Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46f5bb0e-e664-36db-988d-b555288389c3.roa
File:                     46f5bb0e-e664-36db-988d-b555288389c3.roa (raw, json)
Hash identifier:          F5Qvgd4v3aoWeIXQz863EzZq1BSRgFKZVX5P0E4K0uw=
Subject key identifier:   43:CE:B0:A0:4C:94:99:4B:8C:BC:0A:4F:1E:83:7E:79:BC:9E:4F:EC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497C0F6B9237D616147F4F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46f5bb0e-e664-36db-988d-b555288389c3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397228
IP address blocks:        198.133.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:0f:6b:92:37:d6:16:14:7f:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1dbf015f-6601-4d5f-8461-eec205c00506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:7e:de:97:8d:3c:a9:27:67:ce:ae:f5:de:
                    99:78:06:71:2b:95:41:29:64:10:bd:6a:9d:6e:ee:
                    c2:98:59:a7:45:56:ec:11:97:2b:a4:73:65:e7:b4:
                    02:38:84:14:32:0f:93:6d:2f:b0:ba:ca:4b:20:cf:
                    c9:25:5b:6b:c7:79:f1:0a:e9:f5:b1:6a:06:71:83:
                    38:c6:58:94:78:78:28:1c:1e:24:be:f0:9a:8a:a2:
                    8d:a5:83:1e:74:fe:41:c3:fe:34:8b:f7:fa:4d:c4:
                    c4:0c:06:1d:4f:71:f7:02:c1:36:34:88:c2:5c:e9:
                    64:dc:e7:b0:2b:10:8c:3f:99:da:82:9b:52:87:16:
                    c6:04:a2:0f:53:f4:0e:f3:01:af:57:d7:5c:33:f3:
                    26:e1:dd:0a:95:79:77:b7:e2:8f:e4:52:94:7e:8d:
                    ab:6e:de:30:b4:ec:c6:83:0f:98:92:c4:2c:80:62:
                    a8:bd:12:a2:cb:3b:1b:98:7f:cb:10:ef:fb:d7:ed:
                    38:5c:08:d4:7a:62:a6:20:4d:c4:e2:95:a6:12:52:
                    26:47:54:9c:fc:4e:55:8f:c5:9c:5e:47:74:d3:8b:
                    c2:f6:f3:05:27:ee:8d:7a:74:53:48:9c:79:e2:54:
                    9f:0b:1e:91:7d:5e:ee:48:aa:93:f3:64:67:3b:df:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CE:B0:A0:4C:94:99:4B:8C:BC:0A:4F:1E:83:7E:79:BC:9E:4F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46f5bb0e-e664-36db-988d-b555288389c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:91:7c:c8:c8:e2:ea:61:a2:9e:0e:93:1e:65:73:74:df:c0:
         e5:0e:b0:10:13:4a:ea:9c:8b:fc:5e:1d:fc:52:cc:24:5b:6a:
         c8:7d:ad:5e:f5:60:15:ed:22:5f:18:00:e2:1f:b1:e6:a0:39:
         57:db:94:b2:52:e1:a9:c4:71:dc:1a:f4:da:c6:f3:88:92:6e:
         c7:7d:49:cb:fc:17:f8:d4:48:16:97:6d:00:d5:72:d5:a7:fc:
         77:ef:4d:62:e0:91:bb:4f:42:92:38:93:1a:32:22:c7:db:bd:
         78:0b:d4:88:a8:58:81:34:9d:89:55:7f:9b:31:89:74:d8:bf:
         66:75:e8:dc:d0:6f:09:16:e5:1d:1c:15:d5:ce:f8:4d:37:16:
         1a:88:fd:8c:2e:6f:dd:e7:e1:b0:b5:13:73:ba:9a:9c:00:41:
         f6:60:b7:ed:9a:50:20:f7:fd:55:57:4a:9e:a9:f3:24:84:c5:
         37:6e:ac:ef:d1:ad:97:e1:a0:74:cf:a3:bc:21:8f:e8:71:f4:
         00:c9:77:86:87:87:c8:4e:2c:ba:71:62:58:39:97:bd:1a:77:
         fb:ab:06:13:ca:2d:6b:36:ce:91:53:73:fe:48:db:b3:47:3f:
         ff:f1:64:5e:1b:86:59:02:89:17:6b:4c:cb:d3:dd:a8:9d:c8:
         ac:f9:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:39:51 2026 by rpki-client