Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/98266c24-b64a-3b4b-91b5-c4942e26ba4d.roa
File:                     98266c24-b64a-3b4b-91b5-c4942e26ba4d.roa (raw, json)
Hash identifier:          A8pxE/cAxVLdkcM2o1lxr2vZM0Q0LH1qoG0g6iszR18=
Subject key identifier:   7C:BB:4A:78:5E:B9:F6:AA:87:14:1D:0E:8E:A3:D2:25:B0:F7:C5:0E
Certificate issuer:       /CN=ae521790-9854-4d88-9898-5300ce9737ab
Certificate serial:       010D0C9F4328584F27F25490A7C9015E005B4200
Authority key identifier: A3:8C:D4:C0:9E:9E:65:0C:1A:21:D2:36:0D:54:63:3B:4B:5F:0E:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/98266c24-b64a-3b4b-91b5-c4942e26ba4d.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     11262
IP address blocks:        198.163.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/ae521790-9854-4d88-9898-5300ce9737ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/ae521790-9854-4d88-9898-5300ce9737ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:54:90:a7:c9:01:5e:00:5b:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae521790-9854-4d88-9898-5300ce9737ab
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=bbf236af-d18d-459a-b617-d3b02de0dea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:b6:b3:5f:44:f0:da:c2:c3:ce:c2:da:8f:
                    8b:31:8e:44:71:84:de:7f:51:e4:8d:86:64:66:5b:
                    a2:fe:b7:86:93:69:18:ad:83:43:11:f1:40:73:5b:
                    9b:1e:8f:05:dc:ad:32:53:66:8a:cd:c8:90:92:ce:
                    b8:17:57:6f:76:f2:74:c4:bd:c4:b9:8d:0c:7d:51:
                    5d:6c:21:48:fc:55:37:91:88:a9:3b:62:e6:21:ea:
                    ee:8c:89:26:63:35:f5:13:89:a6:1f:a5:95:f8:49:
                    c4:e1:55:e2:ff:73:12:32:71:83:1c:7d:5b:f6:6e:
                    d0:14:17:8a:71:6b:ed:6a:04:95:93:c8:c9:8e:5a:
                    6a:d4:73:04:0f:91:7c:24:e7:df:50:81:84:ef:20:
                    5c:eb:da:5b:08:fd:64:76:29:f8:b7:ad:d3:cf:a9:
                    a6:47:7b:a4:cc:b5:83:5d:70:a0:83:3b:3c:74:67:
                    b4:d3:a6:a4:ce:67:08:1d:e7:ca:20:0c:67:66:52:
                    49:39:ac:62:34:95:fa:c8:ca:96:74:9b:e0:eb:1f:
                    76:62:6a:ad:47:c9:7a:5e:fb:19:d8:b8:dc:e7:ba:
                    d0:15:ea:e9:88:a0:09:55:cf:48:99:b0:a5:7c:d7:
                    2e:b9:72:0f:b1:19:af:f9:1c:69:d5:d1:7e:29:61:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BB:4A:78:5E:B9:F6:AA:87:14:1D:0E:8E:A3:D2:25:B0:F7:C5:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/98266c24-b64a-3b4b-91b5-c4942e26ba4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab/ae521790-9854-4d88-9898-5300ce9737ab.crl

            X509v3 Authority Key Identifier:
                keyid:A3:8C:D4:C0:9E:9E:65:0C:1A:21:D2:36:0D:54:63:3B:4B:5F:0E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae521790-9854-4d88-9898-5300ce9737ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cb:4d:fb:1c:ef:b9:f1:67:42:75:1a:22:0d:a2:e5:7b:c1:
         01:ac:21:2d:81:5d:24:e2:e1:98:be:e8:39:42:97:f3:72:2f:
         34:7f:ea:b7:ba:a0:b7:36:77:71:6d:3c:e2:66:99:2b:03:71:
         c6:26:1d:a2:9f:f4:0a:74:02:4b:dc:ee:d5:42:67:36:db:de:
         11:72:e9:a5:df:dd:0b:94:7b:6d:07:46:80:d0:29:55:b9:07:
         b9:ab:88:0a:11:d9:ef:82:ef:fb:41:60:b2:9a:83:60:32:03:
         79:01:1f:32:4f:38:a9:9e:64:f2:95:cb:ff:58:15:f4:f7:55:
         f6:58:5d:2d:0e:48:5a:63:67:c7:98:44:f2:52:db:17:24:3a:
         d6:15:ee:91:7c:4e:6e:66:a6:b3:e8:54:b0:3e:b7:b2:96:cd:
         28:cc:b6:46:9d:b8:11:4d:c6:e4:fa:6b:67:c3:f3:af:be:99:
         93:a1:f2:45:2e:54:9a:58:59:d7:6b:c1:2c:da:e1:0f:d7:22:
         88:3b:9f:27:af:83:e0:6e:03:39:85:1f:6f:4d:ab:95:f6:10:
         5c:53:ae:18:e6:39:a7:7f:1a:2f:f1:19:a7:9c:48:88:10:2d:
         ae:46:aa:0a:d6:88:83:49:eb:7c:df:51:d0:be:4a:a2:ba:44:
         87:a9:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:22:38 2026 by rpki-client