Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/cd97eb4e-3db8-3d52-bb5a-878fe38c7354.roa
File:                     cd97eb4e-3db8-3d52-bb5a-878fe38c7354.roa (raw, json)
Hash identifier:          kKmXCqeRLbaVHZV9jE/5LqWoIrp6SnaTKw0+5bFtCoY=
Subject key identifier:   2E:8E:21:EE:1D:1C:01:13:FA:B5:AA:78:4E:B4:5E:9A:B0:8F:17:97
Certificate issuer:       /CN=2182d348-a81b-4952-b2f6-1c8dbf44eb25
Certificate serial:       010D0C9F4328584F7E7D9F08850DB3CE54D01E80
Authority key identifier: CC:81:44:43:88:8F:47:83:8C:43:FE:65:ED:E5:C1:6D:75:C0:22:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/cd97eb4e-3db8-3d52-bb5a-878fe38c7354.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     376
IP address blocks:        198.168.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/2182d348-a81b-4952-b2f6-1c8dbf44eb25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/2182d348-a81b-4952-b2f6-1c8dbf44eb25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:9f:08:85:0d:b3:ce:54:d0:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2182d348-a81b-4952-b2f6-1c8dbf44eb25
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=fc822cfa-eb59-478f-87f6-754897aee4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:74:a5:f2:e9:0d:ea:83:78:e0:e9:b9:aa:
                    fc:66:a5:bd:43:10:9c:bf:c8:41:8c:35:f8:ce:d8:
                    b2:77:c3:41:df:d6:3d:8a:4a:cf:a5:c5:3c:6a:64:
                    00:73:b8:99:34:c1:5e:4a:ea:44:ed:8d:6c:d6:d6:
                    b7:e4:a5:cf:8a:6a:95:f2:41:6f:89:f4:11:84:43:
                    6e:b2:2b:3e:fe:f9:a2:d1:f6:be:e9:f5:5b:7d:59:
                    f0:97:b0:be:1b:53:38:12:eb:ca:02:1c:1b:c1:01:
                    6b:fe:0e:f5:75:0d:c0:97:65:60:72:8e:0c:ad:af:
                    35:2c:ca:98:1f:89:77:6b:65:e8:ae:d8:33:0a:3f:
                    30:d5:b3:b7:0a:cb:70:8e:96:a7:a7:8e:37:a2:ae:
                    26:3e:18:2c:45:fa:37:ed:ae:55:c9:51:ac:ad:af:
                    18:fd:ac:19:a5:30:c4:63:f2:7f:26:d1:8b:71:4c:
                    6e:e1:e1:97:14:45:cc:82:20:10:ba:0e:f4:02:6e:
                    d4:ac:61:56:14:aa:f6:b3:8d:ba:e1:42:7c:07:41:
                    57:a0:9a:cc:20:00:65:8d:10:35:f4:b7:81:b1:e0:
                    f6:8b:f3:10:4f:98:9a:a2:cc:a2:d8:fb:0e:19:db:
                    e7:49:fc:7a:8d:cf:11:2f:3d:c9:7f:20:f8:b6:5e:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:21:EE:1D:1C:01:13:FA:B5:AA:78:4E:B4:5E:9A:B0:8F:17:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/cd97eb4e-3db8-3d52-bb5a-878fe38c7354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/2182d348-a81b-4952-b2f6-1c8dbf44eb25.crl

            X509v3 Authority Key Identifier:
                keyid:CC:81:44:43:88:8F:47:83:8C:43:FE:65:ED:E5:C1:6D:75:C0:22:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:82:6d:e3:73:c3:a1:02:8d:4d:41:95:d9:69:ea:ea:0b:19:
         86:d8:a4:99:05:1d:f3:cb:1d:53:41:2c:48:7c:b5:fe:11:d7:
         d4:61:01:56:2f:a4:18:4e:cc:54:f1:8e:e6:cd:d1:9a:67:4a:
         65:b1:e9:29:49:f0:4d:ed:a2:c7:df:67:a2:e9:94:f4:ce:0a:
         4c:e0:ac:bb:47:9d:7e:9f:96:5d:ca:9c:96:56:32:90:23:91:
         2f:68:20:a2:9f:c7:1e:16:c3:64:b5:2d:5c:00:35:f8:3a:fd:
         88:ad:ad:82:04:22:7c:ad:66:b1:e1:32:cf:00:e6:9d:20:0f:
         80:b8:30:22:b3:42:93:fc:95:62:2f:dd:22:1e:5a:0a:20:bf:
         31:02:cc:dc:a4:c6:8b:01:a3:8b:f3:ae:bb:78:b2:49:59:62:
         b5:89:7b:31:c4:ba:1c:ce:a8:ac:ed:c6:5c:98:b7:69:66:6e:
         10:53:d4:33:03:7d:57:25:47:da:90:cd:22:3a:ec:ec:72:37:
         44:6c:89:bd:a2:31:df:9d:f4:67:87:60:46:32:a2:66:6a:79:
         e4:16:2f:69:bb:98:36:95:06:ff:83:74:24:44:57:0d:93:14:
         ee:67:6e:e5:45:6e:59:a0:25:d6:7c:87:ef:43:95:c0:54:56:
         92:7c:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:01 2026 by rpki-client