Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/885b9690-7510-3fd5-8043-0975b1ba2aaa.roa
File:                     885b9690-7510-3fd5-8043-0975b1ba2aaa.roa (raw, json)
Hash identifier:          ycUZetFrxxQRgvrrbgEQUFQ4e2kwpJycCGWpeWD0Ci8=
Subject key identifier:   B0:C7:79:8C:95:E0:18:9D:CE:07:21:80:B1:50:DB:57:16:BC:FA:61
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584DA11AEBF572917B60DA25B7D0
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/885b9690-7510-3fd5-8043-0975b1ba2aaa.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     2675
IP address blocks:        198.103.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:eb:f5:72:91:7b:60:da:25:b7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=02e2976a-0144-4d0f-a091-126c03e2fd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:cb:85:fc:90:6a:0f:9e:42:d0:7b:65:2e:
                    1a:df:e7:a0:93:fb:e5:f7:22:66:dc:06:d5:ae:2a:
                    61:03:9e:44:90:ec:78:0d:e0:40:9d:46:08:f3:2b:
                    eb:8b:78:75:c0:1f:a9:92:26:90:48:fd:88:27:a7:
                    9f:56:bb:09:17:ea:44:3e:e1:fa:68:16:72:f1:e2:
                    bf:dd:51:8c:64:1d:b7:c3:e5:a4:0d:36:1d:90:85:
                    d5:b3:22:3c:4d:1c:fe:4d:27:e3:4d:2a:0f:13:64:
                    60:cc:2c:ea:70:41:e2:b8:9d:bf:ed:ef:f7:37:11:
                    bf:55:5e:fe:d0:4f:61:de:c1:b4:8c:30:85:10:01:
                    e5:54:35:b1:28:fc:92:d0:22:d6:97:64:d2:4c:bb:
                    26:c6:4b:ab:31:b1:2b:39:ae:45:39:02:08:52:be:
                    b6:96:9f:84:0c:0a:60:ac:b9:ad:d0:06:41:39:33:
                    4a:83:d4:1d:94:3b:12:f6:7f:a7:df:7d:59:b2:61:
                    2b:2b:80:2b:ef:d6:e9:86:18:26:7a:1e:63:f5:3b:
                    d4:d1:d4:7a:bb:a2:ac:71:68:6e:86:d6:42:55:3b:
                    c3:05:9c:d8:d3:1f:f1:4b:ec:d1:5b:5b:1f:df:95:
                    ef:c0:f9:fd:e1:41:d7:16:eb:18:91:e6:e1:3a:e0:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C7:79:8C:95:E0:18:9D:CE:07:21:80:B1:50:DB:57:16:BC:FA:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/885b9690-7510-3fd5-8043-0975b1ba2aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.103.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:57:bc:15:7c:43:f7:b9:6f:58:80:9b:7e:f2:94:ec:9e:
         8d:69:68:f3:c2:94:35:72:a8:aa:87:67:2f:e9:b0:04:43:91:
         d4:24:e1:f7:1b:5b:8f:28:75:9f:35:72:45:8d:c3:27:75:29:
         60:ca:af:83:fa:fb:eb:ea:3c:c5:e7:67:df:86:99:69:ec:e1:
         df:27:e7:21:cd:51:1a:45:49:39:ba:f5:ec:c8:4c:ed:a8:40:
         60:b4:3f:2d:7b:2a:84:c6:21:e3:8e:f0:3b:26:87:ba:18:d6:
         7e:96:42:a5:9b:91:4f:93:77:1b:e7:d2:68:be:ab:90:2d:18:
         3b:ea:fd:17:a3:13:47:f9:4b:ba:92:a4:19:ed:a5:f9:cd:52:
         73:97:6a:bb:1b:c3:6a:16:eb:8e:bb:60:c5:5b:f5:25:68:1f:
         df:50:e2:74:58:82:c2:3a:9e:0d:aa:5c:45:6e:dc:b9:55:94:
         b5:f7:b3:24:a5:72:cc:aa:39:d6:65:2f:87:0f:7b:fa:db:13:
         d0:74:be:f2:e7:e1:41:5d:fc:9a:6a:71:7e:07:e8:2f:0b:1a:
         6c:4d:a7:6c:43:4c:eb:bf:d2:fa:39:0d:8a:91:e0:ce:63:99:
         50:f8:6e:b4:63:0c:85:f8:44:ab:a3:6d:ea:8d:38:2c:f9:41:
         e2:70:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:50 2026 by rpki-client