Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa
File:                     254985db-4130-3371-adaf-7de790bd4207.roa (raw, json)
Hash identifier:          8zuPfoRbsIEHv+1CHMfWDVnxA0wioCuupnttZecJhYg=
Subject key identifier:   8D:08:5C:BC:35:07:EA:5E:94:B4:F4:82:B2:83:A3:7F:63:02:0D:2F
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584E6144B75A05D9E1890D04AC60
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     210
IP address blocks:        198.60.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b7:5a:05:d9:e1:89:0d:04:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=06c8d3ff-4982-4f5e-8171-e42ba3ec6536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:0e:81:63:e6:dc:9a:6f:92:d0:c7:0d:fe:
                    9b:e3:d2:72:96:29:aa:b8:a1:4d:76:ab:8f:59:89:
                    58:08:98:37:59:9e:66:4c:90:75:4e:24:78:9b:d1:
                    86:5a:fa:bc:57:ad:76:d1:a2:8e:07:5b:21:49:59:
                    dd:a6:4c:13:3a:3b:59:9c:e3:22:22:02:16:31:70:
                    47:91:e7:f2:46:ef:4b:8f:2f:a3:96:ba:d1:fe:ea:
                    50:eb:aa:64:73:ce:d2:f6:46:08:d0:ae:23:bf:04:
                    0e:35:42:98:eb:3c:4b:0c:e1:09:fd:50:59:01:30:
                    91:33:24:c2:c8:a9:05:36:df:e6:86:31:f8:fe:e7:
                    10:f9:da:7f:83:0c:c9:24:7f:b1:b1:9a:2b:b3:4f:
                    78:8b:f9:0d:7d:cf:20:1a:bd:d3:81:b8:70:b3:c6:
                    a5:36:86:0e:fc:03:bd:bc:63:81:fc:d0:d1:e0:4a:
                    ec:37:1e:2a:b4:fa:bd:2c:89:d8:a1:8a:33:a6:6a:
                    bc:ce:8a:f6:22:84:d0:23:ab:68:c2:6a:2a:9f:ea:
                    83:b0:1d:96:a6:2a:30:ef:89:de:ca:6e:51:9f:d8:
                    fe:f0:85:52:f5:9a:be:43:30:83:e2:17:7b:a0:75:
                    5d:bc:64:e4:40:48:2b:8a:15:e3:5e:51:3e:ff:01:
                    ad:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:5C:BC:35:07:EA:5E:94:B4:F4:82:B2:83:A3:7F:63:02:0D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:9d:3b:48:c6:c3:75:24:40:6f:87:65:8b:2d:97:d5:dc:
         aa:c2:93:e3:6b:2c:91:ed:5f:b5:30:40:cb:34:66:f1:fe:b2:
         b1:a6:fb:f1:2a:cd:bd:f3:28:1f:20:01:82:29:0d:81:86:28:
         20:bf:c9:fa:38:46:46:c3:43:d6:c8:d9:e0:25:41:00:2a:72:
         48:86:e9:8f:55:d3:11:57:00:a0:10:00:00:b5:bf:ed:85:5c:
         fc:c6:56:60:de:54:6a:c4:d2:08:28:a0:5d:c4:41:0e:3e:b7:
         3e:31:e3:b5:3e:51:4d:1f:1e:55:1e:1f:32:ae:68:c3:a5:7a:
         dc:38:a8:17:b4:52:f4:3e:6b:10:ce:40:a2:b5:1f:0a:f1:52:
         da:70:6c:92:ff:7a:b9:a7:73:92:85:51:af:dc:ee:09:e0:96:
         b1:94:ae:fb:d5:43:31:03:d9:2d:05:c7:00:f7:77:a1:ff:fa:
         f5:0b:91:1e:35:a1:14:4f:4d:f3:44:bc:e2:98:7e:ae:27:5b:
         66:9e:43:20:78:77:d9:48:81:5d:bd:98:ba:a7:41:93:66:38:
         5d:32:ed:d5:1f:0e:0c:ac:57:45:00:d7:d4:c5:57:d2:f5:56:
         20:80:bd:46:40:8e:7d:48:7f:a0:56:c8:c7:ef:cd:79:b2:99:
         bf:0b:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:48:29 2026 by rpki-client