Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b84ee080-5cc0-368b-8db5-f08e8ab02588.roa
File:                     b84ee080-5cc0-368b-8db5-f08e8ab02588.roa (raw, json)
Hash identifier:          ny9khJYE1XAIC34CwrM3b0/FftW/YJFSCnQH4WBhvgU=
Subject key identifier:   3A:23:2F:3B:79:6A:F2:BD:E8:3D:28:E7:AE:65:19:9A:DF:02:35:AB
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584DADAAD55212C4E8102C9A45A0
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b84ee080-5cc0-368b-8db5-f08e8ab02588.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        205.157.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:d5:52:12:c4:e8:10:2c:9a:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=e5a447ad-01e3-4299-9d0d-94c7dc6e61ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:24:09:ad:d1:3f:65:3f:82:a5:c2:3f:1f:
                    2b:8b:6d:f5:de:fb:b9:f2:57:fd:ad:d5:fb:89:8e:
                    34:24:f6:ba:a1:76:8a:fe:f2:d4:fb:40:eb:31:34:
                    d5:5b:b0:00:7d:72:c6:e2:61:c2:4e:1e:81:54:99:
                    3b:74:3c:0c:93:b2:98:17:10:6e:8f:69:83:3f:f3:
                    f2:87:3e:bb:1d:6b:8e:38:34:06:3c:bc:3b:b1:27:
                    f1:8c:eb:73:69:ef:fe:6f:81:eb:9d:a1:ae:00:87:
                    92:38:86:e8:79:53:28:6a:9e:fd:56:21:af:e3:6a:
                    cd:8b:94:b0:ea:02:d3:ed:c3:97:50:a4:26:cb:28:
                    af:c6:b9:3d:d2:d5:5e:05:de:e2:9e:1a:8b:95:f9:
                    00:f6:67:86:46:fe:91:ee:5d:5e:fb:52:97:6e:f3:
                    c0:89:4c:f1:75:8a:93:cd:52:50:47:36:95:a1:4c:
                    ec:4d:2d:a8:c7:fa:cc:ef:1c:51:c0:c8:42:d8:c6:
                    2a:00:bc:9c:36:9c:4e:ad:bd:2a:74:02:d4:16:3d:
                    a5:d2:88:60:0a:1b:e9:fa:fc:5d:13:c5:9b:8a:f9:
                    66:0c:bd:c4:80:4e:a9:fd:23:00:73:fc:bc:8e:cd:
                    d3:21:86:32:86:0a:09:e2:8e:75:63:47:a5:1e:44:
                    36:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:2F:3B:79:6A:F2:BD:E8:3D:28:E7:AE:65:19:9A:DF:02:35:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b84ee080-5cc0-368b-8db5-f08e8ab02588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:f7:14:4a:4c:09:42:b6:04:84:95:ec:70:3b:a4:77:93:
         46:2d:16:22:c7:5c:a9:3c:5d:1a:aa:d5:ac:e4:bf:00:96:4c:
         6b:e9:e1:c8:30:ab:19:f9:1e:28:3b:fe:73:a8:e0:e6:ef:de:
         41:71:ad:77:6c:1e:46:21:c8:2d:e2:55:ed:e8:ec:41:44:22:
         fb:e3:be:e9:a0:1f:2f:82:93:7f:8e:bb:b7:f4:d0:29:74:a0:
         47:a5:e6:26:78:e1:c5:81:4c:df:05:66:61:0c:1c:01:8a:81:
         e8:d3:22:76:ff:19:76:8b:1f:ea:4e:70:ec:f9:9b:03:bf:c8:
         22:f5:2f:44:d6:03:c5:4a:56:1e:7c:54:f1:5c:20:6b:82:1b:
         d3:65:2d:93:ac:e0:f9:0f:f3:cb:06:6b:96:c7:8a:69:e4:fb:
         2b:55:2d:b0:1c:93:29:ed:d7:c2:64:b2:b7:2a:a1:c6:b2:b9:
         ad:f7:f0:de:5b:bb:ac:11:6b:f8:8e:92:19:13:cb:fa:bb:0b:
         4c:67:6f:b9:e5:df:37:28:f5:dc:68:77:e2:b3:4d:22:28:1a:
         8b:ef:c5:97:5a:11:67:15:0b:34:58:77:9c:66:23:48:7d:38:
         ef:b0:09:e3:a3:a3:77:a6:8a:4e:68:69:e3:12:f1:8a:00:22:
         fd:51:9c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:30:26 2026 by rpki-client