Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b84ee080-5cc0-368b-8db5-f08e8ab02588.roa
File:                     b84ee080-5cc0-368b-8db5-f08e8ab02588.roa (raw, json)
Hash identifier:          i7rk9oL0BrpOwlUfSPapHXRezPX7qZ2LSG7JJUSA4gM=
Subject key identifier:   98:1F:5D:4B:72:CA:E4:03:E7:EF:2D:2D:D0:BC:8E:AF:05:F9:BE:7F
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584E8DEF9F6B62E53BBBA6E5AC00
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b84ee080-5cc0-368b-8db5-f08e8ab02588.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        205.157.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:9f:6b:62:e5:3b:bb:a6:e5:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=75c4a9d2-bd20-457b-98b9-fd9620a6a618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:cd:f4:36:c3:79:91:54:a2:e7:93:a5:a1:
                    8f:19:36:61:94:65:f3:a7:47:fa:b4:84:e2:ff:8c:
                    c9:88:ea:d4:f5:be:a9:b9:3a:9e:a3:21:86:bc:e3:
                    20:68:ea:c1:e1:d3:8e:4d:38:78:42:95:7d:82:a6:
                    c8:c4:3d:d0:07:66:28:9c:50:bd:82:2b:b1:1a:af:
                    ea:b3:b3:8f:31:de:5c:ae:78:2b:4c:6c:25:37:83:
                    99:59:1a:ea:4b:e7:74:8b:af:5b:99:5e:57:c0:91:
                    27:d5:66:36:a1:cd:7b:08:91:fd:c6:81:27:e8:9f:
                    8d:ba:fa:f0:bd:f4:1d:e1:ca:23:c6:d3:13:d6:d3:
                    83:31:f1:0d:63:97:0d:a9:33:9a:db:38:2e:70:ce:
                    67:7b:f5:96:00:29:0a:55:e8:91:c5:8c:da:41:a9:
                    66:20:09:a2:33:b7:3b:ec:50:41:6c:8a:a6:90:41:
                    79:23:25:6d:fc:6f:e0:22:96:e5:43:e0:7c:53:92:
                    52:ef:85:28:76:5f:97:63:74:45:ac:7b:2b:3a:16:
                    b6:ae:fa:12:86:19:6e:11:a3:fb:ab:ed:98:4c:71:
                    63:2e:c2:33:02:7f:25:f3:98:9f:53:18:9a:93:44:
                    68:7e:24:b7:6f:13:bf:af:4b:bd:71:cd:e6:cc:a5:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1F:5D:4B:72:CA:E4:03:E7:EF:2D:2D:D0:BC:8E:AF:05:F9:BE:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b84ee080-5cc0-368b-8db5-f08e8ab02588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:64:2f:f9:c3:0a:06:5a:50:94:20:1c:a5:4e:27:8f:f6:09:
         71:93:ae:7c:ba:c2:71:93:2b:e3:2d:ed:58:9c:77:7a:28:df:
         9c:66:76:c7:9d:88:38:ea:63:79:55:e5:62:89:8a:3d:41:d6:
         7c:7b:b0:ca:57:44:27:ef:3d:ce:2f:cd:4b:b5:3d:70:d4:c4:
         53:8a:df:42:26:77:5a:55:e3:be:9d:6b:4e:0c:d9:cf:09:a1:
         0c:56:c5:88:88:04:97:84:66:bc:b9:46:de:3a:34:e5:71:23:
         aa:5c:1c:be:0a:ea:83:3e:3d:56:4f:90:16:11:12:75:bd:58:
         b7:2d:46:07:d9:c4:d8:9a:57:ed:e4:96:e9:11:d6:c3:d2:dd:
         71:e4:13:44:f6:83:d5:bc:dd:50:e5:83:49:d3:6d:31:9b:22:
         65:de:6d:e2:bb:fc:14:dc:cb:c9:88:8a:96:ab:ff:0b:2b:79:
         22:83:c5:2c:63:1f:01:e1:6e:e6:cc:9b:80:42:b8:0a:48:bd:
         18:46:69:ed:df:61:82:f6:41:1d:ff:df:07:37:6f:e1:f3:6b:
         9f:9c:6d:fb:93:68:61:f9:b0:b3:d2:36:c7:8e:45:5d:da:e5:
         b4:81:13:4a:9d:aa:f8:27:c0:91:16:b6:c5:db:90:cb:42:7a:
         ba:83:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:55 2026 by rpki-client