Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/2c31ce6e-4a27-3c97-968f-aa63acec3b63.roa
File:                     2c31ce6e-4a27-3c97-968f-aa63acec3b63.roa (raw, json)
Hash identifier:          5aBg5zVrCSaEQgKe5mr0l/D37VpL+1lZVKuZnOw0n8Y=
Subject key identifier:   95:60:E0:A6:AF:FB:A2:E7:53:55:AA:97:97:E0:28:87:48:E5:84:6F
Certificate issuer:       /CN=914db202-4885-454b-97f8-223de4bf2ca8
Certificate serial:       010D0C9F4328584F60DECBBC3F9A641DDC0D7988
Authority key identifier: C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/2c31ce6e-4a27-3c97-968f-aa63acec3b63.roa
Signing time:             Sat 03 Oct 2026 10:21:57 +0000
ROA not before:           Sat 03 Oct 2026 10:21:57 +0000
ROA not after:            Fri 01 Jan 2027 11:21:57 +0000
asID:                     401655
IP address blocks:        198.28.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:60:de:cb:bc:3f:9a:64:1d:dc:0d:79:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914db202-4885-454b-97f8-223de4bf2ca8
        Validity
            Not Before: Oct  3 10:21:57 2026 GMT
            Not After : Jan  1 11:21:57 2027 GMT
        Subject: CN=aafd7b06-7ef6-41a9-8cb0-060e456fbdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:b6:2d:3c:5c:5a:b0:51:22:16:38:a4:9e:
                    a1:51:e0:59:79:fa:b9:8a:99:e3:2b:a9:7e:7f:18:
                    d5:10:d5:cd:00:3c:ac:1d:4c:48:70:fb:aa:59:84:
                    5f:4d:39:2e:f2:e0:7b:20:68:2d:77:f0:d8:28:6c:
                    3f:07:9e:6e:b9:4d:d4:2d:b5:ad:85:aa:da:0e:1f:
                    b1:34:9b:7b:57:88:8d:73:26:13:b6:1f:4b:23:de:
                    c9:32:8b:6c:7c:c7:30:97:b8:c1:b0:28:03:b9:0e:
                    40:e3:c8:5c:1d:35:9c:08:8b:18:74:d8:f3:df:af:
                    d2:2d:42:a4:4a:05:c8:30:b1:ba:7a:ed:36:49:94:
                    20:d2:ec:e4:28:bb:2b:3d:1a:ca:68:3c:0c:e1:4c:
                    3a:a5:d7:ca:75:29:6b:64:0a:69:8d:0c:06:8c:34:
                    e9:14:f7:33:6f:ef:d8:be:34:ab:4d:fd:ba:bb:be:
                    83:34:c9:ce:1f:ea:c5:46:a5:d9:73:6e:54:27:1a:
                    76:bc:f6:6d:d8:c5:d5:3e:6b:b3:d3:44:6d:51:e5:
                    de:e2:e6:f2:25:3f:9f:64:0c:80:27:60:96:2d:75:
                    52:37:ed:71:48:ba:9c:50:a3:13:4b:4c:78:fd:64:
                    8f:f5:f0:ec:7a:60:ed:1f:f4:44:95:1b:c1:06:b3:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:E0:A6:AF:FB:A2:E7:53:55:AA:97:97:E0:28:87:48:E5:84:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/2c31ce6e-4a27-3c97-968f-aa63acec3b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.28.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:ba:d0:aa:64:20:cf:4b:03:9d:d1:fe:70:74:27:cd:36:
         62:67:cf:11:0b:02:ba:b7:d8:36:8c:8b:85:70:5f:11:3c:3b:
         84:7b:dd:8b:c2:29:f6:35:3f:0d:72:9d:d9:8f:44:8c:58:83:
         b1:d6:05:72:9b:05:ba:9d:3e:85:3b:d9:f8:80:d8:b2:96:d2:
         3d:2f:2d:99:7e:50:c1:4a:b0:0a:48:da:7e:fb:ed:57:69:50:
         d7:b4:e0:c7:b7:cd:9d:0b:b5:8b:bc:5f:9b:dc:15:c4:88:19:
         86:fa:5f:a2:36:fd:a7:01:81:87:36:42:01:84:42:53:39:5a:
         aa:90:07:f7:89:fd:53:8f:1c:35:60:a6:1b:f5:c7:d4:0a:f3:
         5a:0f:c4:34:2b:66:1c:1c:a7:cf:e1:66:84:6e:8c:ad:41:4d:
         ea:48:e0:23:72:39:82:79:3b:5a:4e:78:5b:41:3e:7e:4c:27:
         21:cd:9e:69:e4:b0:9a:a6:99:9e:42:b8:ba:e9:04:c8:a1:35:
         b6:b8:e4:c1:d5:2b:1e:80:9c:7a:d7:8c:9f:19:74:77:92:85:
         8d:6d:24:a6:30:84:8c:25:6a:d6:40:b3:f5:b5:fb:08:81:e3:
         3f:b9:73:07:4a:94:fa:7e:7e:7d:c2:53:d2:29:ab:08:a7:d2:
         90:5f:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:20:44 2026 by rpki-client