Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/1543a8cb-18fb-302e-af85-0c0e7dac9de6.roa
File:                     1543a8cb-18fb-302e-af85-0c0e7dac9de6.roa (raw, json)
Hash identifier:          7wAs5SAi63+/t8V2RaocBiZHK4GUW5hvXu1qg0bnbHU=
Subject key identifier:   C3:B7:4B:83:DF:1E:43:49:66:C1:1D:9A:C3:31:69:29:17:26:46:87
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584F21455D09E0F1BFABD26F9500
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/1543a8cb-18fb-302e-af85-0c0e7dac9de6.roa
Signing time:             Thu 10 Sep 2026 15:36:53 +0000
ROA not before:           Thu 10 Sep 2026 15:36:53 +0000
ROA not after:            Wed 09 Dec 2026 16:36:53 +0000
asID:                     3152
IP address blocks:        198.125.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:45:5d:09:e0:f1:bf:ab:d2:6f:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Sep 10 15:36:53 2026 GMT
            Not After : Dec  9 16:36:53 2026 GMT
        Subject: CN=86e31275-1187-42aa-aa95-c6785e1fbb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:43:aa:65:f6:48:b2:15:fc:c7:32:97:e6:
                    0e:c6:8f:b2:e7:7e:39:9e:de:bf:09:f5:84:fc:5e:
                    3c:70:23:5d:ee:10:82:14:07:f9:6c:ee:f0:70:a1:
                    d0:f1:37:e7:25:8a:b8:4d:28:57:2d:ba:f6:20:b1:
                    ba:90:85:d2:d3:5b:eb:30:4e:c6:de:6f:eb:c6:c3:
                    2a:bf:91:f1:11:91:39:9f:39:24:47:27:78:59:33:
                    4c:39:11:7e:0f:05:27:1e:0e:31:5c:20:ae:70:9a:
                    4c:8c:2c:0a:1b:61:92:7f:43:b1:83:6a:5e:46:df:
                    a0:84:d1:ae:73:74:4b:a7:4f:94:cd:c0:75:65:93:
                    95:0d:9a:2c:dc:7f:bf:61:6c:13:a2:73:34:4f:b0:
                    18:db:22:74:79:8d:39:ed:f5:16:fe:a7:66:9d:97:
                    09:7f:a3:b7:ee:4d:fe:7f:92:08:78:b1:5d:e3:86:
                    7b:23:a3:01:19:bc:71:eb:37:a9:6c:02:f4:3a:ab:
                    45:ad:79:cc:94:5b:3b:10:e3:e2:65:d8:90:fe:d6:
                    8c:73:6d:25:2a:18:ad:a4:58:0b:ee:fa:54:bc:64:
                    ad:e5:05:a7:cd:5a:3e:36:08:85:07:80:c5:4d:0b:
                    6e:6c:5c:04:64:b0:9d:3c:63:02:04:ff:4e:e0:ce:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B7:4B:83:DF:1E:43:49:66:C1:1D:9A:C3:31:69:29:17:26:46:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/1543a8cb-18fb-302e-af85-0c0e7dac9de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.125.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a9:71:41:75:ca:92:91:52:d0:23:b8:1a:52:ff:6e:61:3e:
         31:62:7d:da:78:a9:9f:4a:bd:ee:50:44:0a:d9:5d:67:ef:94:
         4c:93:c1:74:8e:1e:f6:26:d2:e8:e8:79:59:31:2d:1a:eb:e1:
         dc:b8:ec:ba:0a:41:4e:03:23:00:79:f2:09:10:5b:68:46:fd:
         fd:5a:7e:ce:18:39:3e:5c:b1:d9:d4:8a:76:64:64:67:d0:bb:
         ee:20:6c:ba:86:1c:8a:45:e4:bb:ad:21:75:06:4a:e7:35:37:
         c4:7d:ae:82:21:4c:d8:fc:56:9c:d0:28:ed:97:fb:1a:29:23:
         cb:1f:14:92:c2:4a:42:16:1e:1f:29:76:82:7e:cd:f3:06:24:
         82:ce:da:99:95:12:66:5d:0b:4d:ec:1a:8b:26:4b:aa:8a:af:
         40:43:4b:fb:97:2b:bf:9a:5e:66:36:ba:5b:b5:33:9f:a4:92:
         3a:d9:56:46:3a:73:5c:ad:8e:53:43:73:78:d1:b4:7c:d1:c8:
         95:ca:59:c5:a6:d6:ee:f3:a6:65:ea:3e:bb:38:55:dc:1e:80:
         b6:27:5a:c7:22:0e:99:29:ba:fa:fd:e5:e8:65:4b:bc:71:b1:
         39:ac:44:8b:21:06:e6:8d:24:8a:da:a3:35:f8:6a:e6:5e:8d:
         cc:1e:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:08 2026 by rpki-client