Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa
File:                     b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa (raw, json)
Hash identifier:          fXgXbkV2ik2Isey3uJq3+XlushHjfVq/kz7Duv5SFV0=
Subject key identifier:   DB:4D:66:A4:DC:E6:B9:D4:81:AE:54:A1:D0:9A:CD:49:1F:34:BD:84
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584F2EED159E2E5E39ED6D0BD500
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     394285
IP address blocks:        174.137.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:15:9e:2e:5e:39:ed:6d:0b:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=c57beba8-310b-4daf-8975-4dcc11f51c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:ea:53:db:9f:1b:65:e2:bc:be:85:1f:81:
                    aa:99:bd:0e:c6:d2:3d:2c:1b:af:11:c4:61:30:1a:
                    fd:cc:39:11:60:2c:d8:bd:6d:c3:81:09:a2:60:56:
                    2c:f6:a6:ce:6b:cf:dd:2f:0c:98:1a:22:15:8a:4c:
                    43:59:f1:2c:f8:47:bc:0f:00:5f:ba:d8:82:8a:c0:
                    0b:a1:58:a5:48:b9:31:4b:dc:92:ed:6e:ec:d7:f4:
                    e9:a6:ac:1b:a3:b5:c0:c3:61:3e:5a:bb:db:fc:f5:
                    94:3f:64:d6:87:7e:f0:ff:69:42:b3:d5:29:f9:86:
                    57:0f:76:fe:c3:a2:0e:46:00:16:c0:ca:43:67:0b:
                    48:2c:b2:fc:88:1e:a0:19:9d:ba:27:ed:7b:33:27:
                    66:88:02:48:59:7e:11:54:47:04:8a:83:8e:a4:63:
                    68:93:74:dd:4a:d5:2b:12:c2:65:3c:70:4a:13:5d:
                    3e:8c:2b:cd:c0:02:bf:4d:79:dd:11:e3:93:fb:7a:
                    e4:e8:89:1d:a5:61:60:b2:7d:38:1e:a7:78:15:ba:
                    e3:b6:27:13:7d:53:20:e7:bc:77:33:41:56:ff:0b:
                    65:56:a5:20:75:0e:a2:93:72:66:6a:12:9c:6e:25:
                    ab:29:f7:de:6d:86:ad:3f:b6:b4:fb:91:dd:64:36:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:66:A4:DC:E6:B9:D4:81:AE:54:A1:D0:9A:CD:49:1F:34:BD:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:0c:5c:c9:98:31:d9:0b:f8:e8:09:58:60:72:25:5a:08:
         49:22:d0:a3:7b:8d:9c:4e:f5:52:83:6f:b6:5e:5f:2a:ef:dc:
         85:6b:d6:3d:9d:52:39:90:0a:7c:fb:9f:0e:16:30:fe:67:31:
         e2:e8:87:f9:ed:fd:dc:0f:a5:15:ec:fd:1c:86:cd:d0:b0:29:
         fe:d2:85:06:7b:a9:e2:9a:02:34:78:9f:94:a6:ae:c9:29:59:
         1b:86:45:0e:29:c8:9a:95:35:f3:5d:a3:bb:4b:5b:9f:ed:c7:
         42:05:28:0d:52:42:3f:ad:3b:92:0b:21:48:4d:b9:b8:2e:5d:
         ed:53:0a:b2:96:c1:36:f9:7d:a8:11:d4:d3:4c:45:5b:cd:95:
         1f:17:41:c1:54:cc:00:11:d2:97:c1:7a:f4:19:1d:36:7d:28:
         df:72:d5:dc:c6:13:9a:0c:40:d8:97:aa:7d:06:cf:1f:3d:f9:
         14:19:46:00:a1:80:7c:23:70:10:2e:28:9f:3a:94:00:8c:b9:
         07:c0:7b:fd:c3:06:de:5a:41:1b:a1:37:2e:4f:cd:ca:37:85:
         26:7b:35:6a:f7:ce:41:4c:15:9a:bd:08:fc:26:30:73:86:16:
         29:a8:31:a3:5f:eb:14:d8:fd:97:bd:eb:81:1b:9f:52:87:c3:
         ec:1f:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:36:17 2026 by rpki-client