Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa
File:                     8688f611-6998-3489-95fe-612bf6872077.roa (raw, json)
Hash identifier:          DslpbTcvUUxKX/7FHV9ljCN586Twugk26hKlX/81PZ8=
Subject key identifier:   A6:A9:0C:B7:7D:70:41:B0:45:53:22:83:F8:67:09:D5:3B:CD:DC:20
Certificate issuer:       /CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919
Certificate serial:       010D0C9F4328584D4D5A7AA90E2C094208A9E300
Authority key identifier: FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     63023
IP address blocks:        98.159.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:7a:a9:0e:2c:09:42:08:a9:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=b761a6ad-3d89-4874-a466-806fe7d43db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:06:be:a7:60:a6:bf:1c:bb:87:99:1a:f8:99:
                    43:b2:29:63:34:d9:bd:9b:91:80:38:b0:5e:47:cd:
                    cb:76:1d:09:94:b6:56:93:9d:84:7e:1c:40:a7:61:
                    9b:f2:6b:dc:f6:f6:d2:7c:26:e1:a0:75:ec:44:ce:
                    ba:65:99:95:4b:d7:ba:37:a2:69:5d:9c:4c:b6:17:
                    61:b4:1b:27:ac:fd:44:a0:e7:77:f1:d9:bc:49:a1:
                    ad:f0:84:c3:cb:99:fb:d3:11:fa:14:27:4f:cb:d5:
                    c8:cb:de:b5:d8:fc:3f:f1:da:cc:d4:3e:f0:65:b9:
                    f2:54:ae:ea:54:5d:74:e1:f9:47:0b:e3:4a:89:b6:
                    c3:3e:40:0a:a3:63:db:82:52:20:82:48:60:ee:4d:
                    0d:5b:3d:5f:9b:a8:a6:bb:c4:84:c1:7b:76:d2:40:
                    7e:f6:02:67:31:2a:78:59:f2:60:ab:15:36:93:44:
                    1a:c0:d1:ba:e8:59:77:af:8d:0c:ad:6e:d4:70:d8:
                    bd:43:b7:64:f7:00:d4:ac:9d:dd:83:83:84:f0:f7:
                    6c:40:58:12:76:9b:75:bd:f7:20:25:05:16:47:45:
                    b7:ac:94:c1:50:ff:ff:99:4d:78:28:54:87:98:e8:
                    23:af:cf:c4:93:93:7b:97:ff:4d:97:a7:7e:61:1d:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:0C:B7:7D:70:41:B0:45:53:22:83:F8:67:09:D5:3B:CD:DC:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.crl

            X509v3 Authority Key Identifier:
                keyid:FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8d:8d:e2:d2:64:89:95:b5:08:2f:6d:c6:32:53:f4:71:24:
         87:4f:67:d4:a9:e8:b0:15:1b:9d:99:99:2c:f7:11:66:3a:82:
         1f:7a:26:30:61:97:ee:70:8a:29:64:bc:70:c3:08:02:6c:d4:
         6e:e5:ba:14:13:7c:17:77:70:07:1c:1d:18:dd:b8:35:6a:1e:
         8c:e5:ed:22:4d:be:8d:f0:71:3c:4c:46:cf:7b:dd:00:b8:62:
         8a:32:e3:1c:49:9a:b4:5a:7c:60:4c:ab:dc:c4:71:15:53:36:
         d6:df:27:0d:de:4a:25:80:40:4e:e4:ac:d4:1a:41:9f:15:03:
         00:a8:70:d7:48:91:12:73:05:2d:f7:2f:21:51:af:6f:45:c0:
         4a:1f:4d:98:7a:af:d2:14:9d:18:47:cc:41:75:e7:8a:75:48:
         ef:2a:8f:ce:b4:fa:a9:18:f9:c7:c0:2c:06:84:55:e2:40:7a:
         70:78:63:91:ee:b4:f3:64:06:e6:3d:fd:09:69:62:0c:83:51:
         c5:79:70:d8:96:9a:d3:f2:aa:ec:9c:ab:5b:16:da:17:f2:6e:
         16:ef:4a:ca:e8:60:c7:41:90:17:39:86:6b:f2:3a:27:99:b1:
         07:47:fa:d2:97:76:ec:1f:52:a5:68:ee:ba:27:21:b6:79:a1:
         a9:61:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:58 2026 by rpki-client