Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/dc96a274-5611-3fda-8fc1-af5a0b0f7f4b.roa
File:                     dc96a274-5611-3fda-8fc1-af5a0b0f7f4b.roa (raw, json)
Hash identifier:          iF+dprLBsClPQptctLgBCXj5yOBdAGHF2hMdyGUSIaQ=
Subject key identifier:   BF:AC:AE:CF:F7:8B:9F:50:96:41:86:37:14:D8:69:9B:33:E1:F2:88
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F4328584F497413A7082611E925338900
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/dc96a274-5611-3fda-8fc1-af5a0b0f7f4b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14325
IP address blocks:        198.7.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:13:a7:08:26:11:e9:25:33:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d3c9aa94-6a0c-4f2b-ade5-1e5c18f4d5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:75:c5:5d:41:af:88:b2:f3:c5:d0:16:5d:
                    25:d5:a6:46:e1:19:23:42:16:ff:f2:b6:4b:38:d9:
                    2b:46:d8:70:d7:53:d0:f7:ed:d0:db:d6:7f:e9:f1:
                    97:cf:15:99:0e:8a:92:4c:65:91:6f:3a:2f:9f:27:
                    a8:87:fc:3a:61:6c:39:d2:9f:bb:3b:cd:03:ee:1d:
                    7a:25:90:bc:01:cc:0f:9e:76:f6:5b:4a:a6:ab:df:
                    99:0b:4d:b8:19:36:c2:74:4a:62:c8:95:10:59:7c:
                    e4:50:b6:d8:ea:e4:bf:90:7c:68:e6:c1:e0:4f:a1:
                    9c:50:c7:26:2b:10:1c:63:7c:a9:a0:36:b9:02:2e:
                    45:85:79:bf:b4:92:19:e3:b7:0a:ff:56:f4:c9:04:
                    8e:83:75:90:56:4c:af:3f:b2:e1:10:e2:30:a9:8a:
                    d5:e0:f1:c1:55:74:c3:d4:82:cd:ff:3e:9b:03:4d:
                    d2:a7:fe:ab:39:97:a5:eb:15:ff:08:ea:73:11:cb:
                    14:6d:ef:a5:05:47:46:d8:4d:59:b4:22:c1:3b:f8:
                    bf:d5:f8:f9:d3:a6:aa:2f:c2:3e:4e:1b:25:b5:9b:
                    41:fd:a8:f3:76:b5:44:77:45:00:00:06:45:d6:23:
                    e0:09:78:18:9c:d1:be:3e:70:b8:7e:71:b3:36:73:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AC:AE:CF:F7:8B:9F:50:96:41:86:37:14:D8:69:9B:33:E1:F2:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/dc96a274-5611-3fda-8fc1-af5a0b0f7f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.7.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f8:ef:d6:43:da:57:b1:b7:82:3a:b1:e0:b2:f4:86:79:0c:
         66:4d:a8:98:05:2a:ab:58:63:f1:56:09:36:ac:a3:0d:69:5f:
         5e:05:ff:9b:e7:94:7d:b9:75:5c:33:bd:e8:62:6c:00:89:2b:
         0d:5c:ed:19:d8:0c:f1:0f:53:77:75:73:e5:13:5d:0c:9f:16:
         64:61:e0:ad:66:4c:2c:bc:f3:82:bb:d5:b7:64:ec:bd:90:10:
         6e:07:7f:00:e2:59:b3:4a:ae:30:8a:bb:e0:10:b5:f7:bf:bd:
         17:45:c8:a0:09:af:c2:4c:35:1b:00:67:95:da:de:0c:18:b9:
         85:39:e1:fd:04:a6:94:83:6e:3d:69:bb:32:76:c8:e1:71:52:
         0a:51:71:f0:a6:38:bc:82:67:74:c6:c0:16:92:6f:2e:86:fa:
         71:08:35:7b:31:c6:58:a2:54:a6:64:a0:d5:07:f0:2f:2f:c5:
         f1:3c:e9:5b:a7:f5:83:59:92:ed:9d:2c:16:33:b3:63:c9:1b:
         c4:64:88:48:78:fb:e8:16:ca:50:c4:69:3b:08:6d:21:50:61:
         dc:45:b4:23:88:05:8c:3e:b0:a6:78:5a:73:36:a2:1f:e8:41:
         f1:8c:b3:7d:e1:1b:b0:eb:8d:3b:14:29:60:8a:46:27:eb:c5:
         a6:69:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:41:49 2026 by rpki-client