Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/cd569a32-42a2-357b-b73c-5972a0a941f5.roa
File:                     cd569a32-42a2-357b-b73c-5972a0a941f5.roa (raw, json)
Hash identifier:          nVOIPjM7b8qFy4yVfBACEUJwUwrhWHXvk3KNbMtdXs8=
Subject key identifier:   99:01:D2:FF:25:98:09:37:D3:CF:12:2B:14:A8:63:4A:AF:4C:9B:7E
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584F3A17D8FF83EF7E3EA94EE6C0
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/cd569a32-42a2-357b-b73c-5972a0a941f5.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     803
IP address blocks:        198.230.96.0/19 maxlen: 19
                          198.230.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d8:ff:83:ef:7e:3e:a9:4e:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=18c69d91-12e3-47f7-9aa5-a0727202735c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:97:53:cc:bc:ef:65:81:3f:8b:f4:cd:fd:
                    bd:6a:52:ba:fe:3a:76:96:4e:e9:c8:c7:f8:c2:b2:
                    16:0b:18:62:79:ce:24:c9:fe:ab:c6:a2:c7:38:91:
                    fa:5e:f7:0a:8b:11:df:0f:47:e6:f9:a6:f3:68:57:
                    88:81:8f:3a:f0:20:66:50:90:e1:d5:9a:3a:aa:15:
                    bc:d9:89:4c:3a:27:9e:a8:fb:89:39:0e:20:36:3a:
                    8d:a3:c0:93:0f:5e:22:69:96:f4:cc:d3:68:42:3c:
                    96:b6:b2:d4:05:f0:e6:ff:15:7b:bf:21:3c:f3:f7:
                    c8:2e:38:31:ec:93:cf:f0:3e:16:07:1f:4d:38:ba:
                    be:59:e5:fd:dd:c2:a4:34:54:f5:af:dc:62:af:8f:
                    e2:11:aa:b0:e6:b7:06:06:74:87:7d:60:01:6a:54:
                    3f:3c:04:f7:b2:b3:62:96:e5:a8:c7:4c:66:2a:e1:
                    e9:1c:ff:10:44:e6:a2:99:5d:13:a3:d2:19:d4:7e:
                    b4:66:cd:a1:b9:eb:e5:cc:83:63:19:7e:2e:cf:97:
                    63:55:5e:0e:ec:f1:d4:09:e7:6f:4c:85:f7:0a:ae:
                    2e:75:7f:a1:6d:eb:13:b1:3c:b6:c5:50:2b:91:84:
                    e7:2a:54:d1:2d:b0:c8:bc:8b:47:6b:53:6b:4e:3a:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:01:D2:FF:25:98:09:37:D3:CF:12:2B:14:A8:63:4A:AF:4C:9B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/cd569a32-42a2-357b-b73c-5972a0a941f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.230.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:af:41:04:7c:66:5f:75:63:b8:d4:57:f5:ca:da:2e:6a:60:
         70:eb:df:a4:82:c1:d5:8c:e2:e7:4d:62:71:8c:00:25:b0:7d:
         d7:c9:c0:e8:d7:96:a3:49:d1:45:e1:1d:12:ea:57:18:b2:95:
         0e:0b:cf:81:5c:d3:40:11:23:71:23:fa:fd:a4:13:43:4b:df:
         cf:39:96:a5:92:b2:66:4c:51:f5:99:e3:8c:18:44:85:a3:02:
         af:d4:6c:0b:55:b7:93:ae:1c:a2:54:01:a5:6d:88:8b:ba:53:
         ee:9d:f7:5e:ab:03:ce:6c:af:c6:ac:7d:c1:28:7e:6d:6b:20:
         0c:d6:4b:30:a4:fa:6c:34:7a:fc:65:5d:14:c8:a5:ff:c4:26:
         06:2e:5c:30:e5:8c:78:11:ea:b0:ec:cf:04:f8:86:de:44:d0:
         64:c7:7f:4a:e2:24:92:ac:08:14:92:ab:0d:2b:27:62:18:8a:
         80:a0:51:95:51:f8:24:06:77:89:c1:31:50:5e:64:3a:20:a7:
         19:bc:99:3f:31:7b:ee:2b:f4:2c:c2:9b:2d:74:25:e8:86:1f:
         0a:54:12:50:be:1c:10:f9:98:9c:c0:e0:ce:63:64:44:60:7a:
         f0:c5:85:cc:41:42:9f:1d:a6:89:d0:5b:8d:cf:2a:11:3d:a9:
         b4:d2:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:37:09 2026 by rpki-client