:7d:8c:c8:ca:2d:cd:77:36:d1:5b:50:e6:8f:
                    3b:0e:d9:a2:31:d9:67:b4:5f:41:2a:36:3b:31:27:
                    59:06:9f:a4:a2:ef:07:d6:82:0d:51:10:eb:c5:e3:
                    26:21:2e:f7:ed:c4:d6:bd:5b:82:65:6d:42:a9:68:
                    36:eb:9d:8d:dd:e5:98:fc:6b:e9:dc:14:98:ac:67:
                    95:89:3f:0b:a6:4d:3e:c3:32:f1:e9:1e:59:eb:20:
                    f4:dd:5b:24:f5:3e:bd:95:f3:5b:64:0e:bc:db:21:
                    37:47:44:6f:5f:04:34:4a:08:f1:c1:af:45:f4:1e:
                    4f:39:f3:f3:0f:1c:1d:80:c0:6d:db:3f:64:b1:a8:
                    e3:e0:28:07:2d:ec:6d:57:ff:60:30:d9:fa:b9:4c:
                    b2:01:c3:f4:d6:7f:17:f9:ce:74:e0:5d:db:87:19:
                    73:ed:ce:59:ae:6d:18:a7:e2:e8:7d:18:c2:d0:72:
                    ba:86:d0:5b:7f:87:7d:84:fc:c6:1b:79:a5:85:7b:
                    c8:2f:2b:b5:74:f4:40:62:d8:f4:d0:4b:3e:50:50:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:F9:57:36:4F:66:30:2B:F6:03:04:04:98:80:F4:8C:D5:5D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/681dc50e-3ead-3000-ad27-9b19f00dbb5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3d:ad:1f:08:63:1e:f6:eb:ad:4f:19:41:4b:44:53:88:1d:
         dd:22:fd:7b:4d:87:73:b3:0b:7d:8e:b6:13:b8:ea:02:bb:64:
         41:f6:bb:6c:37:7d:6b:2d:ee:09:28:0f:6a:23:66:17:26:5a:
         a0:04:e3:40:db:5b:11:82:84:89:34:09:3f:b6:36:25:16:8e:
         dd:41:8f:aa:a3:e6:48:e8:69:c8:31:dc:d3:ad:45:36:c1:77:
         30:14:24:53:0f:06:10:44:ad:c2:d1:91:e9:7a:84:1a:5c:e9:
         38:7a:5f:6b:1b:a7:5c:b8:86:14:20:c1:cd:d2:c0:bd:64:24:
         cf:d7:b3:93:b5:3b:2e:81:bb:3d:3b:18:ee:84:88:ad:df:05:
         85:c1:be:bf:5a:8d:b8:8d:d0:fa:d9:21:90:09:c3:67:cc:c6:
         e2:63:34:51:55:95:d8:8c:26:8a:67:45:19:23:12:2b:bd:7a:
         1a:14:46:b4:b2:e0:ba:ed:a7:cf:7a:d4:ca:03:04:c4:d4:2b:
         06:33:6c:dd:d7:88:6a:52:f0:0e:68:81:3b:1c:85:21:f5:dd:
         e0:28:88:8c:ac:b1:8f:9f:5c:8e:00:5b:38:8e:58:2e:64:13:
         9d:06:d0:8f:a2:93:1e:82:79:4f:7e:f3:dc:e0:33:6a:ec:f0:
         28:43:9a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:34:07 2025 by rpki-client