Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa
File:                     625ea671-b6e5-3995-8461-56bd63465e40.roa (raw, json)
Hash identifier:          RtRb1QwNflgqgv1fqyr+FHWJEHvasoKG0znvILM5P9U=
Subject key identifier:   97:8B:96:3B:30:85:58:BF:E8:73:BB:64:8E:74:DD:17:59:C1:05:5C
Certificate issuer:       /CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
Certificate serial:       010D0C9F4328584F4973A74BB6BF129FCB793240
Authority key identifier: 3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395485
IP address blocks:        198.179.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a7:4b:b6:bf:12:9f:cb:79:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fb7277bb-bb09-4d6a-ab2e-4cb30c8b0366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:e0:9e:77:5f:da:4a:ab:4f:b2:e5:c5:8e:
                    d4:3a:5d:1b:06:3e:ab:97:ed:b8:98:0f:ff:c5:fc:
                    5f:77:cb:fa:b4:0d:3f:f0:66:49:29:53:ba:03:a6:
                    c4:dc:27:42:ce:49:ea:b5:51:fb:49:7e:f1:d0:c3:
                    6c:e3:81:e0:7b:b1:13:28:c0:bf:e9:e5:a0:38:d1:
                    b9:c9:42:9e:cd:37:a7:c6:72:12:59:cc:f2:74:21:
                    bc:94:36:42:03:61:22:94:73:94:d8:28:73:10:bb:
                    05:aa:9e:e7:4a:b8:3d:6b:82:ef:48:03:96:e4:c2:
                    6f:27:02:76:ae:a8:13:5e:22:d2:85:5f:6f:ba:2a:
                    7c:e1:13:c3:53:aa:3a:62:8c:92:bf:cf:b8:0c:4b:
                    b4:5c:0b:87:f0:61:b7:4c:e8:30:6a:b3:40:88:79:
                    51:52:e5:f8:52:be:f2:b5:d4:c8:4d:85:64:19:f3:
                    c8:57:c0:78:52:d8:cb:8a:8e:cd:26:5c:d7:0a:ce:
                    b9:11:39:96:20:3c:55:bb:ee:4d:da:36:9f:7a:a0:
                    66:0a:9c:78:fb:5d:5b:a8:92:9f:d5:cc:bc:1e:8d:
                    9a:fc:c0:b5:49:99:d1:9a:e5:5f:69:01:72:42:75:
                    8d:b0:d8:fa:7c:15:2d:69:12:f7:ea:87:4c:48:08:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8B:96:3B:30:85:58:BF:E8:73:BB:64:8E:74:DD:17:59:C1:05:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl

            X509v3 Authority Key Identifier:
                keyid:3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:be:b8:7e:ef:aa:ab:ba:5e:eb:48:2d:f4:89:62:d3:ba:2a:
         e4:c1:4b:bf:16:06:3d:c9:fc:e6:9d:7a:9f:d8:74:d7:84:8c:
         89:42:2f:36:69:ab:1a:75:58:d0:35:c4:8d:56:11:3f:1e:0a:
         c1:c3:92:74:f0:9f:4f:8e:f9:7c:e7:9b:3d:3a:6b:1a:af:e0:
         4e:50:0e:5b:27:ea:ed:68:bd:98:4a:d5:5a:fa:8a:4b:10:79:
         84:e8:8e:a5:17:52:b5:e9:6d:1b:da:71:35:63:b9:5a:e0:0b:
         91:fe:37:de:6a:b7:75:88:30:46:0a:19:e4:09:00:99:42:a4:
         04:0f:18:65:94:2a:b1:20:82:be:65:df:e0:55:cb:f7:80:6c:
         54:85:d3:d6:ac:c3:0d:0f:e5:35:9b:f9:00:1b:b0:2f:14:24:
         09:f8:0c:9e:65:d1:53:0a:6d:bf:53:8e:ae:ca:79:d6:ce:93:
         99:29:06:ee:49:02:59:68:9e:58:be:20:bf:20:45:9a:15:d4:
         5a:f1:59:7b:e2:09:be:02:1f:ad:f9:02:e6:65:65:39:49:41:
         6f:06:9b:b3:9d:41:42:d2:bd:9e:a0:d0:8c:54:e0:37:bb:20:
         47:d3:33:cf:43:69:52:89:24:bb:c0:d2:12:0c:46:71:93:43:
         30:7b:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:40:42 2026 by rpki-client