Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/4e77de2b-0e86-3386-854f-ffd592755ed1.roa
File:                     4e77de2b-0e86-3386-854f-ffd592755ed1.roa (raw, json)
Hash identifier:          MugrHIFyTPLSGK/Zk8MZ3OszImFDvXvqgRU+dMtyHEQ=
Subject key identifier:   C3:A2:8F:10:91:E3:08:56:28:A0:90:3E:96:73:49:4B:1D:0C:AF:49
Certificate issuer:       /CN=98e20ef9-13a1-40fd-8c8a-1a1b1f404882
Certificate serial:       010D0C9F4328584D4D5A6348C4075C364AB62D80
Authority key identifier: 1B:99:2F:71:97:43:F0:DC:5D:48:EF:CF:B8:A8:1C:6F:56:C5:AD:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/4e77de2b-0e86-3386-854f-ffd592755ed1.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        198.169.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:63:48:c4:07:5c:36:4a:b6:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e20ef9-13a1-40fd-8c8a-1a1b1f404882
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=f8cdd991-6eb6-430e-9a2c-1a06ee4d8849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:64:f3:00:6d:b9:bd:74:ce:50:6a:cd:5d:
                    c3:57:a4:65:b6:67:6e:60:78:f2:d2:5b:e6:2c:b5:
                    93:ea:fc:f4:f6:08:0d:f9:7c:6e:54:1e:66:25:54:
                    4a:b6:c0:88:38:2d:58:be:86:1d:5a:d1:df:9c:10:
                    e5:1a:c1:b0:a4:b0:d0:fe:27:84:b7:8b:e5:dc:54:
                    1c:e6:c3:13:20:94:c7:98:24:82:fa:b6:71:d3:2e:
                    ba:d9:49:b6:88:0b:9c:21:83:53:4e:18:ff:3a:f1:
                    f2:d1:dc:d8:70:c8:ff:ba:18:13:b8:d5:f7:0e:c4:
                    20:08:12:e0:95:b4:6e:a2:bb:5e:3e:05:bb:52:0a:
                    00:f3:37:cd:89:f9:23:78:4f:2e:f6:08:8a:9b:b4:
                    a0:66:f2:0f:d8:62:c7:1a:b0:c6:e2:e9:99:f3:ff:
                    2b:6a:81:b1:dd:5f:40:61:d8:c7:0e:b2:a4:8e:45:
                    8d:d1:ef:b7:6b:c7:98:5f:c4:ab:62:93:84:3d:5d:
                    63:df:43:93:4f:30:97:ce:cc:32:cb:17:ea:3a:6b:
                    d2:45:c2:c1:1f:5e:69:d4:d6:ca:4c:a7:7e:81:21:
                    8d:aa:e7:28:a0:23:fe:8c:4f:a2:8d:7a:5f:7d:ac:
                    ec:38:e3:f6:8c:05:34:14:e4:d6:ef:93:de:95:03:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:8F:10:91:E3:08:56:28:A0:90:3E:96:73:49:4B:1D:0C:AF:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/4e77de2b-0e86-3386-854f-ffd592755ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.crl

            X509v3 Authority Key Identifier:
                keyid:1B:99:2F:71:97:43:F0:DC:5D:48:EF:CF:B8:A8:1C:6F:56:C5:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e8:d6:51:7b:67:f1:cb:b9:1d:0e:0e:79:d0:d4:c2:44:c1:
         ac:ac:96:80:ef:00:02:eb:a2:14:e3:86:f6:93:4a:49:9d:17:
         9f:42:c3:cc:63:d2:b7:b4:07:3f:6e:50:9f:d3:e0:b5:a5:c4:
         53:96:72:2d:a1:93:73:1c:91:22:51:93:8a:1f:c9:ba:c7:a6:
         36:4f:76:f0:12:c9:ac:5d:33:57:c6:f4:11:9c:a7:8e:58:f4:
         a0:f5:db:32:f0:ed:67:c3:48:18:85:ef:fc:ff:df:be:6c:11:
         db:ab:fc:08:16:02:63:cf:f2:f6:fb:43:32:08:98:2a:31:4f:
         80:7f:62:ff:ed:33:e2:25:f0:13:91:d9:bf:0b:cc:24:29:c8:
         58:9c:ea:f7:fb:24:a9:57:59:0d:67:ac:53:66:7e:40:33:6a:
         86:e9:72:60:25:ca:2c:1d:95:c9:9e:f9:a6:17:76:ae:47:f7:
         02:ee:ce:a8:6e:9d:08:06:2e:71:97:34:73:1d:74:dd:2f:93:
         e6:ca:c0:a3:50:6f:f4:6a:84:bc:f4:61:81:69:99:6f:4e:ad:
         4a:4c:22:c0:1b:e9:c6:d0:16:77:e8:b2:b4:de:2b:2f:b4:9c:
         05:52:16:b6:2c:61:59:c6:0e:a4:65:2d:4b:35:60:64:ba:64:
         b1:28:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:14 2026 by rpki-client