Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa
File:                     07cdf4ff-3d86-3034-9063-bc02000bef1e.roa (raw, json)
Hash identifier:          kvQKG0mHtG4kxKLSg2nWgEzUu2g6bRy+PTevOw+9oBI=
Subject key identifier:   FA:09:D5:B0:F4:6F:C3:23:39:77:3B:82:B1:2C:BA:BF:F9:46:85:7C
Certificate issuer:       /CN=e9986c58-4c7a-450f-9355-1382b40eb86e
Certificate serial:       010D0C9F4328584D703FE79F02E1BD5E73DFA380
Authority key identifier: 93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     23166
IP address blocks:        198.98.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e7:9f:02:e1:bd:5e:73:df:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9986c58-4c7a-450f-9355-1382b40eb86e
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=7a1318c4-7584-4539-9478-c484b721e599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:93:93:3b:5b:5a:45:ea:5d:3d:bd:b6:33:
                    b6:1a:40:af:aa:aa:dd:e4:78:40:fb:2b:87:79:11:
                    75:0f:ae:ba:66:dc:c9:20:7e:08:ad:8e:9e:e8:a0:
                    80:a4:0e:4d:cd:6f:64:a3:ac:0b:e4:ac:31:87:58:
                    4b:1c:98:4f:4a:fc:60:58:60:59:22:ad:78:ad:5b:
                    fd:83:bc:d5:21:a8:c7:17:8e:ff:90:f8:35:56:4a:
                    e1:ec:3c:e5:99:14:c4:af:a0:c2:b6:25:3e:3c:f8:
                    0a:04:49:6c:73:17:5c:ab:8f:6d:1e:43:8f:6f:62:
                    f0:55:c8:fa:76:6d:27:e8:e8:62:cd:13:13:38:3c:
                    cd:99:6a:b5:26:63:75:95:60:eb:21:c8:3b:69:f2:
                    bb:1d:26:61:6f:4e:24:03:79:d5:15:c6:3f:fc:fa:
                    3c:4d:17:29:68:88:7d:b8:36:cd:ca:bd:16:6a:4c:
                    af:ba:03:c9:8c:49:22:82:3c:4b:e5:97:3f:5c:2e:
                    9e:f4:de:e6:8d:cc:11:2b:96:3c:42:e2:24:e9:00:
                    f7:83:de:9a:c3:fb:3e:11:bd:27:28:f7:7d:53:68:
                    8a:f0:94:11:81:29:dd:4d:aa:77:61:cc:f7:08:eb:
                    99:3e:0f:ca:98:5c:52:7e:e5:65:c3:af:53:17:47:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:09:D5:B0:F4:6F:C3:23:39:77:3B:82:B1:2C:BA:BF:F9:46:85:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl

            X509v3 Authority Key Identifier:
                keyid:93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.98.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5c:b0:30:4b:49:dc:0b:e9:09:77:4d:3c:75:2d:f7:26:3d:
         f7:40:cf:ef:db:b3:db:cf:a3:5e:95:5f:99:e6:9b:7a:38:ad:
         b5:2e:b0:65:fa:d1:a5:6e:ea:3c:ac:7e:10:c9:c8:0b:c6:77:
         00:ff:ac:13:9c:5c:f9:32:b4:7b:e4:fd:e5:8a:9e:9d:82:e0:
         a6:20:fb:ba:4f:81:77:36:7a:df:f7:8e:65:19:fc:3d:fe:7d:
         f0:54:02:b8:4e:ea:1d:7a:22:21:95:03:ff:63:c3:24:d4:87:
         de:21:4e:4d:d2:78:ea:83:f6:a0:fc:7e:b3:be:79:8a:93:ac:
         39:ee:de:f1:e6:ef:2f:e4:77:81:e1:cd:a5:f9:d2:36:2e:a5:
         5f:4f:fb:32:b3:a1:5d:5b:6e:bf:4d:8c:31:62:ae:e0:ce:bc:
         3c:86:0e:4b:f8:b0:c1:42:71:33:9c:41:01:21:83:a2:84:4a:
         3a:4e:d4:f6:03:3a:db:28:b8:58:79:a3:b4:09:52:68:77:9a:
         f7:98:22:64:81:27:20:85:46:97:ec:c6:fc:8b:99:d0:be:51:
         1a:19:d8:c2:06:61:3e:e3:0b:31:05:d8:4d:cc:0e:02:29:b0:
         dd:98:86:60:a7:9a:6d:62:ac:19:27:aa:c7:80:96:ca:16:4c:
         7e:e4:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:15 2026 by rpki-client