Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa
File:                     c7ec4227-6559-3408-a496-1a34e31c4fdb.roa (raw, json)
Hash identifier:          TD/kpJOQzYbmQXyu9crDpWh9TevYfSPK7CW8GOrpC5w=
Subject key identifier:   88:8D:0B:95:E5:27:BB:25:FD:A5:9F:8A:74:CE:94:15:1A:E0:82:F4
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584E2809A402AC7901690B955C00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     198983
IP address blocks:        167.88.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:a4:02:ac:79:01:69:0b:95:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=de8be8a5-95a5-4db8-9a4e-24c6330ed4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:51:3a:1c:10:7c:ed:e2:cb:b1:ab:46:ea:
                    54:b7:05:af:8b:a5:7a:b6:ef:c2:91:49:70:62:b7:
                    b2:d2:49:23:8e:cf:ef:d2:34:26:2f:49:2d:dd:6f:
                    b9:fd:8d:ba:cd:4b:f2:0b:3a:d3:ba:fe:cb:d6:f0:
                    57:cf:08:37:18:a7:36:dd:a8:08:89:d2:18:96:21:
                    d9:5f:38:58:11:e3:a8:0b:ed:d8:7d:b6:09:a5:60:
                    c5:81:73:b1:c3:30:d2:c3:52:f8:17:6d:a8:2c:0f:
                    1b:bc:03:fc:64:22:3c:f2:ac:48:6e:28:3b:e7:0d:
                    bc:ba:ad:52:96:e9:4a:39:1e:7f:e9:e2:78:7a:f5:
                    fe:ea:47:81:33:22:a5:73:dd:fc:45:31:c5:99:68:
                    d9:91:b6:b8:83:6b:ee:05:ae:2f:c0:1f:38:7f:aa:
                    21:2b:30:e1:05:55:cd:9f:c0:f2:3e:bb:43:13:34:
                    0c:0d:1e:b4:b5:00:ad:04:fe:5f:50:04:59:2a:3d:
                    66:f1:c2:54:ea:56:7d:17:0a:ac:dd:86:04:b7:0a:
                    ff:09:34:69:36:89:d6:90:83:11:2f:a2:85:4d:fc:
                    bc:64:23:0f:91:10:2a:18:f1:02:11:11:36:27:56:
                    52:fd:b0:73:3a:82:41:0a:61:84:21:0e:bb:d8:59:
                    6d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8D:0B:95:E5:27:BB:25:FD:A5:9F:8A:74:CE:94:15:1A:E0:82:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:de:16:39:1d:6d:ac:b3:a2:63:90:31:d7:10:8b:f1:ad:b9:
         5a:71:1c:8f:2d:d5:f1:f1:f0:49:6b:cb:86:f8:e5:d4:6a:00:
         b6:1c:bf:03:d7:3b:13:8a:f3:0f:ec:79:9a:16:76:a0:a4:e2:
         e2:19:41:ba:ce:08:05:50:12:e9:08:e1:01:f7:42:1d:31:3a:
         30:5e:4f:d0:ea:47:07:ca:6e:6c:00:51:48:c2:90:a7:b7:6d:
         73:3f:a9:57:11:43:86:cc:0d:60:63:5b:54:f4:5c:e6:06:27:
         74:9a:f4:fd:27:dd:d4:75:7f:d0:9c:2b:18:7b:a5:de:af:0f:
         d1:46:8b:e9:06:c1:2e:b8:22:6b:3e:af:d6:be:f5:4c:f0:8f:
         74:5d:01:83:09:b5:9f:06:fa:ef:32:88:67:da:55:71:27:ed:
         1e:8b:e3:62:8d:35:c7:f3:16:e1:53:ff:44:3d:9e:b3:0e:ac:
         48:5b:6a:89:8e:f9:44:f4:32:a1:50:89:73:57:0e:f6:74:1d:
         73:8d:c7:c5:c2:41:d9:6f:19:38:8d:37:a0:40:8a:fd:f3:f3:
         7c:1d:10:f9:11:70:dd:05:25:3d:ee:ad:13:4a:f2:45:82:84:
         f3:90:69:d0:2c:db:fb:d6:af:86:bf:8a:b5:33:9d:10:fa:cf:
         9b:02:32:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:51 2026 by rpki-client