Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa
File:                     341edec5-b518-3c8f-a902-95c55b0baaa0.roa (raw, json)
Hash identifier:          Mhn7UqIc49VP8SbVyY6665CWS8iMslCGrsw0ISxuJJ4=
Subject key identifier:   F7:4E:27:F8:62:0B:28:A7:77:8F:44:05:35:C3:E3:25:7F:0C:FB:9A
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584F23C25FF374D8F4AD97283280
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     2152
IP address blocks:        198.188.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:5f:f3:74:d8:f4:ad:97:28:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=6eab4916-6acf-4829-b14d-3ba5d0f1bfff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:d8:4c:35:0d:c8:a6:c7:64:2b:8e:73:c9:
                    fb:3f:30:99:f6:dd:5a:69:09:35:e9:ab:64:3c:9e:
                    77:89:69:03:e3:61:4d:9f:d9:e9:ba:73:79:ed:0c:
                    3e:2c:f6:73:4a:c8:3f:d0:13:cc:30:15:f9:bc:46:
                    5e:f6:cc:12:b7:b0:65:ba:7b:8c:a6:dd:3b:e8:b6:
                    82:6f:68:af:de:fd:af:51:be:13:ac:5e:9a:8a:f9:
                    74:9e:34:a2:82:2a:2f:fb:39:9c:d6:8b:54:ea:ba:
                    c0:25:63:18:4d:a5:77:27:83:db:1c:cc:a8:2a:31:
                    25:c6:14:23:2f:54:e6:b1:a3:89:45:71:ff:56:8e:
                    20:9a:39:e9:ce:8d:dc:71:e4:fe:a4:9b:7e:80:2b:
                    15:72:2d:68:01:ce:0d:6f:d2:80:3c:09:45:9b:e4:
                    bd:a6:b4:ac:e5:11:5b:20:f5:df:7a:a1:98:8b:01:
                    8d:6a:0a:60:51:8b:a4:97:4f:f8:ea:8b:8d:5c:6c:
                    d8:93:7f:b9:3a:eb:ba:42:6b:0d:0b:df:58:d5:59:
                    7d:8e:d3:01:b2:e0:41:90:93:9c:09:22:55:02:1c:
                    2c:30:9c:39:b1:78:6f:09:ef:03:9b:bc:eb:05:e4:
                    30:d6:c2:90:32:d6:e1:ff:b1:3b:f3:44:7d:47:03:
                    09:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:27:F8:62:0B:28:A7:77:8F:44:05:35:C3:E3:25:7F:0C:FB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.188.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d4:5c:a0:82:85:4d:ce:b7:6e:5e:69:7d:1b:57:f2:05:46:
         f1:ea:ba:80:6b:28:49:7a:1c:08:56:29:bf:2b:94:4a:fa:2a:
         5f:d4:c6:83:39:48:9d:ad:70:34:96:1a:ae:54:e5:0b:e4:4d:
         04:57:6f:e6:4b:92:cc:43:09:a1:6e:c2:a8:05:42:b0:55:e8:
         9f:7d:87:33:d4:a9:24:b3:ad:f2:88:2a:f5:98:ea:21:ca:2b:
         56:61:f5:2d:d1:e1:87:99:d1:38:92:62:db:76:5b:9e:6e:a2:
         4c:ce:36:02:5c:9c:2a:59:03:bc:8e:d7:f4:2d:fe:2f:de:c7:
         92:06:07:7a:a6:80:c1:b6:8e:54:ce:77:dd:60:91:52:dd:f7:
         94:af:8a:87:dd:c6:e0:a1:8c:55:84:f3:29:4d:dc:8d:88:26:
         53:0c:70:e6:52:9b:c7:fd:61:40:10:ac:21:fb:b4:73:e1:ee:
         e9:f8:f7:a2:ff:60:58:b7:70:f2:d3:0a:75:70:d0:32:cf:c0:
         22:c4:82:67:d3:92:8b:86:3f:93:e6:31:99:65:40:09:2c:50:
         8b:56:db:ff:c1:c4:41:d7:8a:10:73:02:7a:be:54:9e:36:e2:
         dd:fd:57:3d:d9:e5:9d:26:1a:bd:ac:80:d0:72:70:b4:1e:f7:
         79:6e:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:08:31 2026 by rpki-client