Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa
File:                     cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa (raw, json)
Hash identifier:          m31qsyIaHexuyLtvJdFrR23fLuAGX/awSSZ7NdhGUjs=
Subject key identifier:   63:01:4F:F5:C8:67:0C:3C:77:50:74:BC:DC:85:58:DF:78:5F:97:E8
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584EFCACBC3B28A4158694DDC3E0
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     32133
IP address blocks:        98.124.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:bc:3b:28:a4:15:86:94:dd:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=545e84ee-5507-49b1-ac96-1527cb31791f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:78:82:c9:4a:86:1b:d5:3e:c7:46:0e:94:
                    aa:24:d2:9c:96:39:88:56:6d:f3:7c:ab:2d:c6:ba:
                    de:23:e8:b4:92:84:17:2c:5c:8a:f6:62:b7:cc:36:
                    aa:b5:dd:0d:cb:87:1b:27:fa:f6:8e:0a:7a:1d:68:
                    b5:c0:31:55:16:aa:3d:27:16:1f:74:6f:8d:48:8f:
                    35:75:ef:85:11:3e:39:4e:49:bd:9d:e8:7a:1d:6d:
                    12:6f:4c:fc:ad:15:79:70:f8:84:0c:eb:e0:fc:62:
                    8d:df:22:56:d5:5c:0f:86:35:e8:6a:78:1a:87:20:
                    6d:3b:ad:13:73:dc:5a:37:3d:d4:6e:f3:27:66:48:
                    fe:71:e9:59:1b:d2:32:a2:d5:49:92:b4:de:13:94:
                    89:5b:05:bf:ef:05:bf:ef:80:48:f1:7a:c8:b9:ba:
                    fc:d0:fc:21:2b:f1:71:fe:fb:40:e9:f9:dc:90:36:
                    03:f2:3b:ad:e4:02:fe:e4:de:ea:20:74:1b:8a:79:
                    69:c7:cd:0c:37:f1:eb:75:bf:97:84:d9:01:52:16:
                    2b:55:41:e0:3e:b2:60:25:52:0b:45:1d:85:1c:a6:
                    7c:59:8c:e8:1e:ab:da:10:01:e5:d6:fe:ea:80:e2:
                    1f:a5:e7:f1:b4:92:37:0f:0a:6d:4d:b7:a8:5e:28:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:4F:F5:C8:67:0C:3C:77:50:74:BC:DC:85:58:DF:78:5F:97:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:07:6e:b3:03:94:d9:8e:3b:8e:54:18:57:cd:08:75:1d:
         8f:f3:fe:e6:60:b3:df:aa:0b:fc:68:2b:7c:b0:8c:a5:d0:1e:
         68:c0:b2:5b:0d:0f:ad:59:b8:4e:1b:cf:7f:d7:19:78:9c:e6:
         ff:46:ca:28:af:6d:92:ee:56:8d:a2:cd:87:4e:31:b6:f9:da:
         00:f8:51:9a:45:31:b6:ba:fc:fb:d7:1d:15:91:4b:60:11:1a:
         51:65:ba:22:59:ec:b1:31:f6:a2:42:81:51:de:12:06:dc:03:
         1c:b4:d5:f3:9a:bb:f4:99:04:a5:6d:48:34:c5:1e:28:1d:4f:
         06:b1:9a:f3:06:d3:73:5e:85:95:81:73:af:e2:58:4d:56:06:
         e2:12:9e:40:f5:44:ac:5b:63:91:73:d1:ce:ae:57:52:38:0c:
         3d:ff:e1:f6:8e:bc:d7:6f:68:cb:cf:53:2f:46:48:6a:f5:6b:
         7f:25:98:59:50:34:a6:4a:00:f6:3a:d7:89:5d:cf:ba:18:b2:
         fe:df:8c:09:25:75:12:7c:8a:2e:3e:ae:ff:36:39:17:92:0e:
         af:d6:7e:4c:a9:82:ae:b7:5b:bd:d7:50:54:ae:b6:d0:5c:0e:
         61:62:79:5f:d5:96:e0:12:34:0f:be:b7:ad:b5:ec:c6:a7:6e:
         ad:82:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:47:44 2026 by rpki-client