Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa
File:                     2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa (raw, json)
Hash identifier:          pDdgvIKspA2wSb0jVDpMR4I6ZQ9yLFjBmj1XrHdEjEY=
Subject key identifier:   C5:53:18:3D:80:F0:42:0A:6E:0B:AE:94:BE:27:B2:5D:D9:C2:26:57
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584F4988998F868C6AD0ED1D4040
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8796
IP address blocks:        98.158.28.0/24 maxlen: 24
                          98.158.29.0/24 maxlen: 24
                          98.158.30.0/24 maxlen: 24
                          98.158.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:99:8f:86:8c:6a:d0:ed:1d:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=324741a5-9bf2-4e19-9922-f68393b9b257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fb:26:57:8f:ab:4b:03:c4:c8:50:88:26:6e:
                    2b:0e:c1:da:26:48:1b:44:9e:a2:95:c3:6a:f3:d9:
                    64:82:a8:ff:09:d6:c3:d9:68:27:35:17:3c:c1:63:
                    54:30:1c:93:60:16:69:06:1e:ca:da:3d:ad:fd:b3:
                    72:f4:e9:5b:d0:44:ad:1b:19:d4:2f:6b:74:62:bf:
                    eb:1f:ff:52:f7:67:e9:83:64:0d:9d:6b:29:48:43:
                    a8:13:c0:f0:46:19:89:4d:ab:f4:fd:9d:53:03:09:
                    52:4f:59:53:71:32:e5:91:65:bc:25:65:71:ca:2d:
                    04:fa:7d:96:a3:e2:7d:76:76:5a:bc:e5:49:57:ec:
                    00:2e:3a:ac:c4:48:3c:97:39:59:9b:47:f5:67:be:
                    d4:c0:86:86:58:35:e3:02:16:ec:3b:c5:b0:42:27:
                    1a:69:f9:dd:d3:73:6d:03:74:79:99:d6:f1:73:bb:
                    8c:b1:1a:ff:0e:ff:b0:af:42:ba:5c:61:da:ce:1c:
                    c1:28:a3:78:c3:9b:55:69:f0:62:92:2a:86:59:e9:
                    04:d6:d3:75:a3:48:ea:08:e6:eb:3e:fe:b1:19:d3:
                    98:58:d3:9f:08:6b:74:72:cb:54:40:f3:85:19:44:
                    43:7b:6a:5a:52:cc:b9:02:2e:11:20:44:44:a1:c8:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:53:18:3D:80:F0:42:0A:6E:0B:AE:94:BE:27:B2:5D:D9:C2:26:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:bb:f3:58:7a:39:1d:fe:11:d4:fe:97:9e:f9:7d:47:f1:
         39:a3:ac:07:43:76:d7:b3:d8:2c:f8:18:55:ed:64:f9:10:63:
         f4:85:b8:0a:cd:3c:9e:ed:8e:b7:be:c7:2e:f5:0d:d0:3d:64:
         b9:dd:b2:02:03:47:09:f7:dc:b8:e4:89:63:59:eb:bf:78:ca:
         24:0a:15:88:0f:9b:9c:87:8d:a8:54:5e:68:61:3e:e0:0b:ee:
         ad:4c:1b:18:88:45:7c:b5:34:7d:f5:81:cf:45:46:b2:7d:6f:
         39:eb:4f:95:a3:d1:dc:4c:8e:b0:57:1b:38:a5:2a:7f:cd:50:
         3f:63:de:e6:cc:2f:dd:61:7f:ae:1e:f8:d3:f2:01:b0:eb:c2:
         98:11:db:3a:67:81:06:1a:7d:00:5f:fd:de:dc:d2:d3:5b:95:
         ec:9f:b3:a3:87:2f:0a:86:53:77:9f:fa:45:c6:80:17:00:9d:
         94:1d:f1:67:4c:90:5b:2d:e2:d2:a6:de:7c:01:67:3b:cc:70:
         06:21:71:2c:9a:f1:86:f7:29:02:7c:be:a4:9a:36:27:ff:d0:
         2e:81:d3:9a:58:56:b0:72:d7:00:b1:80:62:09:7c:75:9b:c5:
         a2:09:66:06:15:1a:f1:ca:b6:c7:54:64:9b:e7:33:0a:cb:d7:
         e0:00:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:43:44 2026 by rpki-client