Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/2ad67c14-d6de-3b89-acfb-f2d001ecdcfa.roa
File:                     2ad67c14-d6de-3b89-acfb-f2d001ecdcfa.roa (raw, json)
Hash identifier:          BRuwn1BbRTOH00vJtYkYjtxg2dy57MnThn58M4bsXgw=
Subject key identifier:   01:09:99:E6:F6:78:10:44:65:0B:0B:D3:C9:1B:C7:07:37:C7:B5:FE
Certificate issuer:       /CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
Certificate serial:       010D0C9F4328584F2957CD3F1DFA18116F41DE00
Authority key identifier: EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/2ad67c14-d6de-3b89-acfb-f2d001ecdcfa.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     203
IP address blocks:        198.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:cd:3f:1d:fa:18:11:6f:41:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=676a3d63-6a8d-4b20-bdd2-3465b3b109d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:72:1c:e7:28:eb:e6:6b:e4:4e:ad:b8:78:3f:
                    2a:96:77:30:92:31:a2:6d:29:1f:25:06:0d:c0:6a:
                    5d:8f:c5:00:5d:22:f9:d2:a9:90:0c:c4:e9:85:71:
                    1e:35:64:76:8f:a9:52:97:7d:6d:fc:c5:e4:1a:ef:
                    b2:67:e9:88:0f:62:f1:cd:28:15:10:77:7d:6a:ae:
                    e0:9a:92:e9:32:81:1b:89:ed:6a:5b:94:9b:db:ee:
                    96:05:66:93:a9:55:0a:ad:19:d2:1d:2e:c7:b5:2d:
                    78:1f:c1:8f:8f:d1:84:a2:cd:d7:ce:2d:57:19:98:
                    81:d1:86:92:f0:ab:5e:f0:d4:af:7b:9a:8f:91:9d:
                    ce:17:b8:b1:93:de:9a:23:4f:3d:8e:b6:1e:32:8f:
                    66:6b:8d:77:11:a9:1b:90:ee:10:ac:95:d6:e4:46:
                    5c:4c:a6:da:0e:88:b0:32:a1:29:dd:df:e9:50:0c:
                    c0:1b:4f:13:35:86:02:1c:60:f7:91:b6:be:76:36:
                    71:17:59:9c:4a:14:c6:fe:a4:85:cf:15:28:ae:cc:
                    02:82:a3:30:7f:ba:94:ac:5c:61:0a:8d:85:ff:90:
                    6c:a1:c7:34:0f:1d:4a:05:97:d8:f9:5f:1d:5c:c7:
                    d5:dd:85:42:d3:f9:c6:d3:a3:90:f9:93:05:52:a0:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:09:99:E6:F6:78:10:44:65:0B:0B:D3:C9:1B:C7:07:37:C7:B5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/2ad67c14-d6de-3b89-acfb-f2d001ecdcfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.crl

            X509v3 Authority Key Identifier:
                keyid:EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:66:63:be:2c:68:15:60:e0:af:a1:b7:c3:c7:0f:d0:77:
         3d:b8:e5:b7:1f:25:e0:f0:7a:4e:eb:8b:9b:fd:88:78:f5:65:
         98:2e:c1:79:63:e8:e8:07:cb:e9:00:86:45:85:43:ba:c0:35:
         d5:2c:4d:9a:4f:e3:4b:0c:5b:90:16:c8:b6:18:bd:7c:d5:90:
         f4:55:e6:f7:79:57:9e:b9:7f:d8:0d:b7:50:c2:f7:d7:2a:0b:
         96:61:1f:e4:fb:2d:4d:c0:46:6a:51:24:62:42:a1:5f:21:5e:
         10:ee:3d:ec:17:c3:d6:e8:52:be:63:6a:58:6a:2b:02:86:36:
         e8:dd:25:14:1a:2c:f9:a7:fb:32:0c:a2:04:0e:bd:72:ed:f5:
         b1:26:49:a2:73:b4:25:5a:5b:91:a7:a1:5a:b2:a6:d3:01:e2:
         98:bc:cd:a5:a9:c7:29:aa:d8:d4:84:0e:36:1e:eb:57:56:2b:
         69:d9:c4:3a:c2:42:4c:13:de:1c:70:06:65:c1:03:39:c6:d2:
         4d:4a:01:43:37:b7:5a:20:c5:bb:32:fe:31:66:4f:a8:90:c0:
         2f:c7:58:96:5a:ad:81:04:aa:82:72:82:a5:f2:9a:0a:a8:19:
         09:b2:27:6b:51:5b:31:85:63:84:fa:8e:03:d8:a5:1a:a6:cf:
         10:f4:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:31 2026 by rpki-client