Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/bf990485-b2eb-31f6-acc9-353e7365504a.roa
File:                     bf990485-b2eb-31f6-acc9-353e7365504a.roa (raw, json)
Hash identifier:          +OlOedglEOIokqdQERND13EerqsVIr928k/cJ1Gn1Lk=
Subject key identifier:   98:FE:0E:82:30:51:ED:1C:2B:B8:BC:1B:DE:63:55:BD:1C:3D:3F:87
Certificate issuer:       /CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5
Certificate serial:       010D0C9F4328584F63F82F29CD31E660A1386E60
Authority key identifier: BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/bf990485-b2eb-31f6-acc9-353e7365504a.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        198.207.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:2f:29:cd:31:e6:60:a1:38:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=d215e54d-3724-4555-9751-2c31b6da0e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:69:8b:e6:ae:bd:1d:bd:f3:64:28:4c:9a:
                    ce:39:70:10:ee:77:d4:ea:35:1d:a1:e9:58:8e:b4:
                    41:ba:77:33:77:0f:59:ff:24:d1:1c:30:7c:77:ac:
                    fd:7c:a0:5e:e0:aa:05:bc:86:08:99:fa:6b:7f:c9:
                    da:1c:05:20:c9:89:a8:56:70:f4:e5:87:6a:8e:58:
                    e5:7c:05:f8:87:c2:4a:f5:09:b2:fb:a1:51:fc:f7:
                    49:10:e2:6f:39:63:72:7e:b9:c4:64:09:55:ec:c1:
                    eb:dd:8f:b2:9f:47:d0:4c:2f:6b:ac:32:0a:49:ac:
                    f6:8d:56:ed:a4:4f:2f:6e:6c:da:69:58:64:aa:dc:
                    5b:bf:f2:cf:50:e2:88:fe:a0:92:27:94:b3:0f:b6:
                    42:a9:e8:f2:e7:61:5a:eb:e9:58:e8:fd:dc:4c:28:
                    f8:75:c3:dd:ae:40:f8:73:63:6e:12:3d:4b:40:f2:
                    3c:cf:35:6b:ca:4c:50:9a:50:bc:cd:de:38:db:5a:
                    0c:e7:87:a6:38:64:e2:a6:6e:31:74:fa:2b:51:04:
                    a9:f4:9c:d6:35:ee:79:eb:4e:6c:ac:2e:49:eb:95:
                    fd:39:e3:1f:34:d5:a7:7c:4e:26:e4:7a:59:44:2a:
                    dd:f8:49:50:92:f8:a3:9b:37:21:13:7d:ba:55:94:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FE:0E:82:30:51:ED:1C:2B:B8:BC:1B:DE:63:55:BD:1C:3D:3F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/bf990485-b2eb-31f6-acc9-353e7365504a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6e:c0:86:21:30:61:ad:50:31:ee:34:20:83:84:2a:09:c1:
         4a:dd:cc:64:82:89:14:12:bc:62:8b:53:c5:77:da:d9:3a:85:
         a2:27:85:6e:9e:6e:07:1b:7a:79:2b:b1:e8:70:61:81:3b:8e:
         29:b7:ea:ad:a9:c8:57:0d:16:be:68:b6:fc:26:23:22:45:a1:
         64:94:d5:b5:a6:3a:a4:cd:f7:92:b9:78:aa:6b:4e:eb:18:c0:
         ed:93:57:c0:38:3d:a1:e1:32:70:69:c3:49:d4:52:5f:be:95:
         dc:bd:86:7b:83:69:55:e0:cc:a9:09:aa:46:e3:f0:17:f2:7e:
         9e:eb:76:a8:a3:88:ed:c3:91:14:2c:f9:af:34:2b:2e:e3:d3:
         33:f4:5e:48:c6:e5:70:f8:a3:70:15:57:22:98:7e:8b:40:f1:
         39:19:b8:1f:08:69:e7:55:30:7d:e0:7e:19:fe:5d:d9:8b:0a:
         3b:ac:2b:46:03:f6:67:25:d2:6f:02:73:88:a1:2d:79:14:3c:
         05:c1:48:9f:79:07:9f:2e:6e:af:a9:a9:0d:b4:5e:d6:c4:87:
         22:4f:17:22:5a:12:43:c0:bc:57:35:b6:45:28:17:66:7a:f7:
         c9:75:ec:91:ed:8f:e4:df:ba:f4:dc:09:f3:a5:95:8d:32:94:
         83:77:80:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:41:44 2026 by rpki-client