Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa
File:                     ad6189f6-e244-38e7-b349-1cba2ac39f25.roa (raw, json)
Hash identifier:          5I3+pJye67eRkw9YQG6jPz1y5kIWXwVauNfK/lsq5FA=
Subject key identifier:   02:19:13:B3:7F:A8:06:87:08:27:9B:23:D6:07:7B:C2:8B:AC:BE:3B
Certificate issuer:       /CN=e76368c6-7013-4f98-819f-c6329c83d1c8
Certificate serial:       010D0C9F4328584F348266A77F76F985053A7100
Authority key identifier: 54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        198.2.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:66:a7:7f:76:f9:85:05:3a:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76368c6-7013-4f98-819f-c6329c83d1c8
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=3b16a8a0-8aa4-4f7b-afa8-91b0c7e3a8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:ee:7b:3d:72:25:d1:6e:96:f5:ed:47:15:
                    33:ee:3b:e1:fb:66:46:cf:38:8c:40:e7:46:dd:ce:
                    ba:56:aa:f6:62:c4:e9:51:27:4e:26:32:42:cd:a6:
                    ec:76:89:61:7c:17:00:ad:6f:66:cb:ae:cb:5d:b0:
                    df:23:d1:bf:26:e6:e6:3f:b0:7c:dc:7d:38:0c:4c:
                    11:22:92:16:ed:18:e9:ce:d1:92:29:d2:6f:12:57:
                    c3:f5:c5:f1:2e:2e:ca:a2:17:ce:8a:1b:a5:52:75:
                    4d:c0:41:7f:77:4f:a2:a8:d4:08:82:21:f8:b0:9c:
                    d7:a9:38:19:f3:ba:4a:72:66:79:8b:a1:a7:64:d6:
                    59:60:8c:05:ed:81:e3:21:2e:49:f1:22:12:93:7b:
                    e8:2e:09:b7:43:36:37:95:e4:cb:e0:87:29:90:27:
                    a3:17:35:08:ef:54:e9:80:36:df:30:77:41:46:d7:
                    19:fb:08:32:7e:c8:9c:86:1c:79:f4:24:b8:cd:cf:
                    83:fb:60:6e:bb:32:9c:f3:a6:7c:42:2e:1f:fe:1b:
                    3a:7f:1b:35:ce:d3:4c:0d:5a:86:28:69:bd:df:66:
                    ac:97:b3:d9:bd:a0:c3:2f:7a:24:39:ec:b2:9e:15:
                    f0:b6:2b:2c:85:57:23:3b:9c:de:1a:c3:72:c9:0c:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:13:B3:7F:A8:06:87:08:27:9B:23:D6:07:7B:C2:8B:AC:BE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl

            X509v3 Authority Key Identifier:
                keyid:54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:be:ce:4e:2a:d8:1c:ed:cd:c8:d8:72:a7:30:f0:7f:2b:7e:
         ab:43:54:77:68:2c:13:03:88:19:3d:67:5e:96:9d:19:46:55:
         50:41:cc:4b:fc:94:26:d1:29:a3:87:f8:67:3e:f4:2b:4c:00:
         8a:49:d4:4c:a3:c0:3f:af:bd:da:09:b8:d6:ba:00:c4:60:a3:
         9f:2b:a9:66:5f:df:43:e5:63:91:b6:8b:fc:26:c2:3e:68:e9:
         66:ed:e0:27:75:d1:97:2c:bf:b3:44:ff:31:a2:3a:ec:e1:67:
         63:5b:e1:90:07:ef:b5:4a:16:a7:08:35:fb:c1:63:4b:b5:a0:
         ae:44:0a:62:ee:b3:b9:36:43:9d:c1:68:98:5d:88:09:2b:7c:
         2b:f9:2e:0a:f5:d8:1e:92:ab:f9:fd:6d:20:fa:32:7d:7b:4a:
         3e:6c:83:c1:15:86:88:69:6e:39:1b:9b:e0:4a:86:79:39:b9:
         b2:94:cd:8b:11:90:4a:c7:f7:5e:ab:6e:43:e4:23:b4:af:53:
         32:55:bc:91:bc:c0:71:94:b2:ba:4b:7c:50:52:00:3d:a6:6d:
         bb:89:6a:af:12:44:99:74:97:bb:9e:df:1f:e4:ec:ea:58:59:
         a8:4b:88:e8:b6:8c:5b:2c:26:56:f8:81:40:46:45:b0:f3:d3:
         d6:25:ca:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:59:51 2026 by rpki-client