Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa
File:                     79f5998a-9c67-3633-9ae6-274922dd2fed.roa (raw, json)
Hash identifier:          l91SxZQojYJpMh6QizH2hN0oyBMP3ojvv7COnRyki/4=
Subject key identifier:   9B:51:36:2E:DC:AE:56:13:8D:23:AF:3E:BF:72:3B:EA:EC:20:D0:FF
Certificate issuer:       /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
Certificate serial:       010D0C9F4328584F2957CF7A7F9C4103E5A03380
Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        198.51.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:cf:7a:7f:9c:41:03:e5:a0:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=9f86d563-955f-4465-9c07-f269e6ce1cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:04:a9:b1:67:ec:8f:84:79:e5:56:01:a9:
                    88:5b:fe:a4:e6:3c:ec:ad:57:a0:1d:30:c0:cc:05:
                    b4:09:a7:18:10:45:e2:36:ef:71:eb:24:cd:9d:af:
                    3b:17:2d:44:75:c1:03:98:43:ef:1b:b6:9a:b3:97:
                    fc:df:62:e1:64:c4:fa:2b:fb:71:c4:4f:13:6a:74:
                    a1:7d:ff:85:ba:e6:4c:08:9b:98:ae:89:21:c2:dc:
                    73:31:4d:cc:52:94:8f:de:5e:3f:c6:de:92:24:ba:
                    1e:3c:46:89:16:ac:8e:9a:33:0d:e1:6a:2f:fc:8e:
                    ff:90:1c:ec:5b:a4:25:83:35:0a:10:2e:88:cd:a1:
                    0e:76:fc:33:23:fe:ae:58:a6:a0:04:19:dd:f3:1f:
                    12:03:83:f7:5b:06:84:f9:70:61:8f:ff:1b:bc:61:
                    42:9b:8e:e5:7c:4f:c2:23:e1:28:2a:62:1d:77:f1:
                    5d:99:c5:e0:ef:a0:79:b5:b3:1b:60:33:e3:63:2a:
                    30:e8:78:a0:96:af:49:db:95:5e:75:64:02:b6:a8:
                    b0:f9:d2:96:4a:e3:11:7e:96:f2:b9:02:94:1c:98:
                    c5:a0:db:e6:fa:92:20:e7:45:ed:da:1a:42:21:ca:
                    1a:c2:c9:8b:13:e7:a0:f1:a2:f8:d2:c4:23:18:10:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:51:36:2E:DC:AE:56:13:8D:23:AF:3E:BF:72:3B:EA:EC:20:D0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl

            X509v3 Authority Key Identifier:
                keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:90:e8:18:f9:cc:91:7b:ec:3c:ea:19:52:6b:d0:39:0d:4a:
         2f:44:e3:d8:1d:8a:c5:90:75:45:db:65:ad:47:fa:3e:0f:98:
         14:f0:e7:ed:82:0b:d6:25:ff:f9:24:e2:d7:34:7d:38:6b:73:
         cd:8b:7b:7d:89:5a:4b:fd:73:af:22:20:f4:00:72:6d:5c:ec:
         1f:ce:ae:46:17:3e:de:a5:41:57:19:ca:ff:c1:06:f4:36:67:
         3e:64:43:f7:40:2b:fd:74:01:22:ee:9f:71:3e:fa:e5:30:b5:
         b8:67:a3:37:76:4c:fa:6a:8e:d2:44:4b:e9:62:db:cc:04:cd:
         d3:40:71:31:4c:bd:27:8d:b2:e7:73:17:e0:d7:f6:99:26:f9:
         b3:6f:64:9c:79:6e:13:2a:c8:4e:36:24:09:7a:86:31:93:5e:
         ba:20:43:19:74:02:9d:fc:ba:64:32:86:c0:45:25:0a:f8:b0:
         59:0b:69:f6:1e:45:98:6b:73:84:c2:ad:f3:89:f5:fa:d4:99:
         66:54:d2:18:7f:6a:87:87:93:0f:b3:2b:26:92:e9:ea:a0:fe:
         12:25:ee:bd:20:13:eb:94:17:78:94:34:5e:c4:ec:a5:86:d7:
         41:ba:33:6e:fb:51:e6:c9:7a:ab:d1:9f:2a:b9:56:8c:d6:ff:
         f8:ef:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:40:51 2026 by rpki-client