Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ed09e8dc-315c-3678-93f4-65d1cbf0ad6c.roa
File:                     ed09e8dc-315c-3678-93f4-65d1cbf0ad6c.roa (raw, json)
Hash identifier:          0KikP36IJ3rVP5E7sC4I9JQFPEhth6xGLJlbC7KJV5c=
Subject key identifier:   8A:2D:BC:28:8F:BB:46:B4:3A:45:20:A4:78:E6:91:B2:4C:68:0F:81
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584E8B24EFFE5E841F6B94637B80
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ed09e8dc-315c-3678-93f4-65d1cbf0ad6c.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        205.157.218.0/24 maxlen: 24
                          205.157.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:ef:fe:5e:84:1f:6b:94:63:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=ba85eed9-6252-44e8-9961-b43dae2dacc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:3b:69:62:56:2a:ae:33:51:40:bf:11:ad:
                    df:e5:28:5e:6e:97:98:75:89:4a:fa:42:7c:c3:81:
                    38:f6:d7:5b:e5:62:f3:a4:60:39:07:4b:eb:db:bc:
                    82:3b:57:69:23:8a:17:f2:46:68:b3:d2:b1:0a:3a:
                    cc:e7:38:c4:26:37:c1:8e:9e:2e:73:5a:48:36:ac:
                    ac:e6:19:eb:91:18:dc:66:ac:42:ad:5d:12:be:3c:
                    9d:20:9d:78:8d:2e:b2:95:27:b2:02:78:f7:86:5b:
                    24:32:2e:0d:f7:84:45:fa:d4:a5:a0:53:8f:f9:72:
                    6a:9f:87:e6:ad:af:74:a9:01:c1:f7:65:6c:1b:05:
                    22:27:bc:21:f9:84:d1:ff:5a:a3:6d:ba:25:6f:d1:
                    92:05:a1:03:0c:71:5f:a6:eb:97:76:ab:92:24:6c:
                    71:50:79:e7:e0:9d:47:d9:1e:21:af:ab:98:ed:65:
                    fb:33:13:ef:c5:83:e7:7b:ed:1b:95:95:e2:7b:a8:
                    a0:32:93:78:74:79:0b:1a:48:bd:ff:cd:22:da:20:
                    37:95:41:dc:de:1c:7d:a4:e2:f1:6a:fd:07:14:3d:
                    39:bb:ac:c7:85:59:8c:66:e9:a9:50:66:3d:ab:63:
                    fa:a7:48:1b:ec:5b:3e:2f:b6:91:cb:5c:4d:72:92:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:BC:28:8F:BB:46:B4:3A:45:20:A4:78:E6:91:B2:4C:68:0F:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ed09e8dc-315c-3678-93f4-65d1cbf0ad6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:84:9e:cc:a0:ec:5c:60:db:89:aa:14:d1:3a:d1:5c:6e:
         49:e5:fe:f9:7c:9b:98:16:74:ec:95:66:c3:d2:79:98:b6:7f:
         a4:38:fb:06:90:57:0f:64:fe:f8:aa:32:ce:79:f5:5f:00:f4:
         7e:08:f1:67:58:c8:e3:b9:4f:ca:99:f3:6a:9b:86:13:4b:79:
         f0:ba:77:47:9f:d0:eb:3c:ae:70:b8:b7:f3:90:07:b6:92:2d:
         01:21:13:ba:d0:a0:a3:de:c2:4a:32:13:2b:37:8d:62:87:4b:
         90:f5:c8:03:ff:c3:fb:12:7a:4a:54:5d:16:9c:d9:b0:5a:3a:
         63:58:34:21:aa:1d:91:e1:30:dd:da:7f:94:d3:96:2d:d8:74:
         75:3a:85:e5:e6:88:8e:21:76:a0:17:67:12:ba:af:a1:97:08:
         c1:f0:dd:e2:40:60:6e:22:87:60:4a:41:4b:e3:e1:50:01:a3:
         0b:7d:74:6a:23:8d:23:47:8f:bd:dd:dd:a3:e2:04:0f:0d:c2:
         bf:9e:2a:12:50:f5:0f:1a:c4:2d:70:52:c8:bd:ab:76:f5:e4:
         6c:15:14:02:34:ab:01:b8:de:24:06:13:27:1c:37:c7:ce:ce:
         d9:22:a4:f2:4c:77:87:7f:0b:2c:f1:a4:2d:80:b2:49:94:ce:
         c5:87:92:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:13 2026 by rpki-client