Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
File:                     4748e949-c2fb-3b07-a310-c7d6a2767edf.roa (raw, json)
Hash identifier:          fBdmmr7CJ8pcsBdFD3+TjoZ3eVDfjk8IkE79F9N5/F0=
Subject key identifier:   CD:21:BA:E3:6C:7A:CB:B9:2B:A5:55:82:DB:0E:76:5F:AF:52:AD:7A
Certificate issuer:       /CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc
Certificate serial:       010D0C9F4328584E9D4A666430DE0F260EADAE20
Authority key identifier: 3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     395101
IP address blocks:        199.175.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:66:64:30:de:0f:26:0e:ad:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=6e31ff58-c58d-4dfb-9891-8a8ee1f747d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:a0:07:be:b2:94:db:01:b6:72:93:65:88:
                    a5:95:21:dc:ff:4c:a4:97:3d:ce:9c:b6:40:bb:e8:
                    26:69:33:09:15:d7:10:4c:82:93:e5:fe:8c:9c:78:
                    ef:fe:78:4f:06:f1:fc:ed:5e:5e:e7:a2:77:15:7c:
                    de:33:c0:0e:9e:d3:b2:2d:71:12:b1:04:c7:4c:70:
                    5d:50:91:97:1d:54:09:58:c2:f9:12:9a:10:47:54:
                    0a:31:ee:9c:27:2a:ee:ff:7a:88:66:f7:e6:21:bc:
                    51:eb:4b:94:10:67:31:d3:ba:40:4f:f5:0a:9b:ac:
                    78:b3:b1:d2:55:6a:52:d6:f9:88:25:60:79:b7:bd:
                    1c:3b:84:6b:93:2a:8b:d7:cb:d3:72:42:1b:a6:dd:
                    fa:dd:82:5a:f3:3e:bf:8a:a2:93:68:b4:87:fe:72:
                    fc:89:12:50:9a:20:26:10:fc:3c:be:b4:9a:6d:f3:
                    6b:24:9c:dd:03:92:8a:75:ca:14:b3:b1:48:0d:1d:
                    64:08:68:d5:1c:0b:c7:4e:ee:fc:b3:69:74:71:df:
                    ca:03:41:46:35:aa:e8:8c:75:30:e3:51:b0:cd:f4:
                    7a:ce:c2:6b:ce:2e:db:66:04:22:60:e6:b1:67:9d:
                    89:f8:cd:47:bc:02:02:5a:df:76:28:22:bf:3e:29:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:21:BA:E3:6C:7A:CB:B9:2B:A5:55:82:DB:0E:76:5F:AF:52:AD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl

            X509v3 Authority Key Identifier:
                keyid:3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:ca:43:8e:9d:98:91:66:1e:7b:aa:d6:91:5f:e2:71:57:
         2d:95:ad:c0:d4:b1:4e:85:48:9a:64:49:37:02:3f:d9:20:1b:
         25:71:83:f3:d5:e9:c6:33:3a:3a:12:8d:8a:ce:f6:80:8c:bf:
         75:66:a1:30:55:f5:31:bd:d3:a6:91:9c:dd:77:61:9d:ee:41:
         3e:0e:b8:72:24:2c:10:c0:28:db:97:6a:67:0c:cf:3a:a0:2c:
         20:3b:b8:ab:d3:cb:ff:29:9f:79:58:09:75:48:e0:4d:13:c7:
         69:19:32:f6:c2:ee:86:45:0e:ea:1a:1d:91:64:c3:f8:92:60:
         02:fb:4e:eb:cf:b9:27:bb:74:08:22:c4:92:05:31:f0:e3:bd:
         17:19:91:9c:a7:a8:61:e9:7e:80:60:9e:de:7f:5b:61:ec:06:
         af:97:37:b2:09:c7:f1:08:dc:a5:9c:26:d5:7b:35:ab:46:b5:
         36:77:48:2a:fc:59:16:43:b5:be:c1:88:77:e9:f7:d7:66:1b:
         16:b7:1f:4e:3a:70:6a:94:e7:b0:83:aa:c8:2b:d6:51:b6:43:
         63:b5:2f:41:70:48:ea:29:58:21:60:99:32:3d:6c:03:81:e8:
         70:64:ec:37:86:16:bd:4a:3a:9b:7d:0a:19:83:98:80:30:1c:
         74:72:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:04 2026 by rpki-client