Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/218e2096-08f1-3318-8318-91886444d728.roa
File:                     218e2096-08f1-3318-8318-91886444d728.roa (raw, json)
Hash identifier:          4JA7FGuQ4Ufc6dN1o9kJGptA6RZcnXNN2kRSMTD7rHs=
Subject key identifier:   13:B2:AE:E6:F1:B0:EE:15:9F:81:74:5E:D7:FD:EA:98:AF:6F:98:D1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D0D425E70E8D5342B5E970A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/218e2096-08f1-3318-8318-91886444d728.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     14061
IP address blocks:        198.89.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:5e:70:e8:d5:34:2b:5e:97:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=5d77cf2d-36ce-42d7-a98e-e4612668f0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:25:81:c8:c9:96:f9:0b:f5:f5:fa:60:eb:
                    21:e1:fb:19:28:3f:2f:c6:4e:69:b9:d1:d8:7f:5d:
                    93:99:f8:1d:84:a3:6c:cf:49:15:a5:ca:b2:03:43:
                    da:0d:0c:57:6d:e9:04:46:e4:fe:40:07:11:c6:df:
                    0e:8b:a1:c3:ad:20:aa:bb:38:8b:d2:5a:df:f5:ee:
                    00:07:d1:ba:0e:f0:bf:3e:fe:46:2a:98:76:95:bb:
                    0d:2a:f2:59:c9:5c:67:6b:0a:be:92:74:c1:ec:73:
                    c1:12:d5:15:bf:cd:ce:aa:7b:be:fb:ac:d7:54:ff:
                    c5:23:a1:54:09:38:46:ac:3f:f3:07:83:93:dd:d7:
                    fb:11:0e:ca:9c:c6:d2:46:3b:dd:da:67:25:58:e1:
                    11:1d:0b:fd:a3:e7:ae:ce:96:f2:d8:ce:64:7a:59:
                    c1:b4:30:8c:99:2c:88:93:7a:19:40:e9:16:7f:01:
                    2f:df:41:57:38:08:23:53:05:6b:bc:cf:2d:36:85:
                    44:f9:75:69:e4:8a:f0:73:01:6e:45:d7:ab:e4:0a:
                    00:64:2b:07:b2:f7:a4:bc:c0:aa:73:e9:9b:c2:94:
                    f9:37:b0:06:4b:ae:b3:c8:78:d0:57:0a:81:c9:c2:
                    68:55:b9:77:b1:1b:52:50:3f:21:49:97:79:77:37:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B2:AE:E6:F1:B0:EE:15:9F:81:74:5E:D7:FD:EA:98:AF:6F:98:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/218e2096-08f1-3318-8318-91886444d728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:66:fb:ae:b3:e1:ca:a5:78:cf:be:61:7a:37:c3:d8:5e:ae:
         61:52:a2:b3:63:e6:0d:6a:21:46:5f:4b:24:34:8f:96:69:9f:
         f3:98:ac:a5:c2:c5:83:42:25:31:cd:c1:a6:7a:c9:97:7e:02:
         a5:ba:89:dc:45:0e:a8:4d:26:12:b8:6e:55:41:a4:82:60:0e:
         8b:98:af:a1:eb:6a:a8:38:1f:7c:d3:bc:c4:38:62:d6:db:52:
         53:c0:75:86:d7:72:8a:6f:0f:c8:f3:a7:19:f6:1f:fb:3b:a5:
         23:fa:a0:bb:3a:65:dc:40:c2:c2:1f:71:23:be:55:41:ef:7d:
         18:96:fb:7e:b5:18:18:b2:10:0b:94:19:de:5a:1c:b4:cf:a3:
         7a:7d:3c:9b:f8:27:dc:36:31:22:8c:e0:64:9c:00:bf:5b:f1:
         b6:49:3e:b8:e5:18:4c:28:77:a3:d1:24:e4:6a:71:51:56:66:
         f3:ad:de:8e:01:2b:0a:7c:a0:9d:45:cc:23:1f:0d:38:c0:ca:
         3b:4d:95:b7:74:99:ab:4d:e4:1d:40:7d:b2:19:58:f8:e8:14:
         75:46:af:90:b1:76:82:b2:eb:33:7a:b8:d5:40:94:a8:3e:46:
         99:9e:a6:25:88:23:42:8b:7c:d1:ce:4a:1a:da:8a:91:4f:65:
         3c:e4:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 06:17:37 2026 by rpki-client