Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa
File:                     3f3eb481-0305-31c7-9a7c-52b014c01721.roa (raw, json)
Hash identifier:          IO45sTk7XDPW7GnlJP4QRWTdqBpvz6Uv4vgu/TKgUlc=
Subject key identifier:   C1:D2:3A:F1:CE:D8:9B:31:D4:C8:41:79:00:05:0E:3B:F8:BF:0F:83
Certificate issuer:       /CN=bcebc8fa-2923-43fa-ba14-964e68a49086
Certificate serial:       010D0C9F4328584F34826D58004E217EB3F1EE80
Authority key identifier: 4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     15026
IP address blocks:        198.160.96.0/19 maxlen: 24
                          198.160.96.0/20 maxlen: 20
                          198.160.112.0/21 maxlen: 21
                          198.160.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:6d:58:00:4e:21:7e:b3:f1:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcebc8fa-2923-43fa-ba14-964e68a49086
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=5576b66d-20b9-43fa-be76-8e96e2970fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:8c:d0:8c:b0:50:1b:31:b5:43:3e:1b:4a:
                    dd:91:45:ff:9e:85:7a:9d:a1:f1:c9:0e:a7:fd:18:
                    97:c6:70:86:b1:81:a2:a2:0a:3f:09:98:0d:d5:ad:
                    02:ba:88:2b:f6:fd:e9:6b:fb:2d:b8:89:84:88:d5:
                    cf:5f:e1:ed:a4:c9:12:08:c9:92:83:99:7e:f6:1c:
                    f4:29:19:d8:01:2c:68:ba:c9:58:e5:e8:f6:c5:2f:
                    7d:98:73:52:6b:1f:09:00:7b:40:5c:b9:f0:6f:13:
                    b3:9f:00:54:6b:aa:13:d4:f0:6d:c8:77:27:d5:6b:
                    da:2b:72:74:6c:12:05:02:c4:50:58:ae:05:c0:68:
                    f6:50:a0:11:69:b3:ed:b6:d0:ff:34:9f:df:5b:54:
                    2b:2a:63:27:60:00:bc:bb:74:2f:78:b1:64:3e:ca:
                    f1:71:a4:7c:36:e2:25:70:0d:51:0e:21:ed:b1:4e:
                    69:00:fd:66:14:54:70:91:45:d8:80:4b:2f:d7:ff:
                    59:af:1c:7a:f9:ea:9e:45:ad:45:b5:c9:97:ed:e1:
                    d3:cc:38:e4:2d:f0:c4:05:9c:b3:ba:6f:60:72:4a:
                    52:7f:d6:fb:eb:32:93:ef:00:6a:4b:b9:c9:21:4a:
                    d0:e8:43:f4:23:de:d4:b7:6d:66:fc:19:e1:a1:3d:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D2:3A:F1:CE:D8:9B:31:D4:C8:41:79:00:05:0E:3B:F8:BF:0F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1a:16:e7:54:b2:9d:61:5b:ce:ff:9d:a5:38:f4:3e:53:3c:
         38:2e:d5:3e:37:eb:42:55:bd:e7:4c:d9:e2:a9:b2:d0:75:1c:
         77:47:a2:88:94:37:4d:59:b3:f0:0e:ff:28:e2:c0:cd:30:80:
         a4:2d:37:70:0d:64:b8:7e:29:71:2a:6a:b5:52:69:33:76:c4:
         3f:bc:77:8f:29:f9:58:ed:3d:0c:0a:4f:41:70:92:fa:ae:6d:
         d9:c5:1a:27:34:70:5c:aa:cb:ec:e0:e3:a2:d2:a6:20:f7:95:
         b5:3e:c2:79:f5:b4:03:ff:7f:a0:cf:4f:2c:4c:9a:97:88:9a:
         fe:d6:35:f9:b3:52:64:2d:70:e5:31:1f:78:6b:4e:81:bd:33:
         ae:f8:4e:e0:41:d4:10:bc:be:e0:6e:02:df:ee:e0:1e:7f:24:
         60:0d:97:8c:b7:6e:58:91:74:70:12:28:be:9e:f6:01:f8:02:
         b5:c3:b3:03:83:b8:8d:5f:0a:cb:04:f3:91:19:33:5f:75:c1:
         07:55:c6:23:58:0d:21:d5:07:e1:35:15:62:ee:48:02:fb:18:
         ae:71:60:71:88:a7:84:eb:b3:5a:1e:49:3c:d9:16:03:ba:2d:
         f8:12:c1:81:12:54:cf:5b:e3:5e:a6:cf:50:88:7f:7b:ad:4c:
         9e:4f:53:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:53:42 2026 by rpki-client