Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa
File:                     ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa (raw, json)
Hash identifier:          8Oy8WspMfYXW7Mx6U5jVun6B5HpoU3Ql6BMFynu3Hyk=
Subject key identifier:   92:16:A9:58:77:AA:18:B8:6F:2B:F4:A3:EE:E4:C5:A6:6A:5D:B6:3A
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584F331D1823DB407EFB28389A80
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        198.23.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:18:23:db:40:7e:fb:28:38:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=88b30f60-995c-4808-8910-1a2f460098b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:e1:c7:81:1c:22:b5:ca:a8:de:8c:97:04:
                    ed:08:5b:4b:8f:37:47:78:fd:56:43:55:bd:fd:40:
                    7b:ef:1f:e2:41:2d:28:97:b5:c8:80:0d:00:a4:43:
                    53:dd:85:73:75:63:53:08:bf:b5:fe:15:1a:75:f2:
                    42:4e:ed:d1:87:e6:d5:7d:66:73:90:64:ee:ed:25:
                    31:bc:32:85:10:6f:62:a1:9e:5f:c4:ab:78:d8:2c:
                    96:32:b3:75:28:88:a2:78:b9:9c:02:36:10:85:6b:
                    23:66:7f:ba:62:f1:54:f4:f0:a5:99:b5:7a:04:a4:
                    bf:ae:b8:82:ef:5f:72:14:19:5b:8e:df:16:cd:ae:
                    09:02:ea:8c:e4:0a:d7:5d:bf:d8:cb:dd:eb:2e:b7:
                    58:15:d8:d7:62:f4:09:1a:d1:a1:09:80:04:85:a8:
                    e6:1e:69:f0:f9:66:87:d6:df:69:a5:d4:80:18:da:
                    f4:f4:d7:9c:5e:5a:e4:0e:df:56:c5:2d:65:ef:33:
                    49:a2:c0:79:14:62:30:c1:d6:31:fc:0e:11:ad:e9:
                    9a:a2:8d:2e:5d:80:44:42:eb:cb:ec:0d:46:ca:33:
                    ce:6f:5b:db:51:35:78:e0:cc:e6:97:a8:34:ac:54:
                    0e:0d:29:3e:6c:b5:9d:2d:d7:d7:9a:a4:4d:0e:af:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:A9:58:77:AA:18:B8:6F:2B:F4:A3:EE:E4:C5:A6:6A:5D:B6:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:6c:8d:4f:7d:98:a0:37:d1:4b:eb:01:0a:39:9f:67:f5:
         85:2b:7f:50:1f:a1:fc:f4:c1:d1:c1:4b:fc:1a:e1:d1:c6:c5:
         dc:8d:45:fd:b1:0f:8b:41:6f:69:42:e0:b4:99:24:ba:69:25:
         fc:33:c3:ea:a3:b2:4f:84:5e:7a:53:af:99:6c:d7:ca:71:de:
         c6:4d:d7:88:f6:2b:7c:69:27:9a:fb:f7:5d:8e:e9:3d:fb:16:
         58:04:28:ab:78:0a:ff:7e:eb:1c:ee:39:7b:8f:6c:26:75:31:
         68:e8:40:94:2e:26:45:2e:88:4e:63:c2:4d:f9:d8:61:44:92:
         8f:93:58:5e:f7:df:60:b5:36:19:fc:0f:e3:2f:01:5a:5f:fd:
         6a:99:75:6a:44:86:1a:a3:ce:db:fe:a5:de:a5:9c:2f:26:fa:
         12:15:56:ef:28:df:a5:f5:1a:39:5b:bd:18:b2:c6:57:13:36:
         c9:e2:8e:2e:bb:20:ef:53:06:41:67:95:82:ff:6d:85:c0:75:
         0a:db:0d:28:97:f8:aa:47:d9:7b:af:af:32:98:0e:99:92:05:
         d7:72:10:1a:4d:4e:38:84:5f:ae:06:3e:dd:6e:75:e1:3a:4f:
         cc:e6:b6:11:2a:2d:4e:1b:a7:96:bc:84:07:e9:18:4b:88:61:
         b4:47:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:35:45 2026 by rpki-client