Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/8c8dcdb0-b8a6-3a9c-98d2-1ff481af5b0c.roa
File:                     8c8dcdb0-b8a6-3a9c-98d2-1ff481af5b0c.roa (raw, json)
Hash identifier:          AzuaPGtnV1gwl6jCzkSUwlMsuUSa+leSxvQTpOJErSs=
Subject key identifier:   68:5F:D0:C8:FA:33:75:C0:6F:BE:A3:11:43:10:E7:49:1F:33:48:C9
Certificate issuer:       /CN=979eb01f-8991-4ed1-a753-931ecafd3350
Certificate serial:       010D0C9F4328584F71ED952C3E67828854BE1C80
Authority key identifier: 39:61:0F:9A:95:44:2E:7C:2A:F3:82:CE:B3:FD:84:A9:E8:48:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/8c8dcdb0-b8a6-3a9c-98d2-1ff481af5b0c.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     37560
IP address blocks:        198.167.192.0/19 maxlen: 19
                          2620:18:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:95:2c:3e:67:82:88:54:be:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979eb01f-8991-4ed1-a753-931ecafd3350
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=a208b4bb-a6d5-4eb5-8f46-b70fa07dd240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:3d:64:2d:dc:c2:c1:77:a8:74:eb:4f:f8:
                    b8:4a:bd:6c:9f:3b:dd:07:72:da:2b:d5:4b:05:11:
                    03:84:e0:8c:c1:68:af:b7:a4:fa:14:22:70:30:ac:
                    be:b1:eb:40:ea:b3:b0:75:f0:74:96:7b:68:10:e9:
                    27:62:ac:ca:93:43:b4:f0:f9:3c:07:fd:9c:53:73:
                    f0:1e:49:12:a2:ed:03:c6:4f:1b:bc:73:ea:95:c7:
                    c4:8a:8e:3d:09:17:7f:b1:1e:9b:59:df:45:b2:30:
                    0d:1f:a9:ed:fc:a8:e0:57:d5:5b:ca:6c:a7:d7:d6:
                    7f:fb:e6:a9:2c:3f:87:41:e0:3f:3e:5c:03:ea:f9:
                    07:df:a0:c0:8b:7e:86:dd:31:b7:66:8e:50:c8:d1:
                    ce:91:94:42:4a:43:aa:3d:59:88:7c:79:1c:b8:40:
                    8d:9d:05:6e:84:45:b1:23:2b:c4:a6:92:e1:10:92:
                    09:34:d6:bb:3a:0c:e4:65:05:49:7c:dd:66:d4:08:
                    df:ea:9c:9c:f3:ad:b6:f0:a7:1a:c7:a4:cc:1f:82:
                    8d:a4:65:98:6a:fc:c5:16:d8:f1:9b:8d:7b:43:31:
                    23:b5:43:f7:a5:d9:b4:ba:3b:83:7b:5d:05:eb:7b:
                    3b:33:bf:c8:b3:6c:9f:82:1f:e3:b2:19:48:a6:42:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5F:D0:C8:FA:33:75:C0:6F:BE:A3:11:43:10:E7:49:1F:33:48:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/8c8dcdb0-b8a6-3a9c-98d2-1ff481af5b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.crl

            X509v3 Authority Key Identifier:
                keyid:39:61:0F:9A:95:44:2E:7C:2A:F3:82:CE:B3:FD:84:A9:E8:48:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.167.192.0/19
                IPv6:
                  2620:18:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:21:f9:38:fd:bd:28:f2:54:6e:be:72:e5:2f:cd:a8:e6:
         0c:76:e3:0a:93:f1:cf:5c:af:85:fb:e8:25:0c:dd:31:1c:f6:
         c0:e2:bf:c7:a1:98:ce:40:0e:c2:43:7e:17:6b:c5:07:b8:7d:
         4a:75:25:47:e3:08:95:b6:d4:53:ce:a5:b3:4a:c5:86:2b:32:
         42:47:02:a6:26:9b:66:38:5a:ce:f7:1d:63:ba:0f:68:c6:b0:
         e8:46:99:27:11:2d:1f:ff:20:2a:d2:f0:57:3e:76:f8:6d:40:
         b9:9c:80:76:01:4c:b8:84:8e:e8:f4:c8:df:3e:96:65:7c:58:
         3a:f9:62:61:ea:f8:ac:eb:b6:b2:e0:09:8b:2a:cd:9c:f6:09:
         88:b4:1c:98:f1:b2:24:07:10:a8:a3:97:4b:77:c1:eb:61:d2:
         50:74:af:98:cb:67:15:47:2a:c8:75:28:b0:0d:6e:41:d9:62:
         38:fd:0e:1f:6a:2a:e3:4d:16:c5:c1:89:01:18:88:9b:3a:0b:
         80:e9:8b:5e:85:6c:a5:f1:c2:b4:6d:5d:7b:32:d4:22:7d:b1:
         b1:e1:10:ba:17:a8:62:b9:6d:7f:93:ed:39:13:bd:09:68:00:
         0c:77:4d:65:72:83:d2:89:ff:ad:59:e4:cb:ff:8d:66:0f:60:
         4c:41:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:51:58 2026 by rpki-client