Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa
File:                     f91931be-3fbf-37a3-932e-7cbf092669bd.roa (raw, json)
Hash identifier:          4NpZKVNZd6wEcRf/7XXEd0cncnqUce325oI4TRQ4fPk=
Subject key identifier:   0D:82:4C:D7:27:3C:AD:6A:B5:22:66:83:CD:86:3C:E1:7D:CD:7C:85
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584F2EED0BCF249C521D76FC7EC0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     35758
IP address blocks:        172.98.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:0b:cf:24:9c:52:1d:76:fc:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=e9b42676-b8ee-4dfb-aa32-b61ffce3514f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:44:a2:06:ee:b7:3f:e2:d1:c7:20:79:8e:
                    36:7d:d3:5e:1a:e3:ab:90:53:ab:6d:33:ba:f6:4e:
                    f8:fc:62:87:2b:f3:1b:a7:26:0d:74:ce:d5:9e:60:
                    2f:00:ae:d5:88:f6:38:91:02:c6:63:ea:81:f3:c1:
                    d7:f9:e3:a2:41:d8:77:0f:43:b6:b9:db:d3:71:7c:
                    46:49:17:04:0f:bc:4a:5b:d2:10:ca:2a:b7:41:88:
                    ee:77:67:7b:9a:d4:46:d5:41:d2:27:5c:1f:19:5e:
                    b5:c1:5b:7a:7b:b4:57:9d:ea:22:8e:4e:2e:5a:28:
                    4d:98:a9:16:fa:0c:b8:02:95:83:41:aa:f4:02:ce:
                    c3:e1:9e:de:96:18:0d:19:eb:97:e5:73:7f:c2:4f:
                    b4:ff:2d:16:99:a7:f1:69:42:02:52:4f:a2:b8:09:
                    c9:96:7c:33:4b:be:17:31:bb:d6:fe:48:f5:ff:d7:
                    86:68:02:08:d2:aa:ae:07:b6:c9:0d:c8:c1:15:78:
                    18:95:d2:24:b0:2a:a2:9c:bd:37:a4:01:60:a5:1e:
                    a3:65:50:7b:9e:8a:e3:ae:d3:03:1e:3e:6f:76:d1:
                    68:9a:c7:f6:8b:32:9e:29:c1:2e:70:a7:5c:af:69:
                    95:9f:17:13:0e:8a:78:84:23:0c:d7:b2:df:9d:d4:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:82:4C:D7:27:3C:AD:6A:B5:22:66:83:CD:86:3C:E1:7D:CD:7C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:b7:3f:50:30:65:8d:b1:10:77:b0:3c:e0:f1:44:5b:f0:
         c5:2d:65:a5:a5:c2:a1:53:50:af:47:3a:bc:4b:6c:3f:2b:b3:
         df:54:ea:81:9d:2a:eb:6b:0e:38:91:64:6c:f4:90:5f:94:ed:
         18:84:f8:e3:09:14:55:0c:a4:10:d2:40:4a:19:8c:61:b7:79:
         f9:1f:8b:33:be:84:fd:4c:f0:dc:58:3d:0d:22:d8:a0:61:56:
         df:bd:0a:b3:3b:18:83:07:fd:87:ad:b8:77:17:de:92:dd:d7:
         a8:27:aa:9a:3f:53:e9:28:b5:2f:da:27:b7:cd:c1:31:86:e8:
         3d:34:51:34:6b:a1:79:36:f5:ff:6d:a1:dc:bf:c3:9e:e9:03:
         a5:63:3c:94:b9:ea:5b:4f:e6:a9:e9:80:46:d7:97:c0:78:32:
         f3:71:a5:84:9a:57:30:f8:f0:3f:70:1e:b6:02:8a:4c:2e:55:
         f1:b0:10:7a:70:3b:fa:d7:57:24:f3:ee:11:b5:20:32:19:f7:
         7a:8b:72:43:11:96:6e:5e:b4:6c:25:fb:a9:37:45:94:1a:3e:
         43:f9:8d:64:4e:fd:09:76:31:b9:a5:6d:25:7e:73:e1:15:74:
         bc:99:8d:95:0f:9b:e2:3c:03:18:11:e8:33:a4:f9:a3:e5:8f:
         66:40:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:46:59 2026 by rpki-client