Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/297b0a13-c878-3ff8-a1a2-d7bdcdd42b11.roa
File:                     297b0a13-c878-3ff8-a1a2-d7bdcdd42b11.roa (raw, json)
Hash identifier:          wv7sa1Evv+zGEZFUNqnzm73uo3uwPvnCy5mrZiCFPjk=
Subject key identifier:   3F:02:91:D0:43:0C:63:89:F9:4D:A7:1E:8E:8F:5F:0F:6A:82:BE:03
Certificate issuer:       /CN=95f49444-5166-4f97-ba58-3d78336ec4ce
Certificate serial:       010D0C9F4328584F7A4D8CB25C639C5401936AF0
Authority key identifier: AE:7E:BB:B6:EA:26:51:87:2D:15:43:B6:4D:5B:6B:55:EC:7C:1C:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/297b0a13-c878-3ff8-a1a2-d7bdcdd42b11.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     16517
IP address blocks:        198.252.255.0/24 maxlen: 24
                          2620:97:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/95f49444-5166-4f97-ba58-3d78336ec4ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/95f49444-5166-4f97-ba58-3d78336ec4ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8c:b2:5c:63:9c:54:01:93:6a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f49444-5166-4f97-ba58-3d78336ec4ce
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=04f70e81-e3a5-41ca-bdb1-6fd2cd35b071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3c:1e:6b:d8:fd:4a:3e:ac:cc:3a:92:4c:3c:
                    5b:60:7e:57:f0:b4:4d:95:fb:c6:c2:38:9b:8f:70:
                    65:26:a6:3a:c7:f4:f9:22:6b:3b:90:33:13:42:9a:
                    9c:40:8e:c1:56:7c:9e:c1:e0:8e:8e:c7:39:04:df:
                    34:cd:98:bd:bb:93:0e:3b:db:bb:b0:10:12:e9:45:
                    fb:3d:96:90:f9:7c:42:ba:3e:5d:b3:3f:fe:fc:f0:
                    97:2d:c3:c6:e4:28:08:6b:68:b1:d6:70:31:8c:91:
                    9a:5c:b7:87:0e:9a:10:e5:f8:2f:ec:2a:8b:55:39:
                    25:7c:8c:f6:79:3b:9d:d1:66:cb:92:4c:01:92:b5:
                    7a:f2:fd:38:2c:cb:e4:63:40:2e:df:bd:67:59:6a:
                    5c:ac:27:39:23:e5:8e:e8:2d:8e:07:a0:24:66:12:
                    f0:68:91:ac:92:b2:d1:92:5f:36:37:49:92:84:95:
                    8a:19:40:9f:89:77:5e:3e:05:ff:07:6f:5e:b0:5a:
                    62:be:af:63:77:bc:7a:e0:60:0d:71:03:4d:3e:d9:
                    d4:e7:ce:6c:02:61:18:35:b9:37:95:f6:72:93:cc:
                    1c:12:57:04:21:01:ff:c1:91:72:3a:94:20:06:64:
                    4f:21:84:75:14:e0:e7:41:de:37:1d:20:3f:92:94:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:02:91:D0:43:0C:63:89:F9:4D:A7:1E:8E:8F:5F:0F:6A:82:BE:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/297b0a13-c878-3ff8-a1a2-d7bdcdd42b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/95f49444-5166-4f97-ba58-3d78336ec4ce.crl

            X509v3 Authority Key Identifier:
                keyid:AE:7E:BB:B6:EA:26:51:87:2D:15:43:B6:4D:5B:6B:55:EC:7C:1C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.255.0/24
                IPv6:
                  2620:97:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:bd:c9:30:97:10:5d:49:c0:cc:5d:0d:25:d4:12:5b:39:
         2b:12:41:3b:df:0a:56:7b:f0:07:39:32:20:ca:a7:33:2b:57:
         a6:fa:4a:37:aa:dd:58:bb:24:d5:60:86:66:a9:36:65:fd:32:
         5b:da:45:e8:2d:f4:08:90:48:b4:5b:02:be:8e:fe:82:39:9d:
         d8:8f:be:7c:9d:79:c5:a8:75:2d:52:38:77:bd:4a:e9:3e:f0:
         d7:63:23:b3:ed:a7:fb:92:e4:cd:b0:19:dd:74:54:7a:e4:b2:
         50:99:91:04:3e:55:24:f2:f8:a1:cb:9e:ea:10:7c:58:1d:98:
         09:6c:24:73:36:40:e5:8f:a4:7f:58:a1:ab:ee:35:a3:ac:4f:
         22:0c:b1:0d:43:80:07:54:a3:06:9e:e2:5f:c0:4c:7d:4e:6d:
         52:db:63:15:81:39:9c:c6:1c:e5:ed:41:5b:fd:21:a5:0f:94:
         03:41:20:32:69:df:69:6d:84:9c:9c:60:3c:85:aa:a8:1f:15:
         f4:dd:9d:11:9b:37:11:3f:1b:8a:49:5b:1f:cd:49:17:b9:95:
         a1:fe:3c:9d:75:b9:37:10:de:6e:8e:46:41:0e:13:15:ff:5e:
         b7:db:41:b9:09:11:41:56:9f:e7:80:62:92:cc:0a:0f:ef:41:
         05:6e:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:13:01 2026 by rpki-client