Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/098e061a-4038-3670-91a7-ce4b93406fe3.roa
File:                     098e061a-4038-3670-91a7-ce4b93406fe3.roa (raw, json)
Hash identifier:          CAK+8s9U8yOK7T4/5uEuqG4R0vtAgIjqg4yvdnPO7Qw=
Subject key identifier:   A6:F4:A7:C1:03:F1:4B:A2:4D:B1:FD:D0:9F:78:33:1E:ED:19:B9:22
Certificate issuer:       /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Certificate serial:       010D0C9F4328584F093CE9DEBD5A69130CE1D918
Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/098e061a-4038-3670-91a7-ce4b93406fe3.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        212.32.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:e9:de:bd:5a:69:13:0c:e1:d9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=960f4a9d-50d5-4a12-a087-1de506cfb1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:2a:53:81:e8:c4:1a:b2:c8:0e:be:aa:f0:
                    51:19:77:ee:40:a2:bd:78:91:34:3d:96:bc:dd:a0:
                    6a:c1:58:9e:fd:f2:22:c3:4d:9b:f9:89:fd:fb:67:
                    64:23:92:cb:8e:a8:86:57:90:dd:db:8e:1d:45:33:
                    4f:7d:3d:79:73:10:8e:76:46:e4:5d:87:c8:5b:d5:
                    e5:34:3d:41:e4:0e:e0:33:73:5a:82:e9:dc:88:41:
                    a8:e2:7a:e9:b3:f8:e1:40:7d:83:33:57:b4:94:16:
                    cd:91:25:be:2c:50:be:8d:56:6b:6f:c5:10:a1:a4:
                    f1:70:5c:66:a8:e4:e0:7b:a6:57:93:b6:5e:c2:96:
                    77:f1:11:f7:01:e3:d4:f5:8e:61:04:ea:8b:c1:89:
                    ce:50:23:ff:56:58:a1:c4:fe:99:42:58:77:41:17:
                    5c:70:33:91:58:0a:f6:d1:41:84:e4:d4:7f:ee:a0:
                    3a:1c:d3:1a:04:2f:f9:6c:ba:4a:a0:7b:8d:9a:44:
                    b3:1a:67:8c:ac:2e:48:f8:ee:47:96:a5:b6:1d:37:
                    e3:93:de:7a:12:bf:ab:19:bc:a5:46:de:81:b9:0b:
                    ad:4c:45:93:5a:83:c4:a0:c3:8c:55:48:17:84:a9:
                    c4:c7:0f:b2:39:5c:6c:0d:16:ac:5e:d5:61:e9:9f:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F4:A7:C1:03:F1:4B:A2:4D:B1:FD:D0:9F:78:33:1E:ED:19:B9:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/098e061a-4038-3670-91a7-ce4b93406fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.32.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:47:92:35:d8:46:40:0d:9a:e7:17:ad:c3:9c:c4:4b:94:12:
         a7:7c:8b:ff:ca:be:d0:f3:98:a4:f0:49:9a:29:ca:11:02:86:
         9b:f7:0b:fb:1a:b8:22:17:9e:e5:5e:0a:56:b4:ed:0d:c0:e9:
         06:38:7f:c4:72:22:4a:06:22:4b:67:11:9e:b7:03:4f:62:9c:
         58:6d:ea:7a:da:59:12:94:5f:f7:dc:7f:4e:dc:a7:a5:f4:b7:
         40:32:82:ca:e1:31:8d:1d:76:c8:5d:3d:8e:de:0b:cc:0d:51:
         2b:65:14:b2:92:b3:1b:eb:84:19:a6:7a:c5:ef:db:4c:cc:10:
         b2:b7:95:a2:c4:f5:05:b1:ee:11:56:20:af:e7:0f:08:99:d1:
         fb:79:a2:82:5c:94:e4:31:8d:e0:b8:d7:a2:ec:de:2f:0d:79:
         b6:e1:93:28:00:34:08:39:44:e6:63:43:04:ab:b6:48:f9:58:
         58:48:94:5e:1f:05:3d:b8:d1:8f:3c:2d:55:c3:3d:c9:6a:2d:
         2d:93:36:da:4a:56:3d:26:2e:ad:63:6c:15:8c:99:da:2d:6c:
         49:32:47:0c:e9:99:f4:1f:ee:23:b8:ca:50:b1:c3:8c:83:b4:
         21:e4:a2:8b:d0:fb:1d:f5:ae:24:f2:35:f1:c8:41:70:b2:09:
         49:2b:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:12:45 2026 by rpki-client