Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa
File:                     b388c415-7d7e-3eed-8eef-44a4d358c737.roa (raw, json)
Hash identifier:          bdHGvCSKgpGogayFTfWMiWFMHgZED+zTH5Aau9SYCdM=
Subject key identifier:   6E:52:64:B8:9A:B9:E1:B4:92:C0:6F:78:21:7E:F4:89:02:6C:D5:FC
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584EEEB75D05716327250D294B00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     394177
IP address blocks:        158.62.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5d:05:71:63:27:25:0d:29:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=1f58e8f2-7102-4edc-9a80-6bfecb1f22de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:02:67:5b:13:a1:25:9d:ec:cd:4e:7d:1f:
                    51:c7:a4:2b:7d:58:23:5b:fe:d8:68:2f:82:ce:7e:
                    e3:9e:93:7a:8e:d7:60:91:6b:20:03:9e:ba:29:ae:
                    79:1e:6f:6d:3c:c6:5e:f1:99:7b:9d:bc:be:2b:48:
                    be:48:df:aa:44:34:7a:63:6f:f4:02:c0:de:55:16:
                    c6:9e:d8:22:4f:7e:64:b3:ab:0d:f0:81:85:43:66:
                    16:a1:a5:1b:cd:b5:d8:5b:3e:dc:8f:db:14:9a:4b:
                    5e:7e:19:22:d4:82:33:ba:ab:f0:1b:87:57:70:d3:
                    2a:c0:a5:90:dd:d5:cb:fe:d4:e6:33:af:cb:a3:91:
                    f8:51:a2:e3:df:db:9e:ea:05:80:da:22:64:35:d5:
                    dc:31:b0:c7:e0:0f:8c:16:72:6f:c2:ce:51:9f:80:
                    07:14:6f:c2:1d:f1:c5:f7:02:e5:6a:ff:00:9e:f7:
                    06:68:27:61:64:4c:f0:69:78:72:77:04:92:58:45:
                    73:f8:80:84:00:ff:47:21:a4:a1:c7:12:32:e0:80:
                    ee:ff:0e:c1:f0:6f:60:bf:a9:c1:de:17:e0:b7:bd:
                    2e:11:74:20:cb:7f:33:45:af:42:b6:e2:65:d1:ed:
                    cf:a4:17:d7:2f:95:3a:ae:48:1b:54:02:93:21:82:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:52:64:B8:9A:B9:E1:B4:92:C0:6F:78:21:7E:F4:89:02:6C:D5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:14:a8:a8:03:65:21:b5:a6:11:42:6a:82:f2:a3:9a:0e:53:
         33:90:9e:3b:cb:5a:20:91:35:2a:52:12:64:ac:cd:38:31:df:
         b8:c8:4c:45:9b:6a:24:a8:7a:26:51:06:ac:3b:82:ad:77:a6:
         b5:16:de:71:a9:f1:c2:63:56:77:e9:d6:60:fd:2a:76:bb:91:
         f7:e8:e6:fd:c6:a8:e7:0d:7d:d7:34:75:9b:d6:bc:e8:ca:1a:
         c0:53:4c:03:ce:aa:f7:d7:9c:b6:21:57:9d:86:30:e6:9a:fe:
         31:57:ca:ca:ee:2b:97:70:66:d2:2a:84:d8:92:b3:7f:78:b2:
         47:f0:3d:c1:f5:89:e0:63:89:61:3d:b4:0d:81:f6:30:b2:42:
         6c:92:e3:dd:b6:4b:fa:d2:98:01:83:d0:33:a4:9f:8a:17:e9:
         08:bc:eb:bb:0d:de:a6:f8:4f:bb:59:77:32:44:14:3f:d5:af:
         65:dd:84:a2:ba:9b:a3:4e:e1:2d:f2:41:cb:59:34:9b:d7:d3:
         33:0f:be:2e:aa:76:61:e0:7b:64:e2:d8:07:b3:f5:29:0a:eb:
         90:51:80:75:8d:67:cb:25:02:62:24:4d:cb:64:a5:0f:d1:44:
         e4:c2:bd:d9:e2:ce:ea:22:27:8a:ae:2e:1a:a7:22:39:04:21:
         fd:dd:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 09:31:09 2026 by rpki-client