Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/5cde696b-8b96-3519-97d5-3564fcf79aed.roa
File:                     5cde696b-8b96-3519-97d5-3564fcf79aed.roa (raw, json)
Hash identifier:          /E4ILnqfzwxChACf2zG7nb4DXiVE0RUA05NCv7Hb010=
Subject key identifier:   BD:82:A4:A0:9E:2A:48:0A:46:83:EE:B5:B7:15:48:FE:34:56:FF:6B
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F4328584F23C28432063164FB3E47EBE0
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/5cde696b-8b96-3519-97d5-3564fcf79aed.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     400175
IP address blocks:        198.133.237.0/24 maxlen: 24
                          2602:fa02:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:84:32:06:31:64:fb:3e:47:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=a4755a6d-338e-46a1-8a4e-ccb68187d2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:ab:62:2d:86:7a:b9:53:99:6d:2b:4f:25:
                    06:31:26:ea:e5:98:de:c9:c4:ec:93:31:ad:98:42:
                    dc:6f:c4:0d:c7:63:4d:4c:5f:6a:87:46:d0:9c:d6:
                    da:e7:61:ee:e5:35:38:09:e8:e0:f1:18:34:2f:86:
                    64:6d:72:fe:11:d3:e0:92:ae:b9:92:54:31:60:06:
                    64:78:b9:ee:6d:a7:09:71:0b:ac:a0:87:3a:3c:db:
                    48:11:8c:e0:d6:65:1b:14:3d:14:50:7c:e7:c8:5b:
                    58:53:37:db:38:88:f8:37:89:48:72:8f:1c:9d:d6:
                    a5:31:c7:c1:5a:1c:99:9d:52:8d:ba:4e:de:36:e9:
                    bd:b8:99:1d:8a:7a:9d:e7:58:6e:ec:92:4a:7b:23:
                    aa:5a:1e:2e:43:c4:46:f1:7c:1a:d9:b9:87:45:74:
                    5b:1e:8b:d0:9a:86:3d:71:b9:8c:46:02:f9:62:83:
                    da:d9:88:cc:7a:aa:87:5e:b1:62:7e:fb:6d:0d:28:
                    6d:39:a3:1e:18:3c:9e:a8:fc:d3:87:91:9c:02:de:
                    31:56:09:22:c4:17:9e:a4:ab:75:2a:0d:9d:f6:85:
                    40:a9:39:fa:c2:24:f4:0b:26:97:2b:ae:3d:d1:19:
                    5f:88:22:26:e4:9a:31:73:b7:8e:d5:db:5c:af:e9:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:82:A4:A0:9E:2A:48:0A:46:83:EE:B5:B7:15:48:FE:34:56:FF:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/5cde696b-8b96-3519-97d5-3564fcf79aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.237.0/24
                IPv6:
                  2602:fa02:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:41:90:b9:f2:f7:fc:f2:23:48:69:d7:0f:66:32:62:44:8b:
         a3:e6:85:b0:e9:a1:bb:d9:05:40:a7:1d:d3:91:21:b9:d6:f5:
         42:af:4b:37:ed:c6:85:43:18:d3:e1:f3:bf:f9:0c:4a:bd:c6:
         85:a6:27:0a:fb:ea:44:90:7d:da:47:9f:a3:f8:7e:71:8a:4e:
         0c:18:c4:d5:2c:b0:c0:91:f1:3e:87:ac:ef:89:c7:7b:42:c6:
         5b:65:ad:ec:09:62:24:d7:89:26:03:4c:83:7c:d7:0d:58:7a:
         a1:a1:da:9f:51:3f:ad:44:68:ad:90:8b:0b:30:c5:70:23:9b:
         ca:30:83:d4:70:4b:9c:a2:44:39:1a:65:d3:4c:4a:06:95:75:
         4d:5f:a3:09:bd:a0:2b:a4:dc:e5:ac:ec:d4:f0:85:7e:e2:d4:
         dc:9f:e3:cd:7a:2d:b7:60:80:f5:55:56:d9:d7:08:bb:23:4c:
         3d:25:96:6e:ed:f9:62:01:b9:89:1e:9b:b8:85:35:0e:b1:03:
         bf:d7:81:1a:5e:73:10:51:e9:42:81:a0:63:06:33:64:14:a2:
         ea:d6:7b:00:e2:da:30:21:3f:6c:de:a9:39:56:ac:fe:31:09:
         b2:94:99:24:44:2d:a2:40:ce:a3:25:0b:ff:6a:8b:f0:fb:1d:
         40:0c:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:40:06 2026 by rpki-client