Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa
File:                     6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa (raw, json)
Hash identifier:          bie3Ehsxteq5xVqfZrrXrVUI3KJTOW2pVZta3mMjKRg=
Subject key identifier:   0B:20:38:C2:66:AD:D2:0B:27:86:E7:0E:6E:40:45:E6:37:6B:A9:1B
Certificate issuer:       /CN=e474b0b1-1dc5-4e07-8410-8f20008da0a3
Certificate serial:       010D0C9F4328584ED001E558FE3179AA096D1340
Authority key identifier: 0C:FB:19:AC:FD:6D:21:D7:1E:6F:22:FD:03:36:21:DF:E7:F4:C3:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14697
IP address blocks:        198.168.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e5:58:fe:31:79:aa:09:6d:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e474b0b1-1dc5-4e07-8410-8f20008da0a3
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=5c0122a6-da5b-406d-b6c2-686d3bdeaf08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:f8:bd:49:62:64:1c:76:cf:38:4a:9b:ad:
                    cb:e7:1c:1c:e1:d0:90:d9:39:61:1b:09:bc:24:c0:
                    96:be:9d:52:d0:1d:bb:64:4c:9b:2d:60:17:f8:04:
                    1e:cb:a9:d0:ea:60:79:02:ff:7e:5a:09:83:c0:5e:
                    ad:fb:f6:aa:3d:b1:e7:cf:ab:e0:16:3b:47:a3:41:
                    71:db:1f:e2:b3:2f:c1:49:8b:7c:e8:85:ee:c4:19:
                    e6:ed:2f:e4:f4:08:58:a0:4d:cf:65:0e:d3:59:6d:
                    7c:fa:31:82:b6:67:3f:c0:58:ff:46:a1:3e:7c:a3:
                    8d:b4:5e:b4:d0:68:a3:1f:a9:fb:54:a0:3c:5b:cf:
                    70:7f:ca:e0:6c:a4:2d:88:b4:a9:63:9c:17:37:a4:
                    77:8b:a4:1e:89:a3:c9:b8:8b:ba:37:6c:5f:ae:30:
                    ca:07:01:78:a8:38:cf:df:4e:7e:55:98:6c:4c:7b:
                    d1:ac:83:05:18:93:ff:0d:5b:eb:1e:ef:af:eb:af:
                    1e:a9:c3:e6:33:2d:31:76:41:05:b7:fb:82:86:48:
                    22:36:e1:57:d0:21:d0:30:a4:a4:d9:6c:1d:66:af:
                    0f:61:26:1d:3e:63:68:1e:e9:b9:30:02:cb:0b:cb:
                    ec:c0:ce:0a:8e:a1:91:02:eb:18:2f:a4:ab:31:82:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:38:C2:66:AD:D2:0B:27:86:E7:0E:6E:40:45:E6:37:6B:A9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.crl

            X509v3 Authority Key Identifier:
                keyid:0C:FB:19:AC:FD:6D:21:D7:1E:6F:22:FD:03:36:21:DF:E7:F4:C3:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:cb:7d:51:f6:f4:e0:8a:d8:c9:78:73:49:fe:63:a0:5f:
         a1:20:36:56:08:59:12:3f:84:ce:6e:00:f6:be:d8:44:8a:ac:
         d0:07:bd:34:5a:62:fd:e9:2d:a8:6c:7a:02:57:d5:08:4b:96:
         59:1c:9d:92:d8:ae:6b:2f:42:41:94:f7:53:23:32:8b:70:5a:
         be:bc:57:b9:ea:b3:a5:34:49:d7:9d:59:cc:1c:d4:9f:7c:da:
         6d:d8:17:e0:65:77:66:1d:86:56:87:dd:f4:ae:19:3a:fd:c0:
         a9:8b:76:66:19:3d:da:bf:8b:9e:a4:26:55:91:d3:e0:99:42:
         6f:71:13:a5:ae:4c:c2:20:b7:71:d9:34:2f:ad:6b:ba:e2:1c:
         23:84:9f:d1:a1:70:dc:a0:c1:9c:15:0d:0e:19:2b:d4:58:b9:
         6b:0b:aa:3c:b2:3e:cc:1d:a0:94:dd:fa:98:8e:45:0e:ff:97:
         23:f4:ce:24:6b:bb:81:16:24:73:bb:45:e2:1f:41:f8:49:07:
         7a:06:30:6b:fe:d2:eb:78:12:56:4e:c7:11:0e:f1:c8:9f:48:
         e6:15:41:b1:6e:d9:c4:3e:ee:0f:e4:6b:ca:f7:f3:6a:35:be:
         82:3a:63:c8:ce:69:61:ce:35:65:29:4d:9c:83:5a:b5:31:6b:
         85:a1:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:38:48 2026 by rpki-client