Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa
File:                     98962ffc-7137-39c6-954d-ea2ac9a1f644.roa (raw, json)
Hash identifier:          UtxBL/4TlzqzYqiEaH54Q6LZ1XIY8AWA5Pa7WHSaekQ=
Subject key identifier:   36:67:6A:CA:8D:CD:18:27:0B:D4:73:70:C9:0E:0D:D5:9B:8C:48:BC
Certificate issuer:       /CN=f9441892-5f50-4eb3-a218-8dada1be8f65
Certificate serial:       010D0C9F4328584DB7703CBA400F03A7D80A53C0
Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     29900
IP address blocks:        162.218.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3c:ba:40:0f:03:a7:d8:0a:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=935416cb-e23c-4d14-bd75-52dbadb17217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:ae:59:84:64:d7:50:51:89:e4:e0:03:c0:
                    be:98:28:61:35:05:41:6a:39:d9:75:c3:d1:42:f6:
                    12:93:5e:f1:07:f8:34:b9:e7:3e:3e:3a:e6:24:db:
                    67:86:0e:19:f4:b3:cb:ee:0f:bd:94:38:4c:b6:04:
                    d8:4b:cf:bf:42:17:89:3c:27:0e:57:ff:d5:86:92:
                    1d:5e:89:94:e7:a4:8d:56:97:71:22:77:67:d4:b2:
                    ac:3f:ad:04:e8:58:6c:8d:8a:2a:83:f9:d4:5a:97:
                    15:87:87:e8:3a:fa:de:99:43:8b:a6:0f:88:ad:d0:
                    d4:51:44:c4:68:62:e4:cd:ff:aa:1f:a5:3f:af:24:
                    ef:70:ce:5e:95:4c:5b:48:63:0a:1c:0a:3d:9b:7f:
                    93:3f:a1:b4:b4:ed:7f:9b:eb:78:fb:61:1f:88:9e:
                    22:bd:a6:1d:5e:1d:91:e2:1c:83:aa:26:a6:88:dc:
                    0a:58:5f:3d:13:0a:fa:f5:a7:ca:88:2c:0c:23:23:
                    10:f5:c0:9d:3b:58:94:d6:d7:0e:07:01:f3:23:49:
                    1d:69:e4:c6:04:cf:c6:84:9a:24:2d:50:5c:2d:72:
                    c0:b5:97:09:32:53:22:51:f3:3a:7c:c7:13:46:3b:
                    e2:f9:ba:a5:ab:2e:ed:10:69:a2:4a:f5:47:91:15:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:67:6A:CA:8D:CD:18:27:0B:D4:73:70:C9:0E:0D:D5:9B:8C:48:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl

            X509v3 Authority Key Identifier:
                keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:a1:b4:81:d0:d5:ad:1c:c1:33:39:85:26:0d:b5:f0:2e:
         d2:da:03:eb:dc:f7:0e:20:98:f0:ee:93:71:73:0e:82:05:92:
         bf:52:62:f9:10:eb:92:2d:49:bf:ff:a9:9d:84:43:1d:3c:40:
         28:7c:67:53:7e:c3:af:94:47:bb:05:6f:0b:3a:dc:36:d9:80:
         0d:cf:93:44:36:f2:1d:dc:4f:ed:34:59:19:cd:96:87:8e:44:
         1c:3d:18:10:94:ec:c2:38:8e:f1:d3:4d:fd:0e:b5:9d:88:e2:
         90:b4:c0:d0:a7:45:fb:53:09:3d:48:3b:21:49:15:12:e0:4d:
         b1:95:90:cb:df:3b:a0:16:33:8c:3c:ce:e2:87:ec:b1:9c:ed:
         5d:fb:6e:57:61:63:35:99:83:71:7f:24:35:99:af:dc:78:11:
         e2:a8:2a:cc:e9:e3:48:4e:44:db:4e:71:e7:c5:bb:f6:73:45:
         2e:84:1e:ed:b5:b5:33:6e:71:ec:b7:87:8f:5c:b8:9d:5f:26:
         4b:34:fa:bc:28:e5:f0:6f:ce:45:08:8b:a6:15:83:86:b6:25:
         78:85:e9:75:de:0f:98:96:24:e3:94:3a:45:6b:34:4d:d8:1f:
         9b:67:70:04:a1:0b:21:85:74:80:4c:bf:76:1e:ae:75:1f:8e:
         75:82:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:30 2026 by rpki-client