Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa
File:                     4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (raw, json)
Hash identifier:          88kNwiPYEIUfg8AiQ6jpKfCk53o9FJzR7lX914C/3ik=
Subject key identifier:   DD:B1:B5:26:4E:53:66:A0:72:0B:28:8A:A5:51:28:57:03:A1:A0:F6
Certificate issuer:       /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Certificate serial:       010D0C9F4328584F6F22DC2676510434ECFDDE40
Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     22966
IP address blocks:        198.51.243.0/24 maxlen: 24
                          198.51.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:dc:26:76:51:04:34:ec:fd:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=065a9187-de1e-4e8e-8949-ec2d7ebcfa32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:94:ad:3d:48:04:b3:53:27:84:83:ca:25:
                    d4:a4:c5:4d:c6:4c:c2:13:94:d7:e5:f2:d1:07:c7:
                    c0:28:80:a2:38:56:f3:79:7d:f2:a1:22:e5:7e:18:
                    f7:fa:bd:91:d3:4f:c9:fb:22:06:c1:fe:a2:cb:40:
                    2b:b6:82:54:c8:4f:94:ef:04:77:d2:f6:a4:83:c5:
                    53:88:96:53:fa:1f:16:7f:27:33:2a:c4:c8:a3:fb:
                    4e:51:c2:62:c0:2e:fd:9b:63:35:fc:41:38:ba:f8:
                    14:40:96:1e:09:02:28:84:06:3e:0b:2a:11:44:e0:
                    1e:0a:70:c5:57:2b:92:7d:f2:dc:14:98:28:36:94:
                    c4:55:40:c9:07:c4:c4:58:58:03:18:8e:7f:ea:a5:
                    f4:d3:aa:15:e3:74:b4:69:ae:91:90:03:8d:c1:cc:
                    31:96:e6:c3:c8:1a:68:e6:fd:11:84:3f:14:fc:d7:
                    af:06:de:72:3b:c9:40:9d:57:48:7f:39:f6:5c:49:
                    f3:d7:50:35:16:a7:49:14:9b:89:f7:27:ac:46:cc:
                    b0:ce:31:9b:a9:9c:99:75:d7:d4:d4:5c:ab:f3:af:
                    9c:fd:54:eb:d4:9f:c9:5e:9e:67:46:c0:cf:e3:47:
                    40:f9:a5:a2:6b:37:44:a2:bb:4f:e5:4a:5e:a5:2c:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B1:B5:26:4E:53:66:A0:72:0B:28:8A:A5:51:28:57:03:A1:A0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl

            X509v3 Authority Key Identifier:
                keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.243.0-198.51.244.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:83:ff:22:31:05:a6:cc:cd:68:70:7f:4e:71:0f:ef:05:c7:
         f8:df:5b:fe:af:02:9e:16:cd:2c:d9:c4:0e:06:e1:fe:67:04:
         58:d5:a2:c2:8d:d9:80:32:29:1b:7b:f4:a4:a2:e3:50:75:7f:
         1a:66:c8:91:38:9c:8c:38:dd:dc:36:1a:5d:01:69:ea:1c:3b:
         6f:6d:d5:5b:72:99:19:fe:c1:24:4a:54:b0:e2:f8:7d:e9:3d:
         37:8c:cd:f8:c1:48:f7:e7:16:58:1a:dc:b4:d6:52:4c:a5:8f:
         65:94:60:df:18:6a:01:b0:ba:15:be:35:43:a2:88:a8:9d:b3:
         99:71:1a:6a:53:7d:c0:86:b2:4c:86:27:a5:be:48:ac:93:d6:
         01:5f:ec:f8:87:12:2f:37:4f:e9:d7:10:2b:16:92:70:84:d0:
         da:94:81:8b:e4:b1:ce:0d:71:bc:c1:f8:13:0b:97:3e:80:08:
         3c:ed:b6:af:7c:b7:aa:dd:87:1a:76:e0:e6:51:e5:b6:ec:59:
         bd:02:a8:ec:61:2d:77:b6:5f:bb:b3:db:c6:4f:1e:3e:39:4b:
         ce:c7:79:9e:80:b2:b5:52:ec:31:8c:6b:f9:97:73:c4:c1:90:
         9f:dc:9a:52:65:21:8d:0b:51:1e:9d:ae:5b:2b:48:ab:cd:27:
         e1:53:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:37:55 2026 by rpki-client