Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0ae2d43d-6202-3719-82d0-22a70c732fb7.roa
File:                     0ae2d43d-6202-3719-82d0-22a70c732fb7.roa (raw, json)
Hash identifier:          JsKf+jErrinfuW/D5FBoK2VaQdVRGp4nLAskG499/aA=
Subject key identifier:   30:4B:DE:2A:7E:81:98:5F:F2:F1:EB:4E:92:79:B7:97:9C:F4:F5:BD
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584F14678F684C5519F9307B0640
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0ae2d43d-6202-3719-82d0-22a70c732fb7.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     401514
IP address blocks:        198.212.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8f:68:4c:55:19:f9:30:7b:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=2e8b9e3f-4764-42cf-b13e-910a76a48653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:60:95:32:21:95:1a:a7:c5:f6:48:26:b4:
                    8f:9c:ed:dd:89:c2:d1:7a:94:df:b9:1d:b9:d8:08:
                    54:f4:7e:25:ef:4c:43:e9:06:9b:a6:c7:34:eb:43:
                    d9:93:9e:a9:68:cd:0d:00:02:19:83:65:6b:6c:12:
                    46:28:61:4f:72:2f:c4:c9:01:50:4f:00:c2:34:0a:
                    6f:c9:5d:1f:d3:c6:cb:c8:26:ef:8b:58:dc:00:8d:
                    35:40:26:aa:0d:4c:59:8c:70:fe:70:2e:92:61:fb:
                    e6:88:90:48:35:e7:10:37:18:9b:7a:90:10:82:0d:
                    26:cb:43:ea:1c:43:c6:a1:4d:ff:5c:75:90:f9:7f:
                    2d:67:55:94:bd:3e:35:f5:6c:f8:06:1f:11:56:49:
                    3b:a7:83:78:fd:ab:b4:f0:cc:71:c2:cb:a9:be:cc:
                    8b:6c:da:0a:50:6a:3a:53:d8:c9:27:f5:70:ea:22:
                    c9:c1:71:97:77:cf:e9:6f:28:7f:8f:71:1a:39:9d:
                    f4:d6:2e:17:03:71:43:92:8e:c4:c9:de:7f:08:03:
                    16:05:32:f5:8c:57:67:84:dd:83:78:46:9f:0b:77:
                    81:8a:ed:32:5f:60:46:00:69:cd:7a:35:46:a2:33:
                    04:9c:64:da:83:a3:be:09:a2:43:c5:95:d7:22:0e:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:DE:2A:7E:81:98:5F:F2:F1:EB:4E:92:79:B7:97:9C:F4:F5:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0ae2d43d-6202-3719-82d0-22a70c732fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9f:f4:cc:2d:19:06:e8:4a:13:25:dd:43:44:ec:30:9f:41:
         8c:0c:19:40:b6:9b:02:40:bf:ad:4c:e6:04:04:76:0d:15:5f:
         36:df:e2:7c:d9:2b:4f:c6:c3:c2:fc:e8:88:d6:d4:5c:2e:55:
         f5:76:3e:67:34:3f:f6:d7:15:16:77:5a:3a:ac:18:1c:69:5a:
         d9:e2:ac:b4:1b:74:20:2a:5b:7a:c4:a5:5b:80:5c:e0:e0:fd:
         64:21:9a:36:97:63:13:42:fb:fb:5d:60:1b:4b:b5:a0:af:19:
         b9:b0:bf:2a:ae:69:d8:0f:1a:8a:99:ae:d1:e3:25:c8:6d:06:
         0a:e8:92:43:23:d9:4e:df:c9:74:98:68:58:2a:1a:49:1f:20:
         10:2c:7c:5a:fa:46:d9:02:99:e5:c3:e9:a0:7f:ae:36:1b:01:
         d6:d2:6c:15:96:5e:59:51:f1:a8:79:c1:d2:86:50:10:10:c2:
         ee:61:9a:ca:27:90:27:de:be:fc:02:25:3f:33:ee:08:9e:c9:
         d3:0b:08:5a:de:5e:a7:4b:5e:e1:a4:a3:03:e2:66:01:4c:67:
         ef:18:1a:8a:98:9d:c7:95:6e:58:bd:d1:f4:fb:30:48:90:96:
         31:5f:77:a2:42:32:c8:f9:f8:c4:1a:1d:a7:56:53:67:24:17:
         b8:43:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:00:48 2026 by rpki-client