Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534/dcf71c99-43bc-3489-9e8f-2c7fc358a65a.roa
File:                     dcf71c99-43bc-3489-9e8f-2c7fc358a65a.roa (raw, json)
Hash identifier:          ozfPxq/VrWEqMEfWfhl6HpZYQ5XtFJBuA+fNGHptwUw=
Subject key identifier:   C6:D6:18:EA:3E:E8:5F:3D:65:30:D1:CA:01:C6:66:15:06:0B:DB:40
Certificate issuer:       /CN=87671d81-2943-4832-8028-8f9f3dff9534
Certificate serial:       010D0C9F4328584F1467B28002271A15F93E8080
Authority key identifier: FE:88:F2:BF:A1:2D:BF:A7:89:15:69:D1:C5:E9:DD:8C:4E:85:AD:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534/dcf71c99-43bc-3489-9e8f-2c7fc358a65a.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     62850
IP address blocks:        198.177.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534/87671d81-2943-4832-8028-8f9f3dff9534.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534/87671d81-2943-4832-8028-8f9f3dff9534.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:b2:80:02:27:1a:15:f9:3e:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87671d81-2943-4832-8028-8f9f3dff9534
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=d052405e-c921-4fec-b87d-7530cf69fb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:57:7e:ac:a4:d0:3c:c4:4a:f6:81:8f:c9:09:
                    8b:6a:2c:1e:b8:ba:1f:51:7d:d6:b7:8c:c6:25:59:
                    26:a6:7a:31:4a:9d:9d:52:a6:ff:1e:24:d4:57:19:
                    6f:a1:8e:5c:e0:5a:1c:16:6f:8c:00:bf:cf:ec:58:
                    f6:91:c7:79:9c:f8:9a:f8:1c:66:7e:c7:b9:45:b6:
                    d5:dd:7a:70:b5:c1:fb:ef:76:72:3f:00:c8:f6:cf:
                    ee:14:c4:69:b2:fa:8b:e5:07:87:68:3e:c0:8e:e2:
                    9b:d9:b1:8e:df:95:ee:7a:d5:f6:c6:bc:15:68:44:
                    06:b3:2a:3b:2f:64:80:1b:3e:02:27:ab:bf:02:7c:
                    f4:77:c9:50:88:69:c9:9f:96:59:c1:cf:76:af:d2:
                    cb:b8:87:a9:ab:4e:52:b5:48:3b:90:a0:77:fb:98:
                    a9:4c:2f:6c:ea:6a:89:f1:85:16:5d:06:44:9b:24:
                    78:0c:f3:0c:05:d0:b0:9f:9d:6b:7a:f1:b5:e6:c7:
                    78:7e:fd:9c:e6:78:7e:dc:1f:4d:03:d1:1b:df:a6:
                    50:13:e0:5a:79:39:16:cd:7b:2d:03:64:d2:15:7a:
                    2f:f8:76:b3:fe:37:b1:a8:5f:46:10:0e:72:03:7c:
                    2b:0f:fe:da:7b:79:d5:69:80:13:59:d1:4c:7a:95:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:18:EA:3E:E8:5F:3D:65:30:D1:CA:01:C6:66:15:06:0B:DB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534/dcf71c99-43bc-3489-9e8f-2c7fc358a65a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534/87671d81-2943-4832-8028-8f9f3dff9534.crl

            X509v3 Authority Key Identifier:
                keyid:FE:88:F2:BF:A1:2D:BF:A7:89:15:69:D1:C5:E9:DD:8C:4E:85:AD:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87671d81-2943-4832-8028-8f9f3dff9534.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:25:9c:53:b9:f3:3b:f6:e2:68:d5:39:ac:2b:13:ae:75:
         c4:be:7d:ec:d7:7a:26:5c:ec:5e:05:91:ff:f4:15:85:e5:76:
         19:28:16:97:d9:2f:46:6d:99:e9:50:63:b0:97:08:e6:ec:97:
         9e:75:c0:6e:ac:87:54:94:71:cb:45:b8:81:68:4d:db:6a:58:
         25:d3:22:7f:90:87:74:2f:81:ca:06:f9:d3:66:57:6e:65:91:
         df:6e:00:15:c8:e2:29:b9:9e:d6:88:e1:02:26:f9:9f:92:c3:
         b8:29:c8:07:46:5b:2c:01:57:40:51:53:98:ab:a8:3e:cf:7a:
         a4:fb:15:f7:ca:a4:02:4a:20:01:f1:fb:68:3e:28:20:eb:61:
         e0:06:fc:79:1b:96:ee:91:7c:bf:eb:7e:7d:5c:e6:bf:7f:31:
         b7:90:db:39:5e:e2:72:aa:81:4c:5f:c8:73:79:b2:d0:82:22:
         4f:4f:1f:9e:15:11:69:58:ae:9c:c1:e5:1b:c0:78:42:fc:43:
         51:41:03:86:b9:5d:7e:03:a9:d4:b7:5a:3e:af:25:80:93:c5:
         12:3d:b5:91:32:52:cd:9e:ad:17:1c:c9:1b:3d:f0:e1:aa:06:
         18:2e:db:b0:9c:c3:df:35:18:ac:f9:ca:38:85:b9:b5:06:74:
         84:46:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:01:00 2026 by rpki-client