Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa
File:                     e8b6acee-814e-3fb7-815b-3025078610e3.roa (raw, json)
Hash identifier:          JqlZZumJhy7PnUL/Adm9At8B0XwmPteRCPvmJuw5Mj8=
Subject key identifier:   F1:B9:44:0C:5B:FD:8F:10:F3:9D:11:78:EF:F7:9B:58:84:18:72:76
Certificate issuer:       /CN=b7364c96-947b-4136-b697-c8cff591a8ec
Certificate serial:       010D0C9F4328584F20F7AE145414EC9EE7079D00
Authority key identifier: 95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     16844
IP address blocks:        198.190.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ae:14:54:14:ec:9e:e7:07:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7364c96-947b-4136-b697-c8cff591a8ec
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=6077afd3-e8df-4c67-afe0-b59c7508fb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:71:08:8f:e4:79:d1:d7:21:a4:43:47:73:
                    4c:ec:ea:1d:b6:91:25:27:97:d9:e0:44:cd:4f:a2:
                    98:9f:05:84:74:d9:d0:12:67:dd:13:51:e0:d2:54:
                    96:3a:3c:35:28:24:1d:87:c7:1f:0f:7d:6b:0c:b6:
                    f6:bd:e5:6a:43:e5:bc:53:37:c1:27:21:e1:f4:22:
                    58:26:13:a0:44:3a:a2:0a:3f:2c:38:83:16:83:08:
                    a8:eb:27:ca:b0:c6:41:66:60:fb:14:18:6d:85:df:
                    42:f5:2b:6e:95:df:e6:26:35:f1:84:3b:29:60:aa:
                    c7:ff:c4:0a:78:34:2d:71:c2:a8:8f:16:1d:0e:85:
                    77:7e:19:60:ea:90:e3:d7:ae:a1:69:bf:af:04:53:
                    47:1b:00:c2:09:44:ca:bc:96:7c:a7:a2:d7:95:13:
                    f1:fe:43:bc:70:86:8b:8e:d9:c4:a5:6b:90:ea:59:
                    9c:d1:85:3d:82:ee:63:aa:9d:b3:3b:c5:61:f7:51:
                    fa:25:ee:d1:b2:9d:38:19:5c:4d:3a:8d:e8:0b:d5:
                    a1:a3:73:0a:88:9c:37:ac:f2:32:99:cf:96:56:bf:
                    cb:85:ba:e5:85:8c:c6:0e:c0:86:da:b7:f4:c1:1e:
                    e8:d7:8a:24:f4:6f:a0:c0:fa:d3:9b:33:44:17:0e:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B9:44:0C:5B:FD:8F:10:F3:9D:11:78:EF:F7:9B:58:84:18:72:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl

            X509v3 Authority Key Identifier:
                keyid:95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:24:db:1e:53:6f:14:30:64:04:99:fd:59:17:78:a2:8b:
         25:59:66:1f:8c:fd:48:8c:66:c1:74:59:81:05:c9:45:1e:f0:
         db:c5:a0:6c:85:1b:31:5f:e1:4d:83:d1:1c:4c:fc:1f:b9:c1:
         85:e2:2e:75:26:6b:d7:72:0e:c0:b7:dd:f4:6d:87:5b:d5:12:
         e7:c9:5e:ac:b0:6d:bf:c6:84:4c:1a:e1:e1:f4:68:de:86:07:
         c8:cf:8d:40:ba:ad:c0:47:0d:a9:ff:dd:98:15:b5:10:98:a9:
         ad:a2:3c:21:81:a7:27:4a:e6:93:27:27:c7:e5:d3:01:2d:17:
         9b:d3:41:d5:57:c8:b7:7a:82:11:4f:5b:c2:20:21:61:20:7e:
         d2:11:b0:46:d6:6b:46:70:a6:53:c2:59:e0:90:22:66:26:f9:
         ef:e6:0f:c1:a8:78:5f:8f:1b:9e:7e:eb:4a:78:c5:bd:29:5e:
         7a:8d:d6:1f:04:0b:51:58:dd:f0:8a:84:49:44:c3:83:d7:92:
         b4:f3:84:f3:68:62:75:49:9a:75:1d:70:c0:35:ca:fe:5c:1d:
         1b:70:d0:a6:73:80:5b:31:c2:21:e0:d1:d1:43:e1:a4:87:a3:
         78:b7:61:48:c4:23:1a:2e:c0:22:4a:2a:9e:a6:d6:b4:02:a9:
         04:86:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:33:37 2026 by rpki-client