Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa
File:                     99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa (raw, json)
Hash identifier:          6O2g0gChagl8DLNavfe5JR8uB+yfhXiDOkLTTzGLWi8=
Subject key identifier:   A3:78:7D:C1:82:28:72:6D:33:E4:FE:DE:58:56:24:36:A3:AB:82:EB
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584F093CD5F9BAEA218E9D2B2200
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        216.98.226.0/24 maxlen: 24
                          216.98.227.0/24 maxlen: 24
                          216.98.228.0/24 maxlen: 24
                          216.98.229.0/24 maxlen: 24
                          216.98.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d5:f9:ba:ea:21:8e:9d:2b:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=8c014ba6-c7e0-45b5-b84b-b87ed15c29e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:be:91:1e:6f:b6:fc:2e:73:21:c4:8d:96:
                    51:5e:fc:8c:a1:97:c6:1f:1f:e2:69:f9:91:b2:73:
                    27:d1:f9:53:ee:7d:c5:d6:be:79:2d:65:db:cd:22:
                    37:d4:cd:02:42:02:86:eb:65:c1:a8:e8:5b:80:55:
                    25:a0:7e:da:6a:6b:83:9e:fa:d9:0f:04:ba:73:e9:
                    94:6b:df:b5:11:24:ee:ff:5e:8d:6d:b0:82:c2:65:
                    4e:9c:d5:98:33:1e:1e:c2:be:51:66:3a:5e:e9:8c:
                    1b:fe:e0:1d:33:3e:2f:75:ff:de:23:b5:12:4e:f5:
                    65:52:5e:7d:1a:b9:40:69:79:71:b9:0e:49:ac:a9:
                    0a:30:df:a6:62:bd:60:6b:3a:77:77:8b:bd:41:ac:
                    62:89:00:7a:d3:a7:e2:ae:d8:30:29:f2:34:79:94:
                    90:7e:e5:18:8e:28:13:cf:ff:ee:de:ac:3e:c2:e2:
                    f4:d1:af:cb:d5:a3:fd:c2:3c:c8:f1:59:39:69:d6:
                    44:e5:01:18:71:ae:70:06:e5:62:57:57:4a:8f:97:
                    f9:26:93:7a:13:7f:14:21:36:45:b5:38:ae:88:5b:
                    3d:eb:4b:8f:5b:be:11:c2:cf:91:aa:04:32:a1:f6:
                    02:16:a9:72:50:c4:df:a5:42:89:e4:30:3d:fe:ae:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:78:7D:C1:82:28:72:6D:33:E4:FE:DE:58:56:24:36:A3:AB:82:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/99b9e094-f88d-3af6-bcbd-9be926dad6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.226.0-216.98.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:3a:8c:32:b6:4e:c5:40:c1:48:40:09:5f:99:47:7b:08:89:
         5c:13:bc:c9:9d:18:c9:f9:44:ca:bf:d9:18:15:e5:ac:46:5c:
         32:fb:9f:69:70:d7:73:9f:07:22:9a:99:25:c5:a4:fd:ea:6a:
         40:95:bb:d1:86:53:51:a8:a3:52:0e:6f:9c:38:21:9c:30:91:
         c9:e3:bc:f1:1a:f1:09:f0:96:92:0a:40:1c:28:7e:b1:e5:2c:
         72:ce:0b:38:dd:ae:a8:49:15:9f:39:c1:02:c5:07:08:9b:2e:
         65:5d:b3:f3:9c:51:94:07:61:7d:42:e8:76:a5:12:62:a4:62:
         22:8d:61:e7:fc:e3:3b:2b:b2:99:24:cb:9f:ec:4d:ef:62:7a:
         da:a7:01:4a:33:e2:ba:f1:3b:1e:77:26:e0:70:9e:f0:1f:c0:
         5b:9a:d7:2e:4d:84:8d:99:2c:5a:0c:25:cf:6b:01:56:04:28:
         59:18:01:75:f0:db:d1:be:4e:b8:46:39:1d:e2:28:08:c1:89:
         64:d6:ee:04:be:95:98:1d:53:84:c9:ea:d4:48:89:8f:ec:a2:
         f5:27:08:30:22:67:2b:df:31:ba:27:a8:ba:19:13:5a:5b:8d:
         d4:07:71:68:96:d6:20:61:06:30:93:03:0a:f2:ea:d0:37:20:
         01:15:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:39:52 2026 by rpki-client