Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
File:                     e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa (raw, json)
Hash identifier:          1OWa59ywmaU9f8w8aWg+tAZ3iHc/sC63IAO7deeHo6E=
Subject key identifier:   CE:AA:6B:B4:1C:E4:6D:8A:08:8C:7C:79:C7:BB:38:40:91:09:8A:99
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584FBAA124A89313F1B69028F780
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
Signing time:             Wed 04 Nov 2026 14:00:13 +0000
ROA not before:           Wed 04 Nov 2026 14:00:13 +0000
ROA not after:            Tue 02 Feb 2027 14:00:13 +0000
asID:                     9009
IP address blocks:        172.85.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ba:a1:24:a8:93:13:f1:b6:90:28:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Nov  4 14:00:13 2026 GMT
            Not After : Feb  2 14:00:13 2027 GMT
        Subject: CN=948ee0f0-4a20-4548-9e7f-9bed19b55bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:de:0b:e9:8d:4a:17:1b:37:0c:83:bb:b3:
                    ef:73:98:64:53:46:fd:fc:3f:14:7b:78:63:ca:51:
                    85:e3:5d:1f:7c:e6:d6:cf:40:ab:9d:92:85:89:ac:
                    c4:0f:7e:5d:48:33:ea:3b:fe:04:a6:2b:c6:61:af:
                    aa:d9:0e:7e:bc:62:50:39:76:06:6e:4a:92:e2:2e:
                    2f:bf:e6:21:31:46:63:29:1f:f8:7c:fd:cc:e5:0f:
                    4d:0b:9f:88:6e:f8:e7:e6:59:b2:4a:69:c6:8b:54:
                    35:95:aa:b3:b6:e8:b1:94:a4:6a:e8:43:c1:63:b5:
                    2f:0b:89:51:ed:a6:bf:20:4f:7a:02:99:22:63:f0:
                    30:1a:65:a7:39:ea:89:bf:49:6f:dd:79:d4:79:47:
                    85:db:08:5e:63:1f:63:32:ef:a4:7b:62:e4:00:e5:
                    b9:8e:a3:02:db:e2:53:c2:80:d4:c6:4d:7b:be:6e:
                    a0:b8:1f:0a:a2:e7:ad:35:6f:48:e2:58:ea:d6:9a:
                    ec:76:65:30:da:bd:7a:2c:01:84:ec:f3:35:e1:6a:
                    8b:bf:7d:d7:b4:17:8e:9f:10:4d:6b:be:96:df:7d:
                    be:c4:de:f6:9f:dc:71:5e:d9:b2:05:13:ef:32:29:
                    0b:5f:1d:44:e0:9f:a8:ac:0e:a3:ac:f4:b7:96:fd:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:6B:B4:1C:E4:6D:8A:08:8C:7C:79:C7:BB:38:40:91:09:8A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b3:e6:b5:e3:8e:07:34:e2:db:86:9c:56:97:c2:76:f6:ef:
         fb:9a:f1:e8:7a:04:9e:17:28:e6:cf:e9:92:d2:71:6a:d9:a9:
         73:47:c1:50:da:21:06:23:b4:7a:b7:48:f9:a0:56:85:39:9e:
         91:0d:aa:79:9c:60:b9:d4:6e:9a:f6:52:b8:77:a2:7e:5b:e4:
         43:a8:17:40:ab:ae:f9:dc:c4:68:24:11:92:5f:ce:ea:f5:6c:
         63:51:22:1f:be:7a:16:de:c8:01:35:c4:44:e1:82:89:25:ad:
         21:0b:af:66:1f:ee:61:9b:7e:69:77:c1:61:0f:5b:6b:08:3f:
         f9:10:82:69:99:15:40:c4:40:ff:38:84:6e:a9:3b:80:5c:a2:
         eb:fd:c6:af:57:c9:46:53:63:ee:a8:1c:86:79:e9:17:3a:6b:
         70:b4:4d:98:4d:4a:f0:a3:21:98:0e:e4:53:93:93:2a:db:eb:
         d1:92:b2:34:77:6d:9a:e8:f3:f5:0b:28:7c:df:24:d0:8d:59:
         d6:7c:7a:bc:e8:cc:73:c5:f4:03:49:5b:89:ae:21:7b:8b:ff:
         57:3f:18:19:b4:e8:1b:61:c9:9e:d6:2f:4a:00:61:b1:a4:56:
         7e:44:81:8b:f7:0c:27:8a:0a:97:fb:f2:f5:18:e8:5b:11:a4:
         be:61:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:16 2026 by rpki-client