Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/096804fa-d51d-3225-bef7-166f40d1bc8c.roa
File:                     096804fa-d51d-3225-bef7-166f40d1bc8c.roa (raw, json)
Hash identifier:          vqI2dkS5RWzJwqI3IBMygd0uzOanI2HQ8MQuN0iH+1k=
Subject key identifier:   CC:42:0B:47:D0:CD:97:A4:60:43:EF:C1:69:2C:B5:95:A2:F7:99:E9
Certificate issuer:       /CN=98f21885-21e4-4f38-8c7d-26696d802c35
Certificate serial:       010D0C9F4328584F03B11A07FF574202E6A39D00
Authority key identifier: 4F:2E:32:6E:17:06:CB:FA:65:24:A3:90:A6:E2:CF:A9:3F:2B:B3:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/096804fa-d51d-3225-bef7-166f40d1bc8c.roa
Signing time:             Mon 31 Aug 2026 01:19:43 +0000
ROA not before:           Mon 31 Aug 2026 01:19:43 +0000
ROA not after:            Sun 29 Nov 2026 02:19:43 +0000
asID:                     20413
IP address blocks:        204.108.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:b1:1a:07:ff:57:42:02:e6:a3:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f21885-21e4-4f38-8c7d-26696d802c35
        Validity
            Not Before: Aug 31 01:19:43 2026 GMT
            Not After : Nov 29 02:19:43 2026 GMT
        Subject: CN=92d7c3fb-0638-4e7d-bde0-50893419e7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:40:34:26:96:56:e1:eb:31:34:6b:7b:6c:
                    f3:e6:43:22:2b:34:0b:11:27:ab:79:78:87:e5:07:
                    d5:b5:03:9e:a1:97:58:e9:81:d2:88:0c:bc:b0:88:
                    ac:a4:df:13:89:34:7e:d3:00:9f:22:f5:da:1b:07:
                    3d:0f:b5:f5:de:47:a3:21:12:24:2a:18:06:8b:4d:
                    7b:0c:8b:51:6a:60:0a:c3:5d:b2:9d:7f:e0:2c:cd:
                    30:d0:7a:ea:70:b2:63:f4:15:af:c2:a8:bf:98:fd:
                    c6:f1:a5:82:81:d5:e4:95:e1:a9:6c:18:04:9d:59:
                    47:bd:a9:0e:99:e1:d2:fe:ba:47:d6:1b:4c:51:fd:
                    3d:fb:86:43:da:2e:67:65:0d:39:ed:c9:cf:21:56:
                    e6:c7:08:df:41:60:87:63:de:6a:83:d1:f1:30:67:
                    30:29:07:23:bf:a1:fa:a5:f7:f8:22:23:d7:c7:5f:
                    f2:ef:de:f2:53:98:ad:4b:6b:94:63:1c:47:20:24:
                    58:26:48:e3:fc:5a:49:98:7e:49:01:6d:8a:37:4c:
                    8d:76:2e:fc:d3:ce:06:30:3e:1f:d6:d9:88:99:d5:
                    8c:b7:f6:e5:0d:30:4f:15:f8:40:b9:7b:1c:44:be:
                    86:c4:39:17:cf:22:3c:22:3a:cb:7c:a7:f8:54:b4:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:42:0B:47:D0:CD:97:A4:60:43:EF:C1:69:2C:B5:95:A2:F7:99:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/096804fa-d51d-3225-bef7-166f40d1bc8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.crl

            X509v3 Authority Key Identifier:
                keyid:4F:2E:32:6E:17:06:CB:FA:65:24:A3:90:A6:E2:CF:A9:3F:2B:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:2c:f6:01:3e:11:7a:de:8b:c8:81:d0:3e:96:b3:25:4e:9e:
         93:b2:e0:4d:f5:af:ab:d8:98:63:09:04:f1:0d:a4:3b:20:55:
         79:61:0b:be:d0:c0:8a:9c:40:76:4a:0d:a7:46:a1:66:6b:9e:
         7e:68:e4:7f:24:d9:f3:1a:c9:7d:22:7e:f7:f7:62:cf:e3:d2:
         93:9e:dd:4c:20:5b:0a:85:e7:b7:16:95:e9:76:e8:4d:78:88:
         2b:35:8c:c4:b5:41:af:99:0f:3b:0d:a2:6b:a9:5c:28:98:37:
         27:7c:b7:f7:f0:8e:e4:62:d1:52:e2:fc:14:ec:8c:72:c5:86:
         38:9f:59:bb:09:2b:9f:13:75:8a:da:07:3c:bd:7f:59:c1:14:
         18:63:a8:49:5b:88:64:dd:d8:53:fc:98:2a:bf:c1:5f:bf:3c:
         92:05:50:18:31:70:2c:bc:7f:ba:ec:ca:3a:61:52:40:af:58:
         14:fd:30:f4:7d:d8:8b:d7:f7:5b:b4:77:9d:48:ab:3b:6a:04:
         8d:97:4b:86:95:15:63:39:74:47:8e:10:63:b0:74:76:e6:7a:
         77:ff:0f:20:1b:b7:e5:93:3e:9c:a5:94:cf:82:be:4f:a2:e2:
         ff:c4:e4:b7:6f:68:3a:64:96:d8:6c:1a:59:d9:76:66:66:32:
         08:61:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:06 2026 by rpki-client