Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa
File:                     c0acfa2f-7274-3abb-abad-36132a4c20b9.roa (raw, json)
Hash identifier:          w6DuNigjbICaCfHeBndr12hx1bQqBxWbq5f8nIlrwF8=
Subject key identifier:   FB:F1:C9:E4:78:83:D5:65:65:16:5D:6B:03:26:3E:B9:26:B3:76:99
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584F4975E1372AE97A9E1554BD20
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21738
IP address blocks:        140.235.156.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e1:37:2a:e9:7a:9e:15:54:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0e9e2cd6-50f4-4b70-9907-285cfad51a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ca:b0:42:b1:f5:b5:e6:43:5f:f3:92:9f:f0:
                    93:ce:d4:5d:d0:b5:63:3c:56:a0:d4:12:16:cf:d1:
                    f0:6e:8d:b4:ea:a9:1a:e1:b5:7c:51:aa:82:32:69:
                    a0:1b:18:dc:11:6d:d5:f2:e4:55:11:39:d2:94:e7:
                    b1:6e:23:c9:94:86:75:52:cc:d4:37:02:8f:77:06:
                    47:50:e6:ce:98:d4:0f:af:4a:90:b5:5d:42:ce:4f:
                    92:31:f1:30:67:a0:53:be:ca:33:91:66:56:cc:f6:
                    7e:1e:15:a9:f9:00:90:54:cf:34:a0:19:7e:a8:9e:
                    b2:63:1a:a6:0d:99:cd:0f:2e:75:cb:87:40:c0:e7:
                    47:62:1f:31:5a:e5:b0:be:84:49:2d:5c:d9:36:b3:
                    c6:79:26:49:f1:55:81:b4:42:89:de:77:4b:57:d8:
                    2f:6b:10:cc:1f:98:4d:03:d9:2e:a3:94:d7:c9:e0:
                    29:0e:79:67:a8:72:04:42:57:25:97:ad:88:4c:f1:
                    fb:88:2c:2b:a7:55:81:36:7a:a0:6c:10:a5:d5:26:
                    d3:e7:f3:c0:3d:4b:f7:75:84:0c:8b:3c:a1:ec:ca:
                    e5:62:a0:e8:40:5d:49:a9:ee:48:15:63:6f:dd:4d:
                    cc:d5:8b:23:f8:15:fd:17:38:c3:eb:42:9b:b4:86:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F1:C9:E4:78:83:D5:65:65:16:5D:6B:03:26:3E:B9:26:B3:76:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:85:c5:6a:72:45:74:ee:4e:0a:d8:f6:4d:32:02:34:22:
         6e:24:c0:e2:42:d5:e3:6e:22:ec:e9:70:73:1c:2a:29:a8:76:
         55:d8:59:f8:7f:d9:51:90:8a:46:62:23:f6:72:65:6c:af:82:
         77:83:32:1a:4d:23:b4:6f:a9:8e:8e:d7:ad:ec:5b:6c:42:9f:
         ac:99:29:d4:52:26:06:ce:cb:3b:53:53:3a:db:a4:15:a7:a7:
         19:b2:a5:b7:00:2b:73:23:ab:72:de:62:d7:6e:8a:17:db:7c:
         09:1d:fc:b4:fb:59:88:e1:ea:27:4c:df:be:51:33:64:78:68:
         34:f7:15:c5:db:dc:2c:18:81:60:2d:36:a6:ab:66:fe:88:84:
         ad:34:a2:73:5d:b8:c5:04:55:9e:53:84:01:35:42:3f:45:68:
         34:ef:14:95:01:03:8d:b3:99:2a:16:c9:0b:b0:9a:9f:bd:32:
         31:1c:3f:ae:9a:80:d1:c2:82:75:ac:91:1c:95:6b:50:90:bc:
         e1:7b:6d:54:90:fb:82:f7:a6:08:f5:83:1d:e6:d5:57:8b:4e:
         ae:07:7b:eb:e4:3e:1f:56:d0:8a:f5:94:86:55:e7:c0:7c:3b:
         9d:e8:ae:72:ab:70:49:81:32:8e:31:e2:0e:c5:29:b9:26:d6:
         17:9c:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:09:09 2026 by rpki-client