Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa
File:                     f2911a88-5743-3066-bb25-16aad110f46f.roa (raw, json)
Hash identifier:          EF5j/75XKadr+Hhden2EXH+r2lofETYviEcQudXiZOs=
Subject key identifier:   1E:63:4D:4B:E6:FE:17:88:66:98:9A:89:9B:6C:20:EF:9D:B9:3E:B6
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584D67DFC75BF977C6B0F1B93000
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     394926
IP address blocks:        205.157.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c7:5b:f9:77:c6:b0:f1:b9:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=e9c2dc22-f0c3-4893-a1cc-8a4a25f27661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b4:cb:de:8b:86:bd:a2:72:c1:42:a7:a8:67:
                    48:2a:ab:ab:2a:7c:5b:12:49:49:04:85:09:11:eb:
                    c1:a3:06:fd:9e:3b:df:2e:fe:32:77:df:22:d0:6a:
                    6e:74:40:f1:b3:5c:b3:78:a4:24:69:f3:d2:22:0e:
                    5a:de:64:79:49:4d:4f:70:f3:6c:cb:0d:57:d4:72:
                    c4:49:4c:9a:f2:39:28:31:47:e7:74:9a:52:7b:fb:
                    74:29:3f:e3:ca:c8:d9:98:1c:0f:43:27:59:ed:20:
                    75:25:18:d9:45:86:54:e7:d8:84:34:94:85:e2:df:
                    dc:ba:e6:53:a4:6c:10:f5:3f:c0:f5:53:89:8b:2e:
                    bd:1b:99:d7:a9:0d:3a:f7:af:68:e6:63:f8:01:85:
                    11:e7:75:ce:64:4c:fd:a4:36:d3:5c:92:63:01:e2:
                    63:55:dc:3a:4f:c7:11:47:61:9e:95:91:1b:33:90:
                    fb:f2:e1:38:95:25:53:74:6c:3f:87:a6:fe:26:a9:
                    a8:fc:39:d6:47:63:22:b9:03:71:37:11:27:e4:98:
                    85:31:c2:f6:9d:4f:cc:dc:9d:c0:a9:65:25:18:32:
                    7f:f0:90:55:f1:79:84:9f:0c:2c:d1:ba:25:87:38:
                    34:52:70:3a:41:db:46:91:a7:1f:ca:e8:19:7b:48:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:4D:4B:E6:FE:17:88:66:98:9A:89:9B:6C:20:EF:9D:B9:3E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:40:3b:23:45:61:2a:14:cc:a8:b8:89:91:6e:55:b6:96:87:
         ba:c8:b7:2a:57:40:d0:79:d4:65:b0:98:70:3b:8d:4c:82:ac:
         c6:85:2c:5a:e3:f3:5d:73:3d:35:ab:9e:cf:76:b3:0a:67:81:
         38:66:d5:4b:d9:20:ae:22:4b:5d:bc:22:58:25:ab:ae:e1:ea:
         f6:23:cf:ab:8c:2a:ff:4b:bd:bd:cf:75:e3:b6:b5:a8:70:46:
         3f:00:ed:6b:31:bf:01:9f:1e:3f:3e:2c:0d:e7:b1:04:cc:f3:
         e4:78:fa:da:e6:18:52:d3:34:e1:4f:70:fa:2a:99:d9:36:38:
         ac:b0:61:03:c9:27:a6:f3:19:93:35:17:74:8b:3c:3f:ac:ad:
         a0:0b:34:6b:c0:86:a1:4a:1f:f8:ba:d5:10:c3:bb:27:db:67:
         34:d9:78:c5:24:fe:20:71:bd:76:52:9d:db:b0:db:d1:4b:c0:
         8e:b5:39:e6:c2:f8:a6:34:ea:87:9b:e6:da:e1:86:1a:49:0e:
         c3:c7:e6:2d:00:4f:cf:80:d1:77:17:43:1d:69:11:09:e9:19:
         ad:02:cc:7d:b5:f8:00:5e:53:5a:bb:e8:3b:a8:6f:a5:80:20:
         64:37:82:37:f3:c1:b2:a3:e8:5c:45:55:f6:bd:08:a6:d4:8f:
         6b:a2:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:23:34 2026 by rpki-client