Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/5e71ab30-6b7d-3f3b-a4e1-6d0418f7512e.roa
File:                     5e71ab30-6b7d-3f3b-a4e1-6d0418f7512e.roa (raw, json)
Hash identifier:          KjccpEAfqeDlP9XHoDY4rUNh38BL9j12zZPZUaxc7gA=
Subject key identifier:   30:58:17:31:2D:E5:9E:E1:9A:75:42:1A:5F:92:1C:D1:7E:96:02:1E
Certificate issuer:       /CN=9bbbcdeb-6e56-4c47-98f4-ca2daee4e669
Certificate serial:       010D0C9F4328584EE7BC96BE85C373A731BE92C0
Authority key identifier: BD:AB:98:31:15:4B:AA:88:83:4F:12:B8:0E:51:BE:10:F4:3B:4C:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/5e71ab30-6b7d-3f3b-a4e1-6d0418f7512e.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     402361
IP address blocks:        204.126.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:96:be:85:c3:73:a7:31:be:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbbcdeb-6e56-4c47-98f4-ca2daee4e669
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=ba7b1a28-6412-43c7-812b-13305e8f9612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:ca:30:76:f0:e9:87:e4:31:f6:a0:ce:96:
                    63:9d:42:fc:19:40:b3:3e:4f:51:2c:22:5b:da:24:
                    0d:86:cc:0c:fa:16:69:1c:a3:37:ab:a4:b7:c1:d1:
                    bb:fd:94:40:7b:b8:ea:2c:eb:97:1b:c6:03:2f:c3:
                    34:ca:f0:df:1e:ac:79:16:5e:dd:a5:2d:10:06:ca:
                    83:dc:66:ef:8b:02:66:55:be:2d:f0:2c:5b:e9:58:
                    46:36:a7:04:59:8e:06:1c:42:3d:14:9b:07:98:14:
                    56:68:df:d5:b1:8f:75:46:43:69:c0:c3:ca:c7:3d:
                    45:25:34:ad:e0:58:42:fb:ba:2a:82:bd:b1:78:14:
                    58:9d:22:f4:d7:0d:0f:b2:19:0f:7e:ad:a2:be:7e:
                    38:23:30:d0:32:a3:7b:b1:92:57:42:65:73:b7:5a:
                    e8:79:33:f3:53:02:f8:60:46:32:d7:e1:7b:84:b9:
                    a1:7d:a6:13:d4:12:b6:af:3e:ae:57:cc:71:0b:b6:
                    66:29:32:e9:4b:ad:1e:bc:57:7c:79:ba:d1:e0:5a:
                    b8:bf:37:bf:34:e5:cf:61:25:3d:35:61:0a:24:5c:
                    f8:9c:03:a4:d5:82:3e:e4:0c:38:c9:11:ad:24:d7:
                    20:da:4b:54:80:16:b5:38:dd:9f:7c:52:c5:e7:22:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:58:17:31:2D:E5:9E:E1:9A:75:42:1A:5F:92:1C:D1:7E:96:02:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/5e71ab30-6b7d-3f3b-a4e1-6d0418f7512e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.crl

            X509v3 Authority Key Identifier:
                keyid:BD:AB:98:31:15:4B:AA:88:83:4F:12:B8:0E:51:BE:10:F4:3B:4C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:1c:f9:c7:3c:37:e7:89:d2:db:a4:c5:39:f5:39:85:55:
         a8:fd:91:a4:84:72:53:f1:69:e3:ae:1b:69:77:fb:62:9d:0e:
         37:99:9c:7e:d4:56:97:c2:a1:07:f2:d7:7e:fa:24:83:97:bb:
         79:0c:eb:26:8c:db:37:df:4a:e0:03:79:1b:cf:4b:7d:56:62:
         13:e2:c3:bb:29:5e:32:f2:e6:1d:b3:da:4a:11:70:4b:5f:06:
         1d:42:2f:24:a2:ff:18:fb:2b:ec:6e:00:14:c7:11:4a:f1:39:
         16:cc:ae:28:ad:15:0a:27:bf:d0:e0:a6:6f:3d:0b:2e:8d:f4:
         b4:50:cd:01:f8:dd:0b:f5:84:32:63:dc:4e:a6:e4:4c:5e:ac:
         2d:78:b4:fd:e2:96:3b:5e:95:07:c3:c8:4b:b7:16:8c:68:15:
         4b:1f:42:fe:0c:99:88:ae:39:43:4b:51:7d:5c:be:e7:dd:5c:
         b3:f3:0f:a4:a3:5a:56:09:93:45:62:23:73:5d:52:b5:2e:b0:
         f1:25:cc:4b:e6:89:b9:d7:e3:72:e4:62:71:da:b2:2e:aa:4c:
         bd:0e:76:a8:16:50:38:08:88:08:26:b6:ba:ba:0c:88:af:5f:
         b3:f9:81:99:ba:b4:dc:b7:38:68:82:b1:8c:39:52:23:22:21:
         e8:15:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:18:54 2026 by rpki-client