Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa
File:                     5e3423c5-72cc-39a6-839a-0790366aef24.roa (raw, json)
Hash identifier:          8R2JUivK3sNQ+gfeIRk0ntZe4SFoh+8Y04Fzg4GXh64=
Subject key identifier:   FE:67:3D:4E:57:4C:67:D1:25:20:FE:A0:D1:88:39:83:86:F9:45:5D
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584F3E47E2E07AD50978C0C1DBE0
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     53620
IP address blocks:        198.187.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e2:e0:7a:d5:09:78:c0:c1:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=f7751da0-96e9-43a1-befe-b3c927c29f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:4c:2a:35:c5:e7:2f:42:7f:39:53:67:a2:
                    28:86:4d:f2:ab:9c:92:d5:f1:f7:8c:69:21:01:e0:
                    5d:10:48:a3:99:80:2f:c8:d2:82:8b:b2:01:88:80:
                    0a:ca:c4:67:ec:71:83:ad:fe:51:eb:d3:10:28:bb:
                    d0:3b:ac:bf:f2:76:c1:9a:6a:69:f5:db:97:27:4b:
                    49:29:bc:ee:ff:09:a8:5b:e5:88:c6:cd:bc:7a:60:
                    ac:fe:b3:32:c4:9d:66:9f:e8:cb:17:71:e7:a8:96:
                    67:37:fb:f9:b9:ea:83:98:bb:18:5a:42:79:dd:d0:
                    e6:99:06:41:01:d9:f6:d6:5f:49:28:6c:80:57:6b:
                    81:63:c5:65:99:05:1f:13:c4:30:50:b7:ea:9b:43:
                    ce:cc:1c:81:27:de:06:4d:fb:c4:19:78:3d:77:69:
                    bb:76:3b:f3:0b:90:17:16:9a:d9:bd:f5:84:b9:19:
                    4a:d1:af:94:c4:e4:f1:85:bf:9a:e7:f2:37:e4:3b:
                    59:92:57:05:7e:4c:b8:14:0d:2e:77:5d:38:5b:23:
                    0f:60:e7:09:6b:0f:2f:9c:5c:9d:4f:31:e1:94:56:
                    18:26:6d:57:4f:d7:6c:a0:f2:a4:b6:4e:72:8c:a7:
                    fc:cf:79:52:4d:07:d7:71:ed:e9:19:37:f5:cd:5f:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:67:3D:4E:57:4C:67:D1:25:20:FE:A0:D1:88:39:83:86:F9:45:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:f2:7f:62:ae:45:56:50:b8:9c:fa:35:ea:bd:ab:5b:5e:
         48:7c:b0:be:20:1f:6c:ce:d2:ef:de:24:c7:36:24:5b:42:07:
         3b:96:26:9d:07:75:33:1d:62:90:2a:be:3f:78:df:c2:94:00:
         c9:6f:9f:45:d5:d2:63:f3:cf:10:3d:04:a5:3c:42:22:80:e9:
         15:66:99:55:25:1c:92:4c:31:88:b0:cb:36:e3:af:d6:d9:9e:
         03:5f:11:11:d1:dc:a3:58:ca:ff:5a:f9:20:dd:f6:56:0a:b0:
         e6:fe:cd:83:fc:ca:dd:d6:27:13:7a:63:ba:08:22:fb:a5:d2:
         a2:45:de:f1:a4:bd:29:83:90:93:92:32:69:85:84:a8:e8:68:
         7c:e5:8e:fa:ed:e2:f3:27:a5:10:48:99:27:1e:e7:f9:66:6f:
         25:8b:61:7b:ce:fa:13:fc:fe:76:27:44:9f:6a:7b:ba:49:0c:
         61:0a:66:38:b8:16:3d:a4:5d:4c:e7:c0:e0:49:44:14:cb:28:
         a8:a5:44:df:82:c7:87:14:39:02:5d:c1:fe:81:48:58:4a:0b:
         8f:67:6e:c5:9b:be:e5:11:93:ed:90:2e:59:b4:53:e0:55:3e:
         ad:9f:b8:e1:8e:e2:a9:67:5c:c0:3a:f9:83:d2:b1:bd:94:e9:
         ce:7b:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:15:18 2026 by rpki-client