Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa
File:                     500c5bf6-3565-3f91-9cf6-0035394891a6.roa (raw, json)
Hash identifier:          GDQhocRwwU0mFXq5DhPnVhrZx/e/+kiBpbxehKjL5To=
Subject key identifier:   0A:17:18:4D:CE:6D:2B:86:6E:19:4F:C7:A2:4D:DE:2F:8E:B6:FB:B4
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584F6F22EB389497F7981AF6DBE0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     30823
IP address blocks:        172.86.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:eb:38:94:97:f7:98:1a:f6:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=dd2f7508-d14d-44b7-8653-5b16b7a192e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:f7:ef:0c:e6:9e:60:69:f6:9b:71:62:10:
                    20:86:94:1c:e0:ce:69:9b:c4:35:c3:b2:fd:42:97:
                    f3:4a:54:d4:a1:5e:5e:05:60:e6:26:5b:94:f9:3d:
                    c1:db:2f:06:fc:50:dc:88:bd:d9:48:02:b1:78:b9:
                    72:38:d4:56:6a:81:73:31:f1:2b:6b:1e:f0:d1:50:
                    f8:80:32:cb:a2:23:d3:c0:3c:3c:ce:f0:b3:ac:ab:
                    fd:01:29:63:63:ab:d9:6a:03:48:0f:54:22:c2:74:
                    67:49:8f:88:2b:b3:e5:f1:38:df:7e:d7:09:1e:eb:
                    06:5f:55:0b:a3:d5:30:48:09:30:bc:3c:6d:5e:29:
                    5d:dd:b9:1f:ce:e1:57:86:77:a8:09:6b:a0:e6:9c:
                    c2:bd:e8:3c:28:69:0f:ec:5c:05:f9:13:30:a5:fa:
                    60:d8:37:6d:d4:7d:aa:d7:8d:bf:66:51:b5:5b:d5:
                    28:eb:b2:d7:a7:eb:6c:ed:f1:83:93:7c:76:7d:f4:
                    4a:14:c8:8b:36:e5:89:18:c5:10:52:24:c0:7d:2e:
                    7b:90:c4:6e:80:73:52:6a:e1:3e:63:a0:e2:00:39:
                    8d:e5:7f:c1:f3:b3:ac:e9:0e:ea:3b:a5:91:c5:58:
                    36:c6:b8:65:21:df:4b:41:f9:01:75:bd:84:01:ba:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:17:18:4D:CE:6D:2B:86:6E:19:4F:C7:A2:4D:DE:2F:8E:B6:FB:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:58:d3:55:69:11:35:d8:60:a0:df:ea:9f:c2:47:ca:cb:
         77:16:7c:94:10:f1:e7:ec:c2:d2:0b:41:8e:9d:a6:2e:1e:1d:
         ae:13:33:4f:73:ed:4a:86:4a:11:ba:93:3b:2f:55:9a:e0:26:
         59:e0:82:86:8a:be:48:a8:41:b4:a5:f0:9e:4d:27:06:d9:9f:
         14:f0:23:49:fb:21:81:40:01:0a:7f:c7:42:96:cd:1b:43:96:
         28:31:f7:02:0e:7a:a6:6c:a9:1c:39:87:e6:3b:c0:fa:6c:a7:
         4b:06:5c:86:e7:0e:ae:5f:63:b0:d4:31:bd:f8:f1:a0:c6:a6:
         40:56:8c:57:a4:62:cb:ba:d2:79:3e:ce:1b:04:9e:21:76:1e:
         d9:19:8c:8a:2f:d0:d9:90:1c:4a:5b:04:a2:d6:eb:7d:87:75:
         90:49:31:bc:37:41:11:ac:16:92:08:83:4f:78:5b:d1:45:05:
         c1:e3:84:d5:0a:27:d8:0b:d7:8e:af:ab:22:07:49:91:b9:bb:
         03:c8:e9:9b:93:e2:31:b9:8d:f3:8d:1d:b1:7a:0e:81:aa:7f:
         eb:17:12:e3:7a:f3:52:15:31:16:31:a3:60:de:3e:6c:49:ed:
         36:2b:cc:45:54:2a:ae:23:3f:f5:05:5c:05:d2:78:80:94:f6:
         84:7d:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:52:48 2026 by rpki-client