Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa
File:                     b89d1083-da50-3eaf-b7d8-f77234560bfb.roa (raw, json)
Hash identifier:          V0BlE0rCId06zATFSkSVMwpCuEjoQZQlCbFn9Z38usU=
Subject key identifier:   BF:88:73:F4:41:03:44:C3:49:AC:33:95:AE:E1:55:3F:C5:5A:34:4B
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F4328584E4F1F39AFBAD06065CD24EC80
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        140.98.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:39:af:ba:d0:60:65:cd:24:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=c7728a50-f8c4-4cc9-9531-931a0a716ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:f9:ba:0e:e3:fc:82:24:bd:13:f0:a8:f0:
                    8e:71:00:de:56:39:e4:68:5e:36:c4:e0:e2:24:3f:
                    38:5a:12:72:bf:f8:8f:52:ab:3c:ba:62:84:57:bc:
                    43:c5:a7:31:c1:8d:82:28:ef:7b:7b:70:e0:c8:62:
                    69:d8:ee:15:78:9e:13:dd:ce:21:b7:d7:93:be:04:
                    b7:06:91:4e:43:02:77:ca:01:ea:7d:24:33:dc:bb:
                    17:6d:13:ee:80:70:0f:5d:1f:9d:37:89:c2:c2:c0:
                    14:28:6c:3f:22:67:82:d4:78:b9:f5:5b:27:be:89:
                    0a:dc:48:94:ac:c6:be:9d:cd:a1:21:a8:53:26:b4:
                    43:93:d0:ae:2f:97:05:0a:89:4c:01:c6:25:03:47:
                    0f:17:ff:f4:d4:bc:78:53:49:c7:41:ab:e7:0e:73:
                    64:b4:be:38:f4:7e:e1:1b:59:e1:6d:18:78:e8:c8:
                    bd:05:35:42:f1:7a:94:95:d5:85:4f:1a:9c:4a:d6:
                    89:3a:1a:97:c8:42:ba:45:4d:d2:d5:a8:97:0b:14:
                    1a:38:b4:7b:30:9c:b0:53:0e:2a:32:f9:98:f2:fd:
                    01:2a:ec:cd:6e:d6:c2:12:5c:71:08:5c:73:36:fe:
                    7e:c8:5e:dd:6c:d8:0d:54:f7:a8:21:3c:cd:62:f1:
                    36:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:88:73:F4:41:03:44:C3:49:AC:33:95:AE:E1:55:3F:C5:5A:34:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:0e:54:e6:29:80:57:37:ff:00:9e:17:a0:56:b6:6c:cb:
         ba:4d:ab:09:33:18:d9:68:06:47:0e:d6:de:52:0f:12:3e:c0:
         3c:06:4c:2f:9d:4b:49:98:18:67:48:42:49:59:70:b7:fa:6e:
         3d:02:84:68:46:15:dd:e5:b1:e4:37:51:cc:83:b7:77:4a:ef:
         ed:da:12:1c:93:ca:3a:99:ff:ea:88:4f:a0:97:05:a0:24:24:
         b2:1c:c4:f8:05:eb:4a:c4:8b:02:0f:50:70:3e:1b:43:ef:c3:
         c4:fe:8b:a6:de:6d:be:7a:51:5c:a6:5c:78:15:fc:40:bf:c3:
         71:3c:aa:8e:10:dc:8a:5a:77:2e:e3:24:a5:e3:a6:fd:a6:1a:
         4b:a7:c8:c4:40:4c:bd:6d:02:ac:ee:f4:b8:93:99:d6:d2:a0:
         cf:dc:7f:d4:a0:0d:6d:df:63:36:ce:1b:a4:e1:d9:ba:c1:40:
         f8:cd:79:d1:35:bf:da:79:69:bd:e7:6b:d8:d3:a2:25:8d:4a:
         ee:66:84:c5:18:7f:08:53:9a:ce:67:a4:49:69:2a:d4:4a:53:
         39:70:5f:11:a9:33:35:60:ca:08:da:f7:00:2f:12:e6:19:de:
         0b:e7:15:e8:cc:46:c7:b7:3d:63:c8:b1:16:8b:3f:36:27:7f:
         f0:46:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:35:11 2026 by rpki-client