Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa
File:                     255548dd-3457-3897-86da-ed823c5f8b42.roa (raw, json)
Hash identifier:          nJ2tCdSfxVYQ5ZdmA9bNWWJaiWg44JeQ247Sd5uOJ0M=
Subject key identifier:   1F:DB:49:65:A7:11:1D:1A:93:7A:B0:90:88:CE:3D:00:DB:FE:6B:62
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584DB4A582D7D54E254982209800
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     2152
IP address blocks:        198.188.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:82:d7:d5:4e:25:49:82:20:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=ad2e564d-f1a8-43b3-8d81-b4473393ee54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:40:c8:44:38:21:6b:9b:2a:df:74:c2:5f:
                    35:83:5a:41:88:25:68:37:f6:91:9b:d4:3e:68:8b:
                    64:c5:7b:0b:38:07:19:57:09:68:9b:da:72:89:ae:
                    d0:62:7f:9b:3f:dc:5b:29:53:b7:80:d9:90:9b:93:
                    03:66:c2:10:d5:eb:14:14:04:a2:6b:84:25:74:f3:
                    c9:de:44:8b:46:bc:49:f9:05:24:d3:12:8d:04:39:
                    9d:db:01:e2:8c:d2:38:ec:67:af:3c:45:a2:3e:4f:
                    8b:e6:a1:4a:41:f0:ca:2d:6c:cd:7d:c9:4b:94:23:
                    08:cd:19:e9:36:b0:49:8f:83:8c:96:2a:70:06:84:
                    78:ef:80:7f:9c:c2:25:df:2f:d9:39:00:43:2b:c8:
                    2d:6d:02:75:3b:49:56:76:4f:eb:f8:02:7f:12:94:
                    5e:cd:a9:c3:de:91:75:67:2a:b4:8a:ff:35:68:4c:
                    e2:09:b3:c4:be:27:fb:02:bf:c1:b8:73:d9:bc:ce:
                    be:00:46:e6:dc:3d:d4:67:c0:e9:fe:f5:2f:5d:b5:
                    46:6a:cd:aa:05:1e:28:56:50:2c:56:94:de:6a:ed:
                    d7:31:c8:41:9e:89:7a:b4:09:4a:b4:7b:20:67:ef:
                    ea:d4:68:77:12:39:3d:7d:2f:dd:b2:e4:6c:39:07:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DB:49:65:A7:11:1D:1A:93:7A:B0:90:88:CE:3D:00:DB:FE:6B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.188.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:db:a3:a7:78:b4:81:65:cf:1b:08:0c:3b:fa:58:8c:43:
         ff:25:1e:e7:50:04:9e:8d:cf:a1:4d:a6:70:25:68:21:8e:2c:
         8d:b8:38:86:9c:d1:73:fc:3f:5d:b0:31:ab:0e:03:7e:45:77:
         b7:5e:13:db:d6:e0:ee:da:92:ce:d1:70:84:75:af:9c:13:be:
         95:37:5a:6d:45:6c:1e:0b:47:28:a0:9b:7b:55:c7:36:b0:53:
         b9:f7:3f:00:bc:85:f6:76:6a:75:68:c8:61:be:68:06:e1:b5:
         fa:28:e7:e0:e2:d5:c2:3c:ad:85:99:08:77:a1:10:d2:60:8c:
         0d:9c:d3:ee:c3:81:4c:6c:51:db:7e:33:fc:68:fe:dc:32:09:
         b9:49:17:86:3d:46:63:59:73:eb:32:81:3f:aa:7b:b4:0e:58:
         6e:0d:67:24:3d:fe:f9:97:2e:7e:41:37:5f:2b:5c:48:1d:bf:
         6f:de:b8:38:b1:94:59:5a:81:68:2f:4d:45:fd:97:af:1d:1b:
         87:4b:a4:39:54:3d:1c:16:e4:de:98:66:a5:51:27:3a:37:d1:
         c9:c4:5a:4f:c5:13:f9:37:14:c3:2d:14:7b:0b:64:c4:02:92:
         a3:28:79:e8:d0:6b:50:52:2f:6e:f0:09:8d:2a:6c:5b:99:79:
         7b:16:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:53 2026 by rpki-client