Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
File:                     b5bccd91-72af-3e72-9e98-e575bcfa392f.roa (raw, json)
Hash identifier:          Gfe60Rpp0nVFBzRrq5iD0w6N4jPxBlwt8wK+HIp0x/Y=
Subject key identifier:   9F:B2:6A:74:B0:06:D3:D6:67:21:D1:57:03:EC:B3:4E:81:10:D1:F0
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584DB4A587ACE7BD40027841EF00
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     16410
IP address blocks:        192.112.245.0/24 maxlen: 24
                          205.157.203.0/24 maxlen: 24
                          205.157.204.0/24 maxlen: 24
                          205.157.240.0/24 maxlen: 24
                          205.157.242.0/24 maxlen: 24
                          205.157.244.0/24 maxlen: 24
                          205.157.245.0/24 maxlen: 24
                          205.157.246.0/24 maxlen: 24
                          205.157.247.0/24 maxlen: 24
                          205.157.248.0/24 maxlen: 24
                          205.157.249.0/24 maxlen: 24
                          205.157.250.0/24 maxlen: 24
                          205.157.251.0/24 maxlen: 24
                          205.157.254.0/24 maxlen: 24
                          205.157.255.0/24 maxlen: 24
                          206.180.0.0/23 maxlen: 23
                          206.180.2.0/24 maxlen: 24
                          206.180.3.0/24 maxlen: 24
                          206.180.4.0/24 maxlen: 24
                          206.180.5.0/24 maxlen: 24
                          206.180.6.0/24 maxlen: 24
                          206.180.7.0/24 maxlen: 24
                          206.180.8.0/24 maxlen: 24
                          206.180.9.0/24 maxlen: 24
                          206.180.10.0/24 maxlen: 24
                          206.180.11.0/24 maxlen: 24
                          206.180.12.0/22 maxlen: 22
                          206.180.18.0/24 maxlen: 24
                          206.180.19.0/24 maxlen: 24
                          206.180.25.0/24 maxlen: 24
                          206.180.27.0/24 maxlen: 24
                          206.180.28.0/24 maxlen: 24
                          206.180.29.0/24 maxlen: 24
                          206.180.30.0/24 maxlen: 24
                          206.180.36.0/24 maxlen: 24
                          206.180.37.0/24 maxlen: 24
                          206.180.38.0/24 maxlen: 24
                          206.180.39.0/24 maxlen: 24
                          206.180.52.0/24 maxlen: 24
                          206.180.53.0/24 maxlen: 24
                          206.180.54.0/24 maxlen: 24
                          206.180.55.0/24 maxlen: 24
                          206.180.56.0/24 maxlen: 24
                          206.180.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:87:ac:e7:bd:40:02:78:41:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=7fb84d7b-636c-400e-8891-203543d0b574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:5c:2e:73:c2:bf:8d:c8:1a:46:77:0a:9f:
                    10:ca:bb:3e:08:3e:6f:e6:a1:aa:a9:a7:06:e1:aa:
                    17:c7:c6:ea:05:4c:05:61:db:ab:e5:ad:e5:bf:72:
                    f0:fc:b4:dd:b4:84:c9:aa:e4:81:bd:24:57:ea:4a:
                    6d:9b:7e:b7:c9:9c:e8:d8:4e:2d:f9:ce:da:d7:0f:
                    c8:3d:e0:01:05:e3:42:c9:46:26:69:ea:0a:ad:64:
                    0d:46:41:91:4b:8b:4c:ba:ce:f5:95:87:22:c0:59:
                    71:6b:f1:c6:f9:58:1a:35:78:b7:a9:f9:42:83:74:
                    87:57:15:b2:b5:82:bc:c9:22:99:0e:3a:a3:a5:db:
                    e4:37:f5:39:b5:73:e2:cb:82:12:a3:48:8e:7a:90:
                    8f:9b:4d:01:53:47:35:8b:04:04:95:56:63:9a:7e:
                    b2:6c:38:4d:5f:94:98:e4:db:7e:1d:71:79:d1:c1:
                    06:0e:ea:64:5b:22:ef:70:db:f4:0d:43:2f:17:e2:
                    32:0f:01:97:4a:d6:3b:02:4d:65:83:78:63:32:7e:
                    bc:7b:a7:a2:3e:1c:51:cd:cd:91:15:f2:46:ef:8e:
                    7a:95:fc:08:62:2e:fb:70:0e:ab:c2:b2:1a:ed:4c:
                    73:10:1a:21:80:50:38:a5:63:0b:1b:e7:a2:9d:d5:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B2:6A:74:B0:06:D3:D6:67:21:D1:57:03:EC:B3:4E:81:10:D1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.245.0/24
                  205.157.203.0-205.157.204.255
                  205.157.240.0/24
                  205.157.242.0/24
                  205.157.244.0-205.157.251.255
                  205.157.254.0/23
                  206.180.0.0/20
                  206.180.18.0/23
                  206.180.25.0/24
                  206.180.27.0-206.180.30.255
                  206.180.36.0/22
                  206.180.52.0-206.180.56.255
                  206.180.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:37:aa:01:45:55:3f:27:53:c5:5a:3a:b0:1f:6b:54:0d:
         71:fd:40:48:3f:9d:e6:f4:ac:38:51:8c:a8:fe:ba:fe:df:3d:
         21:9a:dc:2f:89:e3:28:13:94:82:83:82:aa:93:58:f3:0f:03:
         85:69:22:3b:00:8e:3c:f4:0b:22:65:58:eb:a2:9f:69:54:0e:
         8b:f5:ea:fd:c2:37:87:34:14:ed:fc:ad:d2:25:fb:50:ab:82:
         8f:7a:3f:d0:5e:d3:65:80:d2:52:46:05:0c:e8:06:df:e7:7a:
         83:55:d9:38:0b:90:73:2b:2b:80:20:2e:a4:72:7c:38:f7:ef:
         90:4d:5b:78:2c:94:2d:27:67:c6:66:61:86:bb:60:d0:50:20:
         39:d6:96:88:86:d1:9d:29:ec:27:db:98:00:aa:a3:28:35:08:
         8a:0a:75:c7:67:a8:6b:af:d9:0b:07:d4:81:93:97:a9:5c:bc:
         e1:8e:64:cf:ad:b2:c4:93:ca:17:b2:0f:4c:44:87:2f:a0:41:
         c5:0a:bf:3f:36:49:bd:10:47:02:8a:af:a5:ae:72:b6:95:de:
         8a:ea:3c:5e:18:55:c5:7f:de:f6:fc:2f:c3:b5:9c:00:45:43:
         eb:01:4e:ad:f9:08:89:f7:b6:7f:e5:ff:b2:e3:73:b2:ac:06:
         bb:92:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:30 2026 by rpki-client