Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa
File:                     7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa (raw, json)
Hash identifier:          SOBmbZ0THpONAsnZvcyXCG5dYYJpRkN/pSmHSO721+o=
Subject key identifier:   F0:FA:EA:FD:5F:E7:40:3A:E9:73:69:12:AE:35:CE:63:02:12:60:C5
Certificate issuer:       /CN=712951d4-501e-451c-a20a-59b6aff3e2d4
Certificate serial:       010D0C9F4328584F5E62C3F87B61C5B12A1BF600
Authority key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     38177
IP address blocks:        198.140.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c3:f8:7b:61:c5:b1:2a:1b:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712951d4-501e-451c-a20a-59b6aff3e2d4
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=7ebabc11-c1c1-4217-99d5-7b6917905283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:b9:63:39:9a:6f:e0:98:90:03:c8:1a:65:
                    85:41:3e:0b:fd:33:29:f0:e6:80:c9:f7:6b:5e:8d:
                    62:f2:5c:7f:2f:53:05:8d:e7:65:b7:87:f6:58:b1:
                    6b:d3:62:57:fb:84:a9:60:83:d9:83:1b:c3:29:41:
                    1d:83:a0:37:05:c2:17:6a:2f:bc:c0:3b:c3:30:53:
                    06:fa:b7:0c:1c:e8:05:82:f8:15:b4:36:59:f2:18:
                    a9:73:1b:b8:a0:77:7d:56:34:19:3f:50:4a:23:1c:
                    a3:5d:ab:61:d1:54:7c:dd:7e:36:42:5f:82:81:e7:
                    16:6b:92:85:98:fa:6c:25:31:78:ed:c3:5e:69:72:
                    06:37:79:d3:28:97:ba:5a:90:94:34:9b:f0:ef:46:
                    ad:c2:c8:57:ec:0c:64:00:23:7e:db:97:cd:74:ab:
                    36:81:8f:7c:f5:06:b5:02:06:38:15:43:44:60:47:
                    55:1e:7f:59:0e:4b:22:3a:d8:8b:11:40:47:bf:ad:
                    78:b2:99:3f:d8:57:86:d4:80:b4:ec:29:ca:95:0f:
                    15:2a:d8:5b:71:a8:c5:64:36:11:47:3d:ba:fb:77:
                    c3:61:e2:5b:36:75:7c:62:3c:8d:36:dc:60:81:af:
                    67:12:88:28:ab:11:68:3f:9a:a0:58:60:fc:9d:c8:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:EA:FD:5F:E7:40:3A:E9:73:69:12:AE:35:CE:63:02:12:60:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl

            X509v3 Authority Key Identifier:
                keyid:52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.140.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:04:01:fe:cd:7e:78:50:b9:ef:39:79:52:29:40:f2:21:fe:
         88:99:9b:ee:19:55:99:e9:e6:89:fd:85:d0:e1:76:4c:61:7a:
         7d:78:8f:66:c3:4b:56:cf:9b:a4:c5:41:14:0f:6b:34:24:58:
         c5:0e:c0:5b:d7:e5:17:05:17:f1:fc:cf:0d:50:e4:6f:1a:3a:
         95:da:c5:9a:7d:21:65:dd:ce:fa:31:54:51:63:0d:c3:9a:06:
         e8:13:64:8b:23:45:6a:64:12:13:6a:be:f6:af:f1:91:34:99:
         02:66:e1:bf:4e:22:89:66:0d:98:b1:b9:82:b3:bb:9f:2c:a2:
         e7:d9:ad:fb:e4:26:fa:bb:5d:ca:62:6b:96:c5:eb:60:da:18:
         f6:f4:c5:ea:96:2e:02:73:e3:c1:bf:c3:de:2a:8b:57:8a:e7:
         5d:b1:a3:4f:07:21:0a:84:0d:cc:e9:03:ad:83:ee:55:24:54:
         fe:67:bb:f4:1b:5a:ff:54:e9:0d:e4:4c:d0:49:59:e6:6f:09:
         79:d6:ee:21:53:c1:6d:88:a9:3c:32:8f:fa:52:4c:43:4a:ac:
         3a:4e:e0:31:2b:02:a4:4c:99:06:9f:05:9c:0d:a2:2c:63:70:
         5a:00:56:99:83:10:8b:58:18:55:fd:4c:ec:fd:59:d9:5e:e4:
         1f:b5:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:08:41 2026 by rpki-client