Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/298ad804-e1e3-32a3-89d9-be67e2e05732.roa
File:                     298ad804-e1e3-32a3-89d9-be67e2e05732.roa (raw, json)
Hash identifier:          VWcHgTC7lM4kCi9CkF00Ow92ciNaQc2pYh1bth+kz9Q=
Subject key identifier:   F9:47:2E:6F:8F:3F:38:07:F4:1E:05:4E:0E:D6:F6:C2:B2:DA:0E:37
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F14678A1826953323309BAFA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/298ad804-e1e3-32a3-89d9-be67e2e05732.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     219329
IP address blocks:        96.126.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8a:18:26:95:33:23:30:9b:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=2a3ca9cc-2da4-4fbb-802c-c5de36e2c813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:7e:f0:37:39:41:fa:fc:29:d9:28:4a:a2:
                    51:2b:fd:bc:55:70:9b:90:a4:20:c1:c4:af:e1:66:
                    74:c9:92:8f:a2:98:85:0d:fb:0c:fb:d2:a1:bd:6b:
                    75:0b:f6:7d:6b:1d:71:c0:91:76:89:27:f3:f9:a7:
                    ba:b1:fb:c2:ce:8f:a8:fc:01:ea:57:57:2d:ad:9f:
                    15:cb:42:31:79:03:a2:35:20:93:d7:c6:1e:2f:0b:
                    81:0d:96:c8:60:ad:5d:43:c6:ff:50:20:7b:a3:37:
                    ce:41:f9:63:c5:68:38:77:48:ff:90:73:65:db:05:
                    6a:7c:b0:5e:fc:2e:da:88:3a:48:1a:c7:d7:57:6b:
                    e2:e2:4a:e2:0b:41:2d:76:d1:98:0c:37:a8:f3:80:
                    db:92:ee:f4:3f:f9:4c:20:cc:e6:52:b3:57:44:ba:
                    1d:b8:32:dd:47:09:06:e1:6a:d3:54:fc:25:c7:04:
                    de:3f:ef:eb:d3:fa:af:67:e4:f5:7e:b2:f7:23:ea:
                    e6:6d:c9:95:6b:4d:a6:d0:e1:1f:cf:61:95:82:a0:
                    50:c3:43:0c:56:db:0c:13:38:e5:47:1a:af:a2:69:
                    a3:5e:d0:1e:1a:eb:68:20:4e:3e:c6:6b:64:1f:6c:
                    56:e6:15:22:87:89:e4:1c:8b:af:34:f7:e6:c6:e5:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:2E:6F:8F:3F:38:07:F4:1E:05:4E:0E:D6:F6:C2:B2:DA:0E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/298ad804-e1e3-32a3-89d9-be67e2e05732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:49:19:35:ff:82:d1:da:5e:70:29:d6:1d:35:f3:f3:6c:bb:
         d6:f0:bb:82:4b:9b:82:d2:2a:65:12:1b:b5:54:05:57:20:02:
         60:31:b7:6e:ff:75:18:4e:d3:f6:a9:65:de:32:ce:f5:67:c6:
         10:4d:2b:c4:21:44:77:6b:e6:f5:b1:71:f1:1c:e8:a3:26:8f:
         b4:08:21:3e:8c:ab:d1:24:df:0c:43:6b:32:5d:73:b9:77:58:
         a2:90:59:04:eb:f4:8e:48:68:e4:4e:29:1a:1e:51:60:3a:73:
         28:e7:cf:f9:cd:aa:3e:9e:b9:19:b5:48:4e:db:2b:25:77:2d:
         a8:3b:72:44:e6:0d:bf:38:af:2a:e2:dd:b7:1e:fb:56:e8:08:
         0b:d4:c8:d1:70:0c:2e:d4:4f:90:65:ba:10:85:a2:74:0f:24:
         03:47:7f:f6:d3:ab:06:25:f3:49:d6:ae:ca:a1:0d:63:bf:1f:
         b9:a6:fe:e2:ef:ea:0b:cd:56:2d:aa:a1:c3:2f:6f:9d:02:14:
         a4:28:52:a7:77:c0:71:eb:77:d3:26:f7:8f:04:d2:37:28:65:
         f1:28:55:b5:cf:b7:e8:d2:df:bf:dc:de:57:12:18:d2:dd:10:
         0a:8b:6e:d2:d3:97:45:f6:80:2d:72:21:f1:41:69:c0:11:0e:
         93:49:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:04:18 2026 by rpki-client