Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa
File:                     ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa (raw, json)
Hash identifier:          Js+fk1Pb0FR1qFHqMICHy/D0InTYGk6kjZfYLAaObyU=
Subject key identifier:   F0:28:00:F1:80:BE:25:89:F9:53:D6:6F:10:C2:C0:D5:1A:74:F0:07
Certificate issuer:       /CN=e60c8d18-b5ca-4397-838f-45c2e16a1a7a
Certificate serial:       010D0C9F4328584DC5659ADB01D324CBF5F23700
Authority key identifier: 16:07:A1:04:B1:F6:A6:12:15:88:D8:50:BE:26:41:29:AC:3C:5A:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     8075
IP address blocks:        198.185.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9a:db:01:d3:24:cb:f5:f2:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60c8d18-b5ca-4397-838f-45c2e16a1a7a
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=e442d858-5b50-4b4e-9c0a-1c18a7a1a522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:d2:6b:f6:07:2f:64:39:8a:28:22:f2:60:
                    22:2c:64:0f:1f:ae:fa:d9:b2:b8:66:e1:c9:5b:9e:
                    6c:09:50:8b:6d:5d:7e:4f:b8:a5:32:27:f2:e0:80:
                    ad:14:fb:4a:72:d1:1f:f4:d2:fd:87:db:a3:93:99:
                    cc:78:a6:e4:6d:e0:0f:15:48:dc:75:a1:9f:49:98:
                    86:6f:92:3f:68:2a:46:79:0b:94:29:2c:2a:ee:a1:
                    85:3d:c3:8f:39:4a:8d:28:6b:4b:09:bb:a1:56:50:
                    cd:62:35:94:23:ea:69:b1:10:80:db:09:c2:da:b6:
                    d8:54:cf:ef:01:7b:4f:d9:1b:2e:7f:ed:1d:3f:04:
                    e4:3c:23:67:fa:9a:8f:01:e0:da:2b:db:52:e0:67:
                    87:f1:a5:51:c2:c1:c5:43:16:3a:21:c7:2f:a4:cc:
                    61:0a:d5:54:27:e5:3b:8c:f5:0f:a5:a5:25:35:ef:
                    c9:10:fd:16:e8:2c:fe:b2:f9:78:99:12:79:54:13:
                    92:ad:6c:6f:ef:83:e1:dd:08:f8:6f:b4:4b:f5:c9:
                    a8:e2:27:7e:4f:fe:1b:48:d4:d3:ea:12:90:9a:3d:
                    93:05:26:16:e5:c1:4f:51:26:81:ff:fc:51:3d:20:
                    49:66:26:6e:fe:9d:1a:35:79:d6:19:b3:96:1e:48:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:28:00:F1:80:BE:25:89:F9:53:D6:6F:10:C2:C0:D5:1A:74:F0:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.crl

            X509v3 Authority Key Identifier:
                keyid:16:07:A1:04:B1:F6:A6:12:15:88:D8:50:BE:26:41:29:AC:3C:5A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.185.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5f:b7:74:bb:3a:06:f7:ff:e2:46:fc:36:d1:69:68:ac:87:
         18:cd:1d:9d:f3:f7:89:78:cb:6e:d3:ac:60:73:9e:44:21:d8:
         66:8f:7b:2e:03:98:d0:5c:28:d6:3e:3c:e1:6b:5b:e8:6e:9b:
         d0:db:73:56:83:2f:6b:51:7c:fb:a7:2e:c9:22:fa:e3:1a:e1:
         56:2c:63:6d:d5:86:62:b3:0c:86:c9:89:32:7d:38:e0:e3:f3:
         14:a5:8a:8d:4c:1e:fc:7a:e2:15:68:21:d6:b5:b2:8d:0c:d0:
         4c:c0:a7:3b:11:fa:76:80:37:0e:7b:b2:e1:ad:f2:6b:8a:f4:
         70:1f:41:36:2f:1b:a3:5e:fb:29:1f:b9:8d:74:45:6e:0f:58:
         73:e6:e8:06:4c:85:d7:89:54:d1:42:da:5f:ef:ea:52:58:6a:
         ee:fc:1c:7a:58:02:4c:08:1c:08:38:51:10:a1:a8:dd:1a:b2:
         fd:c7:5e:fc:66:af:f0:ce:51:30:c2:e7:91:ec:37:77:60:54:
         4c:a2:98:5c:50:13:31:d3:ef:62:39:c7:76:35:1b:6c:5f:68:
         d2:69:11:04:45:3e:3d:e2:1f:b7:77:f9:a5:f4:89:d0:e7:20:
         77:d9:9d:19:ba:6b:24:e5:84:e6:5c:c6:ea:0f:87:e3:64:c4:
         4e:cf:05:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:40 2026 by rpki-client