Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ae90c9af-9aca-3300-b312-102bb1c9c94b.roa
File:                     ae90c9af-9aca-3300-b312-102bb1c9c94b.roa (raw, json)
Hash identifier:          OmUtx+VkkoxIOzY/lH4V9x/+MzoYQbwQlJX12ydevlI=
Subject key identifier:   B7:E0:38:B9:51:61:8F:35:6C:E1:50:AB:55:77:87:7A:6D:46:B0:9A
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584F331D17C1C7ECF9435CB26300
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ae90c9af-9aca-3300-b312-102bb1c9c94b.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        198.23.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:17:c1:c7:ec:f9:43:5c:b2:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=5e3ad36b-52d6-4da5-a9c6-391182293e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:84:45:67:9d:0e:bb:66:d0:c8:21:1d:50:
                    59:cc:9e:1e:00:6c:06:4e:1b:d4:50:34:cd:50:e1:
                    1b:36:7f:07:97:be:72:5d:51:98:d9:04:bb:ae:9f:
                    e8:21:7a:6f:e4:5c:95:2d:56:71:1d:b4:22:b8:ae:
                    92:66:e7:53:09:20:2b:6b:28:23:12:e4:21:6c:c3:
                    e3:2d:fa:6f:52:4e:4e:15:92:83:75:2f:bb:d6:54:
                    1f:23:ee:56:5c:f6:7e:80:8a:e0:83:7a:c1:06:c4:
                    17:f6:1f:43:60:c6:b9:a9:ed:2d:1a:d2:d2:0f:42:
                    d9:33:8a:64:50:dc:f9:d5:51:6f:6e:ee:fe:5f:45:
                    5c:cb:1c:e6:97:56:63:4a:f3:c1:cf:7a:3f:46:12:
                    37:c8:ec:66:87:59:98:5e:b2:55:c3:44:4f:24:1c:
                    1c:a5:94:71:d1:7e:66:c0:d0:88:c9:ee:1c:e0:13:
                    ff:a1:54:d0:c4:44:0c:0a:8b:5a:f5:22:3e:5e:a0:
                    af:46:21:1d:f0:28:87:cf:8d:ea:af:20:43:f3:45:
                    1a:06:b8:07:48:64:62:02:3d:c6:59:71:b5:59:64:
                    85:32:c9:ef:0e:e4:14:5b:26:72:96:78:b2:1e:30:
                    ca:de:ce:66:17:41:00:59:75:e5:0e:26:d4:a5:6e:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E0:38:B9:51:61:8F:35:6C:E1:50:AB:55:77:87:7A:6D:46:B0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ae90c9af-9aca-3300-b312-102bb1c9c94b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:b8:0c:d0:df:16:f1:9a:54:04:d9:07:1c:a1:3d:76:fb:
         c3:fe:5a:05:58:71:dc:b6:dc:8d:3b:63:03:2c:f2:1f:53:e6:
         44:ea:59:fd:60:b4:6f:68:06:fd:7f:b4:3e:77:38:53:da:15:
         ae:72:56:41:97:99:12:2d:4d:0e:c3:1b:97:74:42:ec:2c:b4:
         b0:41:51:22:2e:2b:20:a2:7f:55:b4:ec:c0:d1:b8:6a:5c:a8:
         8f:e1:e6:24:ed:b4:a9:01:c7:2f:75:6b:2b:8b:df:bd:76:11:
         8c:3e:be:57:66:03:00:6f:b4:5c:6c:89:4a:68:b4:61:51:25:
         d6:1b:2d:39:68:ba:45:73:d3:a8:3a:97:d6:8d:c0:f0:93:f6:
         97:de:79:01:fd:46:f1:45:5f:b4:56:a4:86:44:5e:06:fc:3c:
         e5:2c:75:2e:2d:9e:9c:82:3d:78:6f:dd:25:65:cc:ae:59:36:
         59:ac:90:24:c1:38:a8:2e:bb:e4:d0:32:ab:eb:61:25:7e:2c:
         3d:90:7f:74:74:31:d5:d4:4f:20:0a:5a:df:28:9b:90:95:94:
         52:a2:7d:13:c4:63:a2:b8:9a:5b:02:19:77:ab:45:d5:8c:ee:
         dd:18:64:95:c8:b0:79:1e:69:fb:55:33:d7:d4:11:48:7b:42:
         30:13:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:38:26 2026 by rpki-client