Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa
File:                     c7ec4227-6559-3408-a496-1a34e31c4fdb.roa (raw, json)
Hash identifier:          lJrk55SMFPtVJdCSX5VN/vNzLmZXrrVvB/W8WVIDbz8=
Subject key identifier:   72:19:2B:1D:C6:0D:13:5D:58:74:7C:0B:36:F5:9F:D2:8E:6E:5C:EB
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584F6C583832018D817E4C3DD3E0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     198983
IP address blocks:        167.88.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:38:32:01:8d:81:7e:4c:3d:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=5db9b16c-6e1a-4d4a-970d-7214b33c4fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:31:84:88:4f:70:33:f1:46:c7:6e:53:ef:
                    80:63:c3:a6:75:7c:b1:fe:ec:4f:96:6b:4c:5b:e8:
                    27:42:d1:05:a4:54:79:49:a5:1b:39:ec:32:85:f9:
                    42:19:92:5b:8b:db:8b:2f:56:03:37:52:32:14:82:
                    f6:d5:81:2d:d5:30:96:2d:15:e3:a7:3e:f2:a5:54:
                    5b:be:85:7c:84:ec:db:60:54:22:36:a2:b0:03:f5:
                    df:53:5e:dd:a4:51:03:43:2d:9b:60:7e:ba:03:3f:
                    b4:78:7a:cb:c3:fb:d2:f1:70:11:35:c8:38:10:3a:
                    47:ab:42:03:06:64:8c:ed:d9:64:e8:86:4f:f0:7a:
                    03:22:94:18:c8:7c:f3:ca:3a:e8:53:8c:84:ba:77:
                    7b:a4:1c:41:4c:7b:26:a4:4a:21:ce:46:3f:4a:ac:
                    31:9e:bc:ca:8d:4c:a4:58:39:63:cd:dc:ba:db:1d:
                    12:bd:ee:b1:1f:59:01:0d:4b:3e:c0:2b:c7:50:47:
                    bc:a0:42:57:fc:e0:31:cd:e3:07:4c:29:1c:37:c8:
                    5b:97:8d:16:09:5b:09:83:62:ac:3f:ff:f6:29:01:
                    97:27:0a:35:c5:af:f7:4b:e0:b6:18:93:0a:3e:cf:
                    be:b9:e4:89:3a:5d:99:8d:e8:a5:f5:46:5a:d4:d3:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:19:2B:1D:C6:0D:13:5D:58:74:7C:0B:36:F5:9F:D2:8E:6E:5C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:77:29:10:60:be:7e:c7:97:82:4c:23:92:9d:14:74:95:8c:
         d0:4e:18:29:ae:3c:55:b7:78:aa:3f:07:73:a6:3e:3d:a5:01:
         38:42:a7:72:91:11:c1:02:6f:ea:ea:ea:44:18:dc:7c:72:c3:
         62:50:81:2b:ca:d3:e3:10:33:5d:a8:a9:bc:15:36:28:b5:f3:
         6d:1f:97:da:68:eb:b8:63:b6:e6:f4:ce:c8:24:79:96:75:13:
         2e:63:fd:3a:0f:cc:f2:5c:44:3b:59:3e:5c:ce:bf:ac:37:6a:
         9e:d4:86:03:41:49:e6:c5:a7:e3:1f:76:f9:0b:f0:33:14:1b:
         e4:53:8d:66:fc:e3:2e:37:3b:4e:c1:53:d4:68:53:a7:02:4d:
         2c:81:9a:b9:24:9a:54:43:9c:8c:41:e1:7c:96:04:9a:03:0c:
         ec:8e:9d:1e:b2:e1:c6:bd:78:a2:77:f6:79:d2:89:7c:76:36:
         fa:67:2c:7a:ed:25:a2:95:52:47:c6:4d:9b:75:e2:fb:10:bd:
         90:ba:f2:be:7a:e6:1e:5d:04:63:5e:15:d2:08:e5:44:d9:41:
         c0:f1:26:37:cb:44:df:9e:a8:78:97:bb:ee:9c:25:a9:f3:22:
         a3:a6:aa:99:34:8d:df:b7:23:90:c8:ee:ff:45:8a:29:22:63:
         62:c8:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:41:19 2026 by rpki-client