Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa
File:                     ed318ff3-2835-3288-a505-9e112c93201b.roa (raw, json)
Hash identifier:          Hzw4q59Bv1KWFQtj8RltHFjzW8/CwJ3qEVm901OiPV8=
Subject key identifier:   1A:E7:8E:8F:2B:4F:58:3E:DF:D9:E2:D8:FC:B1:F5:62:6D:15:78:65
Certificate issuer:       /CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2
Certificate serial:       010D0C9F4328584EA7880E40F2F82207927C8980
Authority key identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396425
IP address blocks:        128.198.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0e:40:f2:f8:22:07:92:7c:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3095d329-ede4-4f8c-a5c6-e350d1e652d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:4b:58:d7:8a:87:04:78:ed:d7:79:ca:1d:
                    df:d7:55:2e:3a:95:64:b8:47:c0:59:cc:c8:e1:35:
                    bb:f7:f6:90:60:81:00:8a:33:9e:44:f7:70:3f:04:
                    d0:2f:15:2e:d8:8a:b0:7b:b8:6a:d1:bb:11:ff:43:
                    12:45:b3:e0:e5:69:67:6e:bc:36:9c:f3:ea:55:78:
                    d9:59:1a:82:a1:b8:af:2c:4e:3f:13:4f:35:3c:31:
                    7d:81:46:fa:6c:72:27:1d:5b:03:ec:d5:ad:2a:b7:
                    9b:ae:d3:56:62:0c:ff:30:f9:82:ce:2f:76:0f:81:
                    fb:fb:a9:ba:07:2d:ed:b1:55:fb:1c:1f:27:88:d8:
                    ae:07:49:d8:15:5b:ba:d6:6a:9d:67:cf:41:bf:a6:
                    d1:5b:4e:83:de:c7:3b:30:52:37:9f:64:fa:c5:30:
                    1b:99:87:53:41:a8:ce:e5:f6:43:0d:d2:15:bf:f9:
                    f7:b5:c2:22:f0:30:c4:a7:11:ce:66:e9:a7:0c:38:
                    70:66:d5:d9:73:66:72:c2:29:5f:2d:81:f6:f6:a0:
                    6d:22:19:eb:07:53:57:e1:95:52:16:26:ed:52:e5:
                    c7:15:7c:54:ff:1d:c2:84:34:45:79:7c:b0:3f:c3:
                    0b:02:c6:1e:41:0a:02:89:1e:80:59:f1:a1:e4:0a:
                    01:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:8E:8F:2B:4F:58:3E:DF:D9:E2:D8:FC:B1:F5:62:6D:15:78:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl

            X509v3 Authority Key Identifier:
                keyid:97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:cb:ec:68:e0:3a:17:38:63:6d:60:ea:8e:82:1a:bb:53:
         de:fa:03:af:e7:35:66:71:5c:f8:e1:b7:fb:76:b7:e1:98:ec:
         98:49:0a:9b:ab:c9:48:54:1a:01:90:5e:cd:b0:cc:6b:c5:1a:
         7d:d9:55:20:55:30:a8:9f:e6:89:3d:50:f6:53:dc:ec:f3:2a:
         6b:3a:19:80:65:f3:9f:bb:3d:69:19:be:8e:05:44:b4:ce:d3:
         0c:d2:55:5c:0c:15:c4:00:04:7f:79:24:a0:ac:b0:6b:39:57:
         39:6f:89:60:ce:69:0d:bf:fe:0f:1c:e2:23:53:4f:68:d7:16:
         98:7e:ab:32:81:5c:17:f0:c8:55:16:f9:cd:5a:e8:92:44:2d:
         fa:fa:fc:76:9d:4f:ab:57:fa:3d:56:c8:82:72:2d:84:cd:10:
         e0:59:2e:73:61:64:e1:b9:a1:c0:3d:d7:0a:fb:99:74:b0:71:
         33:e3:e8:35:7f:d9:e7:2a:36:cf:b1:2d:c0:3b:f5:fe:c2:3a:
         4d:f6:a1:e0:cc:a6:cc:16:80:36:a0:07:c3:40:46:8e:a2:42:
         5f:c2:62:55:22:ec:0a:bb:f5:d8:6c:5d:ae:69:9a:ba:42:6e:
         4e:53:a5:8b:13:d7:ea:68:d9:46:18:78:be:a7:37:57:90:5e:
         e9:ce:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:32:54 2026 by rpki-client