Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa
File:                     916c3f1d-1340-37a7-8106-fdf9db78a154.roa (raw, json)
Hash identifier:          4iuHX2TDjf8T2XW3lztvOyGmIvusEGqNhEot/QQgybw=
Subject key identifier:   5D:6D:3A:34:E4:F1:25:58:05:A4:54:17:61:32:1B:ED:F9:87:90:7F
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584F23C255DCD8B4A067A47AA320
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     29802
IP address blocks:        198.178.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:55:dc:d8:b4:a0:67:a4:7a:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=2798d59b-58e3-45e1-a3c2-cdd33b2316e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:81:0c:9b:4a:89:1e:e6:87:43:7c:5f:10:
                    f6:7e:24:3d:bc:c6:71:22:94:c9:df:37:52:3d:50:
                    04:1d:2b:7a:60:4a:1b:90:a7:38:7e:a7:53:cf:ee:
                    b0:f9:b8:41:34:9b:b7:ec:a1:d2:d7:04:1e:d4:33:
                    46:13:3b:c7:26:c1:b5:3d:fe:06:96:37:f0:ad:57:
                    8a:e0:98:94:55:63:f3:92:c2:3d:13:cc:28:08:d4:
                    65:7d:5a:a3:7e:45:ea:32:29:56:5a:7b:32:a7:f2:
                    c9:a4:5b:51:4b:30:65:04:c9:bd:48:ec:c8:9a:69:
                    cc:b0:0f:15:9c:c9:c4:0c:8e:df:c2:3f:a4:04:79:
                    21:08:35:07:a8:06:50:8e:ba:ff:df:cf:35:92:5a:
                    93:c9:c2:bb:df:ae:94:04:73:2a:b8:fb:5b:3e:58:
                    01:4f:bb:be:26:7a:ea:da:7b:0d:2e:db:1c:74:4f:
                    f9:ac:e7:98:46:7f:a2:7a:ab:be:c9:24:3b:64:63:
                    07:b7:3e:bb:61:e2:8b:49:b9:fb:ac:48:47:4d:94:
                    5c:ed:5e:7f:1b:ff:2b:af:60:41:c4:51:97:76:fe:
                    b5:85:e4:f2:82:aa:d3:06:a6:df:c3:df:b4:2c:c8:
                    f6:ab:87:0a:b4:61:a2:39:d7:2d:c9:6e:1c:a1:b3:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6D:3A:34:E4:F1:25:58:05:A4:54:17:61:32:1B:ED:F9:87:90:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.178.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5e:cb:46:06:df:97:ef:20:58:ce:88:b1:ae:da:66:c3:09:
         6e:18:3d:c9:83:5e:b7:6f:8d:de:20:25:85:01:2a:14:f3:8b:
         e8:ef:a1:be:08:c3:86:ca:2f:c7:ce:e8:96:3e:63:28:1b:2f:
         c0:98:b7:ab:e2:6c:69:0f:27:9a:58:f6:c4:c2:bb:5f:fd:c4:
         ee:e5:f7:5e:4f:ee:06:37:56:19:df:a0:f5:76:5b:b4:b0:f5:
         5e:89:49:ad:51:77:92:28:35:7e:cb:06:a9:db:e8:68:dc:dc:
         6a:c3:7d:71:0b:c9:b2:2c:e3:39:87:12:ca:78:74:e2:6f:a8:
         e5:d0:fd:e1:71:12:cb:04:a0:28:f3:fc:3a:e2:47:aa:21:16:
         1d:dc:e3:d8:85:51:7d:88:73:4c:24:80:ba:5d:86:ba:aa:4c:
         f7:50:f0:5e:86:4a:ff:cd:64:0d:de:5d:cd:97:de:6b:2a:96:
         2b:01:67:08:a8:23:d3:a2:d9:a1:32:ad:bc:98:1b:24:0a:16:
         92:93:46:4a:9c:5b:e6:94:9c:68:8e:3a:ea:dc:2a:05:92:88:
         02:e1:56:7e:8f:ea:b5:34:f8:c6:a7:09:8e:e9:33:ef:90:2f:
         ae:c4:a7:07:ff:f7:09:91:6c:73:09:f4:30:a9:b7:4d:d2:c5:
         e5:da:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:39:35 2026 by rpki-client