Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b4847fd5-99d0-394d-a346-7cf3022a06cf.roa
File:                     b4847fd5-99d0-394d-a346-7cf3022a06cf.roa (raw, json)
Hash identifier:          ZlEICU9b5ZyqZKH/EzpdBQoyCPFEnkP8X3HAahwynrQ=
Subject key identifier:   5F:2D:1D:FF:94:49:A3:86:80:4A:3E:F9:98:77:E1:21:C1:E6:17:2F
Certificate issuer:       /CN=b98f151e-4679-4527-a2b7-2b1bf9c28738
Certificate serial:       010D0C9F4328584ED431DB67616717414EE8D280
Authority key identifier: 7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b4847fd5-99d0-394d-a346-7cf3022a06cf.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     16509
IP address blocks:        173.240.222.0/26 maxlen: 26
                          173.240.222.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:db:67:61:67:17:41:4e:e8:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b98f151e-4679-4527-a2b7-2b1bf9c28738
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=d4997774-52a2-4341-a5ce-bffcc249f2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:43:c3:b2:19:fb:d9:5b:b0:fa:a3:88:65:
                    86:39:ee:12:8d:0b:8e:fe:0c:f9:1d:97:b4:03:86:
                    d7:26:83:98:48:96:d4:9d:94:b7:f0:f0:38:b3:98:
                    b9:f9:ee:c5:e9:54:67:9d:da:e9:d7:8c:d1:78:bd:
                    70:66:2e:b7:05:6a:49:d4:fa:56:8b:12:5a:46:0d:
                    36:db:df:7a:29:2f:5c:cd:1a:e2:fa:a1:79:b1:be:
                    89:db:90:86:8a:d8:99:5c:9a:c2:60:3f:4c:bb:ff:
                    b4:40:7f:0a:a0:0d:60:13:d2:61:72:75:20:be:43:
                    1f:c2:25:f3:9a:8c:01:de:cf:14:f3:7a:dd:d7:4d:
                    13:21:2f:e4:7e:16:93:05:82:e9:ff:47:23:d9:4b:
                    a6:20:26:92:2e:62:76:69:5b:dd:5a:d0:bb:8a:f4:
                    ac:8b:f8:63:42:7c:5f:ee:8f:d3:fb:14:c5:f0:ad:
                    a7:b9:19:74:3c:3c:f5:73:d5:67:b0:64:13:29:61:
                    03:1a:99:ea:97:9c:b7:6e:78:64:a4:f1:76:d5:a2:
                    12:71:18:27:b6:ad:fa:ec:ce:1c:65:f4:b9:3c:e4:
                    0e:37:47:fa:71:b2:2f:7f:35:2c:2c:23:9c:b3:53:
                    e2:f4:30:2d:a7:ca:7a:11:98:0d:f9:e9:5f:74:c0:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2D:1D:FF:94:49:A3:86:80:4A:3E:F9:98:77:E1:21:C1:E6:17:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b4847fd5-99d0-394d-a346-7cf3022a06cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl

            X509v3 Authority Key Identifier:
                keyid:7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.222.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bf:64:e5:8d:f7:10:e4:49:fb:20:86:65:0b:93:ec:41:0f:
         ab:6c:a5:7f:35:65:d3:ea:a6:f6:2c:ba:50:40:dd:76:8e:d7:
         a1:9b:ef:82:27:d7:92:16:c8:0e:89:d4:14:13:64:cf:b1:c6:
         ce:28:9f:c0:37:1f:fc:70:ab:05:86:37:fd:1f:7e:55:23:76:
         01:39:7a:df:f6:fa:b7:c6:6f:9c:35:16:9b:bc:c7:bf:07:e9:
         ed:49:3f:2b:ed:7e:ac:45:aa:13:f7:ea:4e:1d:d6:dd:cf:e7:
         1e:dd:e8:68:89:a6:ba:53:f7:a1:7c:15:7b:ca:d4:26:87:35:
         81:a3:52:a7:92:88:26:70:06:8a:44:4f:7d:4c:10:78:99:54:
         61:93:93:23:8f:6d:35:01:31:e5:1c:f5:fe:27:8a:8d:eb:72:
         ca:40:10:11:ca:5c:d6:b2:f9:13:43:38:5f:fd:cb:72:1c:c8:
         d9:bc:40:3e:98:76:89:3a:a1:e4:6f:4a:93:7d:16:47:49:50:
         c6:56:5f:7d:48:bd:61:39:7f:2a:3b:ab:aa:e5:b1:a5:4a:c2:
         cc:2e:1d:f7:54:2b:e9:70:9e:49:1e:d6:c1:69:4e:fa:aa:6a:
         44:6a:49:19:dd:4b:6b:81:5e:8e:3a:15:d1:96:b3:1e:b2:b2:
         82:eb:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:35:43 2026 by rpki-client