Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/1c1829f3-41cf-3e4d-a8bd-d3f0ac21764b.roa
File:                     1c1829f3-41cf-3e4d-a8bd-d3f0ac21764b.roa (raw, json)
Hash identifier:          cwKbLfzRusI+XnH6gYtSDus9MOGVXMMiUTE/dIXJeew=
Subject key identifier:   90:CA:84:1B:E6:77:EB:2B:EA:27:72:86:21:92:22:E9:58:B6:0C:8A
Certificate issuer:       /CN=c981048b-7713-4799-b5e0-c27f4b3bdb1d
Certificate serial:       010D0C9F4328584F331D0D1A76C73CBDB067B900
Authority key identifier: 31:F2:CF:F0:88:B5:9B:23:59:D6:D7:FB:E5:87:81:00:0A:ED:E7:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/1c1829f3-41cf-3e4d-a8bd-d3f0ac21764b.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     13335
IP address blocks:        198.52.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/c981048b-7713-4799-b5e0-c27f4b3bdb1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/c981048b-7713-4799-b5e0-c27f4b3bdb1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:0d:1a:76:c7:3c:bd:b0:67:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c981048b-7713-4799-b5e0-c27f4b3bdb1d
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=f94bc4a1-530e-4d0c-86ed-496ea5e25ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:47:24:f6:f8:7c:6c:5a:f3:d5:d7:49:fa:
                    c6:d4:b9:d5:ae:38:16:d6:59:24:2d:9f:4f:0c:14:
                    7a:c7:b0:8c:b8:2c:e7:92:5a:05:21:2c:0d:3f:30:
                    67:58:0c:a3:90:58:7c:c3:2a:1c:56:c4:29:0a:d2:
                    d6:21:7e:e5:0c:b8:3b:05:3d:98:19:10:b2:3b:e1:
                    0c:f1:c0:9f:22:c3:1d:03:34:80:76:d4:88:06:59:
                    44:83:35:b4:1d:3b:a4:06:dd:b7:29:52:36:ce:ab:
                    a0:b6:e1:bc:55:0d:67:b3:70:df:8f:f4:9d:b1:c5:
                    4a:55:7f:74:0d:51:f1:7a:0a:6d:b2:d8:c1:c1:b4:
                    06:12:ca:de:d4:ac:10:fb:e3:ab:70:42:18:d1:d6:
                    e5:f5:6e:fc:fa:55:a5:72:05:f4:6f:64:32:1a:41:
                    43:c0:8e:e8:6d:fb:b3:4f:70:54:98:e6:04:b1:2c:
                    d7:af:af:d1:03:cb:f7:2c:50:9b:2b:f2:7d:84:fa:
                    7f:db:f1:11:2e:a8:a8:38:e4:0e:e8:63:43:70:5e:
                    e3:d2:aa:b5:d6:f4:0b:8c:0b:e8:e3:23:cd:6f:47:
                    64:1c:9d:da:39:85:7c:7d:96:b4:7c:e5:05:d9:e6:
                    e8:ff:ec:10:eb:ef:05:c5:73:37:f3:1d:3e:b6:58:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CA:84:1B:E6:77:EB:2B:EA:27:72:86:21:92:22:E9:58:B6:0C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/1c1829f3-41cf-3e4d-a8bd-d3f0ac21764b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/c981048b-7713-4799-b5e0-c27f4b3bdb1d.crl

            X509v3 Authority Key Identifier:
                keyid:31:F2:CF:F0:88:B5:9B:23:59:D6:D7:FB:E5:87:81:00:0A:ED:E7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.52.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b0:8f:d3:57:fc:80:88:92:c3:16:8c:53:2d:04:fc:6f:5e:
         02:c6:c7:b5:2a:c0:fd:7c:5f:aa:fd:8a:e0:3c:45:1a:0c:da:
         f5:66:79:77:c3:33:27:42:e4:34:6a:db:a3:ac:9d:2b:e9:a6:
         c6:6f:1b:dd:77:01:21:5b:70:27:82:eb:72:97:bb:21:11:b6:
         0a:08:a6:13:e8:c2:c6:90:80:e0:1d:38:b8:b1:7b:f8:3b:01:
         b4:03:63:c8:10:69:2b:42:5c:21:3d:d7:6c:91:74:bc:da:92:
         90:0b:d6:f4:44:b1:13:66:0a:be:fb:9e:aa:d0:f7:06:1a:52:
         8c:37:98:14:67:80:43:3e:68:51:a0:02:eb:2a:a7:f9:9f:6a:
         be:cb:a0:e3:01:8f:32:76:10:6a:57:26:9a:90:5f:db:5f:96:
         60:6e:53:58:e0:00:32:a9:90:27:84:cf:66:b8:61:68:b4:e5:
         8f:4f:4a:6b:49:67:19:80:9c:b8:2f:18:65:80:b0:cc:5e:b9:
         56:55:39:22:fd:13:62:78:d5:f2:c0:df:61:26:e3:1f:c5:4c:
         b2:d5:f3:d6:83:87:63:8e:3e:1f:ac:7a:e7:77:ec:84:8f:f4:
         16:18:0f:3b:b8:20:6b:cd:8f:a0:8a:f2:36:4d:e3:9e:fd:cc:
         15:66:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:26:17 2026 by rpki-client