Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/e5655dc3-73c5-3131-8e9f-364ab5c2e0ee.roa
File:                     e5655dc3-73c5-3131-8e9f-364ab5c2e0ee.roa (raw, json)
Hash identifier:          wkMm1EzkvtmFk+BvvrVmuFdY0A6wn4zSQEHWcptZec0=
Subject key identifier:   39:9E:CE:55:FC:E8:5B:B0:79:00:CC:9E:43:EB:2C:E9:22:00:2C:8C
Certificate issuer:       /CN=aa6b84f9-271a-420e-904b-b25ba5f52b05
Certificate serial:       010D0C9F4328584F15CCEBAA29E3F4B0E1F40800
Authority key identifier: 7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/e5655dc3-73c5-3131-8e9f-364ab5c2e0ee.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     395155
IP address blocks:        198.179.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:eb:aa:29:e3:f4:b0:e1:f4:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6b84f9-271a-420e-904b-b25ba5f52b05
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=e472aba2-5c12-49cb-9557-448a46afb460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:65:78:17:0f:8c:41:b2:16:08:3f:44:61:
                    ee:26:71:f9:be:ec:da:ea:85:c5:75:fa:15:cf:ec:
                    15:ac:2e:5b:6e:c6:5c:c7:8b:ed:fd:e5:32:e7:e0:
                    62:95:27:09:94:e5:04:e3:75:d7:16:b8:5a:01:ae:
                    65:b3:4e:3b:28:a3:47:9b:24:45:70:56:28:6d:e3:
                    65:fb:c1:e2:f6:94:bf:7b:e3:4e:b9:93:4d:44:22:
                    1f:29:44:b4:42:29:eb:50:15:32:11:10:75:95:3c:
                    5b:72:d2:d8:59:48:25:39:0b:e1:da:0b:3e:af:6b:
                    fb:bd:c1:e8:f5:01:65:b1:1e:ed:4c:ac:2f:da:aa:
                    41:db:34:7a:20:52:35:88:c7:9e:4f:01:b5:89:66:
                    7c:e4:1d:e0:39:e1:fe:5e:56:c3:fe:85:8f:98:bf:
                    e6:e1:bd:f1:df:68:e5:1b:5b:3e:83:ec:e8:1e:f9:
                    49:81:ed:3a:07:91:24:35:5f:7c:1a:ca:d9:0c:08:
                    56:96:4f:81:49:11:13:27:00:34:76:d6:d8:82:55:
                    1f:8e:d3:41:fd:d6:78:93:c6:93:9d:87:45:07:79:
                    16:1b:93:bf:2a:37:f1:36:2f:00:8d:df:80:96:91:
                    dd:95:41:f0:be:a7:a0:35:e5:c4:df:91:e4:05:ee:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9E:CE:55:FC:E8:5B:B0:79:00:CC:9E:43:EB:2C:E9:22:00:2C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/e5655dc3-73c5-3131-8e9f-364ab5c2e0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.crl

            X509v3 Authority Key Identifier:
                keyid:7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:6b:97:0f:3a:7b:78:21:1d:0c:e0:3a:f9:ea:bf:43:55:bd:
         dd:e1:8e:2d:79:d5:7a:06:9e:e0:d3:5b:3c:2f:bd:65:cb:61:
         38:64:55:0e:3a:c7:00:71:71:e3:e8:eb:ed:2d:e0:7f:46:ed:
         30:a6:36:85:f7:7e:8a:2a:a4:7d:98:33:87:a6:91:57:ce:d1:
         a5:67:44:a3:9c:84:55:33:d4:cd:e4:92:ff:2e:00:08:ec:15:
         31:dc:a5:d0:4e:a8:26:20:49:50:84:7f:78:94:ea:3b:75:d1:
         c0:d7:3f:2f:d3:c7:c4:bc:db:a4:e1:b6:ea:90:87:08:0d:7e:
         1a:d6:c2:42:f4:12:7d:fa:fd:df:ff:ce:81:f8:14:c2:2d:4a:
         b9:94:bb:e1:b7:28:3f:3a:84:0e:23:22:48:65:6e:7f:de:85:
         a0:92:84:9a:19:95:b4:34:e8:0d:b0:9a:b4:b6:df:88:18:b6:
         02:09:0a:2d:e5:3a:fa:24:21:68:df:ba:e9:77:d9:85:88:95:
         85:3b:78:55:fe:8f:5e:51:f6:da:90:1e:56:5b:8d:c1:b3:30:
         75:09:3a:12:76:be:c2:8f:d9:0e:98:0d:b9:9a:4f:bd:e2:f7:
         95:62:09:6d:f7:d8:c5:f4:92:68:a4:fb:5b:44:c4:76:d8:01:
         f4:8c:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:26:35 2026 by rpki-client