Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5c9a023b-9e57-32b7-a775-b0987be7341f.roa
File:                     5c9a023b-9e57-32b7-a775-b0987be7341f.roa (raw, json)
Hash identifier:          yPq/vgpViDngXuEiMEkSqGlfWWJFxbre71mZkUTNeNc=
Subject key identifier:   02:97:B6:A0:DD:FD:F0:1E:D3:85:02:7B:BE:E9:94:82:5F:B6:FA:EA
Certificate issuer:       /CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Certificate serial:       010D0C9F4328584F655D71B1B4C417D981421980
Authority key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5c9a023b-9e57-32b7-a775-b0987be7341f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     2635
IP address blocks:        192.0.64.0/18 maxlen: 24
                          198.181.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:71:b1:b4:c4:17:d9:81:42:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=67907feb-5142-40b3-801c-7f37ba7f5d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:b6:5a:3c:d4:99:84:90:cb:79:60:83:a6:
                    ec:8f:4e:85:e5:73:24:ed:5b:dd:62:d7:a4:c6:11:
                    2c:aa:9a:2a:26:ec:94:3d:fd:fa:d8:37:95:0c:ac:
                    c6:83:f8:a7:d4:dd:94:ed:9f:20:81:7d:4b:99:6d:
                    87:50:c7:6b:09:79:81:30:36:ee:b1:1b:93:8b:4b:
                    cc:66:58:24:9f:c5:e2:95:9c:f0:16:0e:c9:4a:08:
                    0e:8f:29:a9:34:8f:b8:4e:6c:2c:0c:9a:e9:89:93:
                    51:37:b6:a0:84:f8:da:db:e2:bb:cc:a2:82:07:e0:
                    e2:de:f9:41:85:6c:73:0e:5b:6f:17:4e:6e:23:ab:
                    6d:e3:c2:61:d8:e7:9f:52:6a:02:1e:07:93:87:0e:
                    f9:b2:c5:59:44:03:39:64:b0:7c:35:18:3f:b9:a0:
                    65:1d:c1:c0:fc:07:35:c7:76:cb:07:f6:9f:04:a6:
                    3e:f4:65:c9:50:46:e6:ba:1b:83:40:03:71:3c:c6:
                    b6:6f:5a:5f:15:5b:4f:fc:4f:81:3f:08:ca:df:67:
                    48:b4:e9:cf:e8:fa:a3:bc:e1:7d:c5:32:01:29:03:
                    5d:51:a6:be:c6:a0:b7:d1:48:61:9b:f8:45:0c:22:
                    f3:81:67:59:14:d1:e2:ae:73:ec:d0:38:5c:2b:ab:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:B6:A0:DD:FD:F0:1E:D3:85:02:7B:BE:E9:94:82:5F:B6:FA:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5c9a023b-9e57-32b7-a775-b0987be7341f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl

            X509v3 Authority Key Identifier:
                keyid:8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.64.0/18
                  198.181.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:3c:c9:c2:8a:90:ad:6a:5f:91:aa:cb:a3:8d:ac:69:f6:06:
         b4:f7:36:68:60:37:49:d2:fe:82:fb:0f:00:45:2e:ff:76:d5:
         e8:64:0f:9e:8f:eb:ce:a9:88:07:e4:33:79:0f:59:98:69:2c:
         d0:e0:4f:6e:d2:72:c3:7b:5f:db:92:bc:0b:f4:69:3a:a5:06:
         48:db:ab:0a:c8:e1:a2:2f:de:a2:df:1e:b6:2a:ff:52:38:a1:
         bb:c6:4f:08:67:36:e2:74:bc:7c:7c:15:a5:af:d8:bb:ce:66:
         ee:95:aa:52:54:0b:d8:27:0e:c4:17:bf:e4:3c:be:6d:03:71:
         a1:eb:c1:bb:62:e6:6c:a1:f2:13:f3:51:4b:aa:85:c9:40:78:
         6c:2e:1f:56:57:68:6f:4f:e6:e0:d6:ed:12:23:cf:df:99:51:
         24:19:ee:d0:6b:13:63:07:86:31:e5:48:c6:69:45:e1:32:6a:
         3b:11:e1:02:d0:21:44:d6:91:2f:c5:7e:d1:fc:88:bf:11:01:
         71:76:67:3b:22:3b:d1:7d:e1:f0:72:4e:7b:c3:5c:d6:21:d3:
         75:1e:9b:16:f3:dd:0e:e8:a6:b3:9d:48:d3:a6:97:72:7f:8b:
         97:e4:20:d9:dd:8f:a5:eb:bc:d3:aa:45:32:40:e9:91:38:1c:
         8f:52:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:28:24 2026 by rpki-client