Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8813325c-1b39-30af-8f29-387759f05460.roa
File:                     8813325c-1b39-30af-8f29-387759f05460.roa (raw, json)
Hash identifier:          Lx+xuO2obsVxkELprws+xTZBXf9LScmHBiPwz6/9cEU=
Subject key identifier:   50:71:A5:45:20:27:CF:C3:1C:D2:4A:F5:42:55:FD:AC:42:0C:10:F5
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584F1897C1C9813921636DD13080
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8813325c-1b39-30af-8f29-387759f05460.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     14956
IP address blocks:        144.172.112.0/24 maxlen: 24
                          144.172.114.0/24 maxlen: 24
                          144.172.115.0/24 maxlen: 24
                          144.172.116.0/24 maxlen: 24
                          144.172.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:c1:c9:81:39:21:63:6d:d1:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=f8227630-3ce9-4df7-9b83-911d43595c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e4:44:3f:fb:23:22:bd:07:97:12:e6:95:48:
                    33:3c:94:c4:78:0e:1d:fb:48:17:d2:71:4b:76:d5:
                    96:f7:c3:14:14:29:a9:73:ec:2d:9c:42:b0:3d:19:
                    32:32:17:f3:ac:32:9a:e9:62:84:14:9e:81:2d:bd:
                    22:07:10:cb:65:d1:d9:fb:a0:a4:d1:ab:64:e2:a7:
                    9d:85:ff:2c:26:6c:86:7f:04:c3:c2:1e:62:09:45:
                    48:51:04:6d:ff:14:72:99:8f:eb:b7:e1:8e:2e:2b:
                    1f:fa:f4:b3:38:1c:ba:4a:cf:8b:b3:48:f6:5f:b7:
                    41:15:b6:66:64:b0:c7:ef:0f:4c:34:4d:1e:60:50:
                    27:2c:93:b4:c4:ea:0c:ab:18:ba:28:5c:79:56:d2:
                    6b:c3:3b:70:75:d6:41:17:3f:23:22:b0:cf:b7:81:
                    69:8f:d3:48:a3:e3:e5:45:58:fe:ad:eb:a4:b6:22:
                    ef:24:a2:7d:69:c8:85:6a:e9:10:70:0b:0a:9b:3b:
                    ed:f0:61:6d:87:7d:a3:53:2c:f4:a0:fa:66:16:0e:
                    ba:d9:b4:1a:38:4c:33:e6:bc:5a:b4:d4:18:dd:ec:
                    fe:5b:ed:d4:2c:6d:01:6c:46:ae:7d:89:38:7f:d4:
                    9e:d5:57:d4:42:c0:11:cf:05:dd:49:54:ad:6f:ef:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:71:A5:45:20:27:CF:C3:1C:D2:4A:F5:42:55:FD:AC:42:0C:10:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8813325c-1b39-30af-8f29-387759f05460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.112.0/24
                  144.172.114.0-144.172.117.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:eb:4f:6a:e3:47:44:7a:17:ca:8c:9b:09:58:71:60:c1:62:
         bb:0b:5b:49:04:8c:43:ff:e6:4f:a8:20:1d:e9:59:af:1f:77:
         b2:a6:38:8a:76:70:73:a2:2d:52:e4:6d:ae:20:57:91:2f:e9:
         4c:44:8e:cc:a8:d5:95:c6:7a:0a:4c:d9:51:2b:c7:a5:54:d3:
         c6:a7:a5:6b:39:1f:7f:68:65:6d:51:51:2c:71:80:6f:7c:f5:
         3a:d9:2d:15:41:0b:db:56:53:5c:45:77:d3:d1:6f:ee:d0:46:
         3c:a6:18:8d:d2:46:67:86:ae:76:d6:37:8d:ac:39:59:b8:65:
         de:ec:bb:0e:17:45:3e:92:d5:c2:4c:aa:76:c4:58:20:44:1c:
         74:33:9d:08:36:49:49:ed:ce:35:cd:97:6e:1e:77:03:da:6f:
         91:73:f9:a9:11:28:a0:be:74:ba:02:06:87:8f:09:fd:64:e0:
         01:a5:47:35:54:3c:68:85:ca:96:6a:fc:9c:6a:2b:fb:a6:32:
         cd:b2:1d:cb:6d:d0:2a:4d:0a:17:db:0b:8a:77:f3:43:9d:43:
         94:ed:db:72:e1:0d:6f:bc:00:a1:03:a2:b1:d1:eb:aa:96:9c:
         75:d8:d7:b7:78:84:b7:47:b1:28:fb:f0:bd:86:12:ab:6c:d5:
         c6:d1:87:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:58:27 2026 by rpki-client