Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
File:                     25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa (raw, json)
Hash identifier:          01okJWzM79bPHX4GBolcbDG2Ry2drf8mPX5EORSItKg=
Subject key identifier:   56:46:D7:0D:65:CC:CE:44:8B:6D:B3:33:D2:83:FA:DA:8E:61:31:B5
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584F348269D389E703C7A8B6C6A0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     701
IP address blocks:        198.37.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:69:d3:89:e7:03:c7:a8:b6:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=0ceae772-0eb5-4765-b522-3abd307be450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:f5:b3:07:8f:50:00:7f:9a:e2:02:06:ea:
                    52:8a:66:ec:1a:c3:02:c1:ec:2e:19:03:8e:0d:01:
                    2f:7c:cc:66:04:00:da:e7:14:d6:55:ee:b8:ba:86:
                    4b:36:76:96:c2:d1:2b:fe:8d:cf:5c:24:5c:81:5d:
                    b9:0f:7f:39:b8:ca:5e:17:21:6c:df:9d:24:e8:82:
                    13:a5:61:ae:24:11:5c:93:43:ef:74:01:bd:05:57:
                    0c:7d:71:4c:36:3a:02:fc:b0:ba:07:df:37:57:cd:
                    a6:9b:9b:ab:32:09:32:5c:6e:20:03:3c:fb:1c:89:
                    da:27:71:d1:92:f4:ac:f5:37:cb:64:f6:99:b5:d8:
                    0f:89:85:4a:cf:ce:0c:6b:57:bd:62:c3:72:70:a5:
                    26:b0:b5:d4:6f:f2:44:2e:e7:45:1f:b5:e5:0f:70:
                    b9:0b:17:85:fe:32:ed:6a:2b:00:9c:bf:c7:80:c6:
                    df:16:d2:9b:a8:f8:c1:23:f3:88:c9:9b:9d:60:6f:
                    69:ec:77:64:32:b4:73:38:e1:5e:33:4a:c2:79:cc:
                    67:8e:1c:fe:05:5c:fc:ba:54:e2:20:14:cd:9a:6f:
                    8c:40:82:85:e0:98:f3:76:43:d7:67:9a:5a:a5:6d:
                    c3:c3:02:77:40:e8:a4:11:87:68:aa:59:44:c0:a0:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:46:D7:0D:65:CC:CE:44:8B:6D:B3:33:D2:83:FA:DA:8E:61:31:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:03:0e:1c:00:78:10:91:b5:9a:e6:31:9f:7f:dd:ac:44:
         4a:37:3c:ed:3c:ab:41:23:56:1c:f2:04:bf:32:57:11:80:f0:
         75:5b:18:a3:a6:d5:6b:d8:52:de:eb:bd:b8:1a:67:f2:0c:46:
         f8:06:97:61:75:3c:6e:0b:00:02:5c:c1:80:ca:b9:0d:54:34:
         27:fd:30:3e:72:c0:97:b6:6c:bd:9c:c8:39:bb:9f:a1:1b:96:
         e2:60:22:c1:ba:84:47:6d:e9:c6:d3:13:d9:bb:1a:e9:71:ec:
         d9:a4:9b:a7:d7:42:d6:2e:b2:fc:32:ad:ac:09:81:96:d5:f9:
         52:4e:3e:69:96:ed:cf:ca:cb:6e:31:3c:79:4f:95:36:8d:51:
         2b:74:c7:fb:b9:53:90:ea:83:0e:69:0d:f4:16:65:f0:86:2f:
         f1:97:79:e9:b3:49:43:fc:1b:c0:8c:bc:4b:f2:7b:4c:be:16:
         3e:6f:d1:c3:fd:de:c6:1f:d0:ac:b2:fb:45:29:bf:e3:e3:6f:
         63:23:cf:f6:f5:0b:2d:62:52:dc:24:8e:fc:a4:66:53:6b:19:
         fc:cf:73:01:2e:35:32:88:1e:41:ff:2d:ac:90:69:54:b2:7a:
         52:77:af:ff:b5:70:28:69:77:cd:02:6c:0f:14:01:7c:f1:8b:
         7d:01:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:21:50 2026 by rpki-client