Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/d4a1d05a-76fb-30d2-aacb-64b54abe2e49.roa
File:                     d4a1d05a-76fb-30d2-aacb-64b54abe2e49.roa (raw, json)
Hash identifier:          XSz8Y++Puluq1ciO7MkPppZqtkQgIqalyzFn0+CNNnI=
Subject key identifier:   B1:F7:68:71:6F:7B:32:9F:E4:E5:2A:F0:6C:0A:4E:AD:56:EE:59:E9
Certificate issuer:       /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial:       010D0C9F4328584F31B7BBC778EAC297E1B9A700
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/d4a1d05a-76fb-30d2-aacb-64b54abe2e49.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     16796
IP address blocks:        198.163.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:bb:c7:78:ea:c2:97:e1:b9:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=25572682-fc89-4175-a33b-ec9323a31228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d9:07:29:4f:d5:1d:fa:69:8f:e7:ff:12:b4:
                    b9:88:9c:9e:21:c2:a1:f4:1b:98:f6:fd:08:d3:ba:
                    be:37:48:c4:f9:8b:c2:c4:0d:c2:10:08:4f:8a:e9:
                    c2:4f:8b:5a:fc:8f:cf:9a:a7:02:65:6f:97:15:05:
                    20:fd:87:e1:f6:d3:26:89:3f:b1:9c:0e:ed:a6:33:
                    72:bc:e0:dc:bc:b5:b9:5c:b8:41:65:e2:fe:0c:ae:
                    71:aa:88:02:f7:ce:57:59:5d:94:52:8b:39:91:c7:
                    51:f5:5c:01:9a:bd:49:dd:e6:1a:69:0d:13:f4:fb:
                    cb:70:74:ea:76:b8:8a:76:a5:ff:51:d2:25:cb:71:
                    ed:56:16:68:67:0f:5d:02:85:46:de:60:d1:68:ce:
                    09:65:5a:66:f2:2c:b4:f8:53:80:74:fb:ec:5c:7c:
                    57:09:bd:9d:a0:8b:4f:9e:fe:0d:f3:63:65:35:93:
                    d6:70:12:a0:02:0f:e2:59:34:90:90:d0:7f:e4:3f:
                    be:27:12:e5:31:da:bf:78:69:ff:b1:0c:92:60:93:
                    92:b9:66:f9:22:46:b6:2a:02:99:54:d9:32:20:86:
                    3c:27:f0:c7:86:50:41:a0:19:02:9a:cf:65:11:c3:
                    40:d9:9e:4b:4e:66:6d:6d:ea:18:45:44:75:6b:04:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:68:71:6F:7B:32:9F:E4:E5:2A:F0:6C:0A:4E:AD:56:EE:59:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/d4a1d05a-76fb-30d2-aacb-64b54abe2e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:e5:80:fe:83:6d:90:8d:8e:cc:8c:1e:60:36:14:bc:9b:
         76:94:e1:bd:b8:d8:04:60:b7:f7:21:5b:32:e5:a8:38:ec:57:
         d9:fc:3f:92:bc:07:17:da:11:d4:f8:1c:64:52:38:35:66:f9:
         0f:c8:0f:6c:bd:fc:33:58:83:ee:57:71:eb:8f:1a:b1:35:b6:
         02:82:db:65:27:45:c1:d4:c9:f3:1c:46:0b:8d:a7:e8:89:4c:
         7e:6a:4f:8b:43:b5:1e:05:f3:9d:d0:27:c3:72:b4:a6:4f:f4:
         e7:e1:42:d7:2e:13:df:9b:17:e5:0c:40:39:53:b9:02:e9:5f:
         c5:d2:b3:37:4a:2f:7c:23:84:9d:d0:33:ed:d4:f9:26:84:d6:
         2f:b8:56:59:8c:e7:21:fc:04:be:db:92:bb:74:36:33:2b:ec:
         52:de:40:29:17:d3:d1:19:8f:6e:b0:9f:a0:96:5c:8f:9e:c1:
         33:31:ce:49:69:d1:4d:da:e5:cd:ab:e1:18:a7:aa:74:cc:87:
         b3:5c:fb:cc:87:49:6c:2b:9b:0d:88:d0:e8:e0:b4:66:ac:75:
         f9:12:69:fa:2b:ca:46:e1:74:c0:f3:72:e9:dc:8c:52:ea:cd:
         84:06:d4:ed:3a:8c:ba:41:44:a1:f3:f7:bc:83:91:6e:23:13:
         17:21:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:30:41 2026 by rpki-client