Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/08a45338-2017-38bc-9874-f01dab23652d.roa
File:                     08a45338-2017-38bc-9874-f01dab23652d.roa (raw, json)
Hash identifier:          wBLncbnFYtg5Gy/fZ5MYaDZZiND7QZB5TNi8KW5fhzQ=
Subject key identifier:   A1:67:E8:1B:CF:9F:1F:DD:7E:DE:C9:0A:8A:5D:59:25:6D:56:EF:4A
Certificate issuer:       /CN=e76368c6-7013-4f98-819f-c6329c83d1c8
Certificate serial:       010D0C9F4328584F34826F09AA946007D8C6A2C0
Authority key identifier: 54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/08a45338-2017-38bc-9874-f01dab23652d.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     14782
IP address blocks:        198.2.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:6f:09:aa:94:60:07:d8:c6:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76368c6-7013-4f98-819f-c6329c83d1c8
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=013040d3-4dc4-47e7-9840-1a47a2e0c8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:e5:5d:3d:83:0b:72:e2:3e:d8:91:50:36:
                    23:5a:04:a2:08:42:cd:cc:ec:67:59:b4:c6:17:b6:
                    c4:fa:62:42:ce:4f:71:74:c2:f8:d3:e3:2f:f5:d8:
                    96:88:70:e6:5b:29:ea:dc:c1:03:77:c6:b3:28:fa:
                    0f:ab:b8:e8:9f:c0:04:91:8f:60:34:a6:82:4e:37:
                    10:7c:c0:7b:15:c4:6b:81:5b:fb:34:6f:da:5f:64:
                    a5:e0:5a:ec:27:29:d5:75:bc:bf:ad:1a:3c:95:9f:
                    77:97:fc:f6:68:5a:2e:1a:d7:6e:64:a8:be:12:64:
                    81:ed:45:ad:99:ea:26:3a:88:10:e7:70:cc:c1:94:
                    82:30:fb:79:0f:42:5d:48:c3:e3:e6:c8:62:16:7c:
                    fa:3d:cc:c7:e9:35:db:94:6f:a4:fc:8c:e5:ec:a9:
                    92:e0:34:c8:8d:1c:99:a3:12:ee:9a:3e:e1:b6:71:
                    6f:79:5b:2b:45:eb:b2:6c:58:3f:38:61:6f:72:85:
                    3d:0b:15:3e:a5:37:1c:9f:95:88:1e:29:b8:c6:51:
                    91:b8:f3:bd:3d:66:15:77:d7:84:41:50:a1:ba:68:
                    a8:29:67:bf:87:a1:3b:8d:1a:a6:6b:9c:37:73:43:
                    c4:34:a7:f4:e5:01:72:b7:1d:0b:6e:a0:54:91:fa:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:67:E8:1B:CF:9F:1F:DD:7E:DE:C9:0A:8A:5D:59:25:6D:56:EF:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/08a45338-2017-38bc-9874-f01dab23652d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl

            X509v3 Authority Key Identifier:
                keyid:54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:4a:e7:ef:1f:9a:22:8b:ea:e9:4b:47:c3:5c:0b:6e:29:
         37:e9:9b:2c:4f:ba:47:2e:a8:11:76:43:da:a6:a3:12:d0:1d:
         a2:27:ad:cf:53:08:1f:03:d8:ae:0a:91:7a:a2:d7:e5:6a:13:
         6c:3b:99:e5:50:8d:db:db:ee:89:5b:8b:f4:1e:e1:65:40:45:
         d5:cb:3c:a2:16:03:1c:e0:b8:77:13:99:39:4a:53:cb:b5:fc:
         a4:d0:da:77:3e:f9:99:70:29:6e:e5:16:d4:74:e6:77:c7:93:
         1e:42:ba:d8:6f:0a:85:fb:3b:81:e6:5d:79:d4:c9:ba:a2:c2:
         bb:ad:ac:c7:fb:3b:6f:31:f3:51:17:e6:06:53:3e:03:7b:5c:
         19:bd:a1:f2:9a:fd:9d:2d:d7:da:c5:05:67:4e:a8:c4:a9:e8:
         7f:04:18:14:69:6e:5b:93:bf:3a:a8:42:68:9b:d3:05:48:80:
         99:9e:4c:86:03:a5:d6:33:cd:de:f2:da:b2:91:00:b2:ac:e7:
         bb:01:9b:d8:4e:8c:ce:08:2e:50:d9:7e:61:52:32:e5:5c:57:
         45:63:4b:b6:79:8e:25:ef:2a:1f:20:0f:40:33:18:76:e3:cc:
         75:dd:0b:13:72:93:9e:8c:2c:3f:6a:9c:6b:e4:24:f5:bb:eb:
         a0:ce:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 06:45:02 2026 by rpki-client