Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/a82cba8c-6542-30e9-962c-0c3d2de44491.roa
File:                     a82cba8c-6542-30e9-962c-0c3d2de44491.roa (raw, json)
Hash identifier:          7rPaIOX9qh4vBI+gKKGyblMl6FK5AbmxGbAZSNS4dy0=
Subject key identifier:   25:B6:E4:D5:17:44:22:FD:88:14:6D:1B:46:BC:42:9E:C7:8E:5A:F4
Certificate issuer:       /CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
Certificate serial:       010D0C9F4328584F4986E3D28D338DA786F839E0
Authority key identifier: B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/a82cba8c-6542-30e9-962c-0c3d2de44491.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55285
IP address blocks:        198.73.56.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:e3:d2:8d:33:8d:a7:86:f8:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=afa291a3-f496-46e5-9496-168c2a2f3add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:2a:43:2b:a5:30:df:19:16:db:7c:92:76:
                    a0:bb:c0:a7:33:5d:30:98:39:20:43:22:b1:77:69:
                    d8:10:0f:a6:49:cd:b5:cc:29:27:60:72:93:b7:78:
                    da:f1:fe:24:3a:8c:5c:65:b2:1e:06:a2:3a:37:23:
                    10:47:41:f0:b6:dc:78:cf:b6:4f:57:db:9a:3b:0a:
                    a3:6d:29:27:f9:ed:cc:b9:75:8e:c5:75:7e:4e:e0:
                    02:34:9e:6a:74:52:cf:45:0c:33:fb:a4:21:68:80:
                    31:ec:0a:fc:5e:11:5e:bc:5d:2b:95:a8:78:85:0a:
                    1f:a6:68:73:7b:2a:0c:6e:cf:da:18:1c:7e:8e:ec:
                    83:41:5d:22:9d:a1:9a:58:44:b2:a9:04:19:ee:12:
                    e6:dc:23:6f:bc:78:2b:b7:a8:72:47:c5:50:7e:80:
                    ed:79:f8:43:ea:4e:d9:11:0e:44:a1:6c:67:b9:44:
                    dd:16:d5:28:f4:12:7b:b7:90:c9:cd:32:1e:8e:2d:
                    73:a3:e9:97:2e:4d:2b:4e:13:7d:a6:dc:24:b6:01:
                    9f:83:ed:f9:3e:90:02:47:40:57:97:04:f9:bb:a5:
                    36:58:6a:5d:97:28:e7:f9:f9:4e:88:75:fc:82:90:
                    ee:4f:04:29:7f:c8:d9:89:27:b3:36:65:d0:bc:fc:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B6:E4:D5:17:44:22:FD:88:14:6D:1B:46:BC:42:9E:C7:8E:5A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/a82cba8c-6542-30e9-962c-0c3d2de44491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl

            X509v3 Authority Key Identifier:
                keyid:B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4e:eb:5f:e5:0b:d9:d0:ca:e8:bb:6a:4f:31:6b:4a:1e:25:
         27:60:8d:f5:33:8d:f3:5c:00:47:80:c9:95:f8:e3:6d:2d:ab:
         df:e2:0c:f8:6e:c1:f8:74:f9:50:c0:42:10:10:89:14:29:4a:
         12:69:f8:6e:be:c5:b6:e2:43:1e:80:4a:9b:94:c4:e7:83:41:
         4a:ea:5e:d1:95:cf:c2:f1:0d:fb:5c:2f:b8:c9:75:7f:98:19:
         ba:71:45:db:5d:79:8f:29:c0:e7:4e:36:69:fc:8f:69:9f:ba:
         e4:c0:99:49:aa:56:51:b4:5e:35:98:b4:e2:5e:11:ff:2a:3d:
         e7:23:33:d4:27:74:76:33:56:c1:5a:d9:c1:59:ca:a6:6d:8d:
         bf:73:3a:84:49:0b:f5:73:cb:c4:1f:02:a5:1a:ee:fa:78:3b:
         94:a8:f8:2e:71:04:eb:36:b1:b1:29:4f:7b:0d:91:60:b3:e5:
         39:42:ab:f3:55:86:70:8b:d4:a0:8c:a4:b6:c2:79:e1:98:c4:
         8b:d9:ca:8f:93:ce:03:31:b0:dd:3b:2f:24:47:5e:93:31:20:
         c5:d2:d6:b0:02:e9:41:dc:ca:5c:56:ac:19:48:8c:8c:b4:41:
         3e:04:05:0a:c1:63:a0:81:8e:1b:e3:be:43:7a:94:ed:18:2d:
         20:1e:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:37 2026 by rpki-client