Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa
File:                     f2911a88-5743-3066-bb25-16aad110f46f.roa (raw, json)
Hash identifier:          pwnTXfIimTcc+CZXd+XlroNW84/XXLhIxaiN3pP8lhs=
Subject key identifier:   27:85:02:01:60:87:53:D6:6A:9C:97:DB:D7:0E:38:2E:A5:58:C8:43
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584EEA875AC96A388D02807177A0
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     394926
IP address blocks:        205.157.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5a:c9:6a:38:8d:02:80:71:77:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=4989c487-bf91-4c56-9117-44c32d2a1017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:84:8b:b7:0b:e8:9c:b5:98:79:1f:2b:27:
                    8a:6e:ba:df:4f:e7:59:b8:e5:d8:60:ec:7d:9a:77:
                    f9:5f:e7:2e:26:b6:88:e3:56:f1:ca:35:b3:ba:14:
                    62:ce:35:e0:89:a9:72:1e:8e:26:89:e4:b5:28:1d:
                    f0:88:3d:d3:e4:b4:06:9c:e3:d5:b5:42:58:39:e1:
                    3f:88:29:85:88:17:18:88:95:9a:1a:07:27:c5:03:
                    f7:0b:2e:71:50:5c:b4:d9:84:b4:9a:64:50:11:99:
                    9b:f8:99:6c:90:29:b4:26:e8:24:22:74:1b:0c:5a:
                    ca:7e:04:f5:e2:fc:0b:98:8c:47:6e:61:34:04:22:
                    5b:e8:a5:a2:9a:c2:19:36:51:b5:54:0c:49:2e:85:
                    4c:79:fe:4c:b5:fa:91:3a:c7:c7:65:00:2e:6b:42:
                    0f:73:1c:53:b4:7c:c3:dd:c6:e4:b8:ad:a7:a0:b8:
                    54:eb:f4:30:00:57:b0:22:44:3b:7d:48:23:01:43:
                    da:9a:29:53:86:83:31:00:7d:3e:a9:8b:89:47:83:
                    9d:be:d4:26:e1:34:98:6f:a2:09:c8:e7:83:b2:86:
                    e4:75:de:91:59:48:45:7f:21:8b:5d:95:d6:b9:6a:
                    bc:62:15:cd:c6:3e:1e:25:bd:f0:07:a5:6b:42:ce:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:85:02:01:60:87:53:D6:6A:9C:97:DB:D7:0E:38:2E:A5:58:C8:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:48:36:68:ad:a1:8f:e0:0d:b9:66:7a:e5:54:98:2d:70:1d:
         40:a9:40:89:73:6f:05:cc:0b:87:65:f9:0b:ae:e8:ee:42:e4:
         d0:99:f9:bd:ef:7e:e3:80:88:24:7c:c9:60:24:66:e2:48:a6:
         0d:38:84:26:e0:00:7a:7c:4a:a1:77:c8:36:56:25:ae:47:a0:
         6f:d7:e1:18:32:05:d8:91:f7:f9:3b:f8:79:98:c2:a1:dc:96:
         b5:2a:94:30:d6:bd:ea:ed:d7:be:6c:97:3e:18:68:8e:ab:11:
         1d:7e:aa:62:24:1f:2c:dd:11:33:89:fc:2c:65:e3:63:b8:b3:
         ce:57:c5:f0:4b:cc:7e:17:94:9a:87:23:ec:cf:1c:a6:da:1b:
         48:36:50:a3:42:98:dc:71:a8:c9:f9:35:9e:2d:53:ca:96:81:
         b8:c8:8c:b6:f5:4c:db:83:e6:60:61:5f:69:80:69:eb:2a:89:
         3e:f6:0f:b2:af:30:87:0d:6c:c5:5e:a7:27:0c:36:84:7b:85:
         3e:7f:a7:b4:be:c0:5c:70:ac:b3:2e:01:4a:11:7b:7b:0c:c5:
         d7:68:89:98:39:27:68:3a:b4:03:40:10:81:18:58:85:57:47:
         bb:77:e8:7e:e1:c4:8a:ce:b6:4b:67:0c:58:be:f6:18:66:60:
         bc:11:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:43:48 2026 by rpki-client