Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
File:                     0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa (raw, json)
Hash identifier:          gh0qatNIqkIxk2iDOkqj6ZocKJR5iDolmy3lmyBsJgw=
Subject key identifier:   79:90:3B:21:2F:CB:2C:15:C3:9D:FC:70:9C:A9:2B:88:FF:E8:6E:AC
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F4328584F698D9D41518BFE83B66DF700
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     376
IP address blocks:        198.73.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:9d:41:51:8b:fe:83:b6:6d:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=e268f709-c6e4-404a-a6b2-c7c5e6ad12e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:6d:bc:fe:b4:47:e1:af:48:b9:c5:7a:b2:
                    8f:6d:c6:6a:3b:13:8e:1e:c2:7d:76:b5:f9:4d:59:
                    21:ce:47:8a:cf:35:fc:09:e2:e4:e6:1c:77:01:e8:
                    b1:41:af:81:54:be:98:0e:d1:21:8f:b4:68:cd:62:
                    19:83:5a:32:49:c8:94:56:97:e4:bc:5b:c5:2d:e8:
                    26:c9:7c:3a:31:e5:c9:30:67:75:73:6f:da:32:4b:
                    aa:8b:60:3c:22:77:93:2a:c3:e2:76:d9:89:11:66:
                    d6:04:d1:33:20:cc:6f:bd:a7:85:f9:c2:d0:6a:b0:
                    6f:e1:97:7a:9b:0c:1d:2b:d8:df:a9:fb:6c:35:36:
                    5f:1a:77:b8:4d:71:dc:70:e1:df:e7:98:1b:b0:60:
                    b8:5a:3b:35:3f:c6:1d:ad:e8:41:69:26:fc:c0:ae:
                    b3:0b:84:43:09:6b:6f:9e:76:b1:e9:db:74:16:a5:
                    3a:8b:31:6c:80:cf:0a:42:0a:c7:7d:8d:18:54:31:
                    55:bb:84:a5:10:f9:98:0a:ef:1b:98:db:6f:48:8f:
                    96:6e:24:ec:72:0d:98:9d:4c:7b:23:82:3f:69:46:
                    12:32:87:2b:6e:b2:62:f4:93:d6:ce:d6:51:ee:03:
                    37:37:52:f4:fc:dc:d9:c3:17:0a:38:d6:e4:69:48:
                    78:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:90:3B:21:2F:CB:2C:15:C3:9D:FC:70:9C:A9:2B:88:FF:E8:6E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:b8:3e:a0:31:45:5c:1e:a6:cd:05:2e:23:d2:6e:7d:e8:
         46:55:6b:66:f3:0e:24:1e:d6:77:72:e4:ef:84:4b:9c:96:b6:
         f2:a0:17:c6:97:f7:a1:d4:16:9c:ef:99:97:bb:1c:96:fa:02:
         05:d4:75:c8:ae:a1:ca:38:9f:53:0a:26:5a:3e:84:63:25:cc:
         cd:d5:f7:b2:bf:87:b4:78:fa:70:a8:62:2f:57:20:61:2d:e6:
         f0:38:41:4a:cc:56:a6:1f:49:fe:70:e9:a4:85:31:55:82:79:
         0c:a2:96:2c:d9:30:db:be:34:44:0a:97:d6:b5:dd:c8:95:3c:
         d1:5b:bc:7a:64:2a:0d:06:b1:e9:25:4e:0b:79:af:e1:08:8b:
         31:a0:3c:50:8a:10:a4:a9:aa:bc:91:36:85:c8:4a:94:08:5f:
         c0:9e:43:01:a0:2f:e7:88:ab:31:c2:4d:df:0b:f1:a1:a4:e3:
         b7:8d:4d:c9:c7:2d:00:dc:bd:ce:77:d8:41:7d:e8:1f:40:69:
         22:5c:a2:1f:cf:1a:22:f8:12:54:f8:3f:75:cf:48:d5:3a:d0:
         32:cc:21:bc:02:d4:19:95:0c:60:ad:f2:3f:66:9b:0b:14:26:
         68:d5:ea:ba:55:6e:40:15:d4:f0:42:5d:a4:7b:00:5e:1b:70:
         21:24:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:11 2026 by rpki-client