Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/2eda61a1-e77a-3e1f-bfd7-3d77bcc33247.roa
File:                     2eda61a1-e77a-3e1f-bfd7-3d77bcc33247.roa (raw, json)
Hash identifier:          ScEMwQxvLrur/0s5am2ldRfzKCW9Tq4aPqlhll2p65Q=
Subject key identifier:   EF:E2:BB:9E:30:F4:D3:B7:57:AE:68:18:79:D3:CD:9C:E5:A6:0E:41
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584DBA3AEBF6FBD108EA583B0D20
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/2eda61a1-e77a-3e1f-bfd7-3d77bcc33247.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     19795
IP address blocks:        208.85.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:eb:f6:fb:d1:08:ea:58:3b:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=894f347c-6167-4f1d-8c3b-41b724fd9fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:6b:95:8c:ef:f7:38:6d:91:33:bd:3d:f1:
                    33:70:2e:3d:57:5c:74:2a:36:e2:67:ba:32:80:0c:
                    5f:66:b3:5f:13:53:e2:27:19:5f:3c:84:17:e9:ff:
                    af:53:29:23:a5:a0:0e:a6:37:a5:e7:e8:d2:1c:1e:
                    2a:37:3f:d2:c1:e8:1b:b9:34:c7:11:86:27:09:f4:
                    8b:64:c6:9d:c0:8a:88:0a:70:37:fc:0c:23:3b:50:
                    cf:bc:17:46:7d:d4:97:14:90:cd:cd:34:2e:d5:a5:
                    03:0c:2b:f7:ce:7f:ec:6e:be:b2:99:72:17:59:1f:
                    3d:00:8d:d9:31:38:0d:bc:dc:4f:96:7e:b9:50:36:
                    3c:f5:a9:28:64:2b:73:dd:1d:91:66:1c:f2:b3:63:
                    b5:d5:13:94:0d:3d:7c:a2:50:bb:39:c6:b1:60:21:
                    9d:10:60:c7:b7:fa:db:70:ec:45:90:0a:ea:25:f8:
                    db:bb:3b:5b:c6:2b:cc:6e:83:e3:cb:76:e2:e8:1c:
                    1f:30:8e:4b:f4:3d:75:5d:23:49:f8:4f:62:24:fd:
                    cc:1a:aa:aa:72:36:2b:05:36:5c:c7:03:20:cf:b4:
                    5a:45:7b:af:18:14:2d:ee:e1:4b:cd:4d:40:37:22:
                    cb:bd:d7:aa:79:7b:79:90:d1:f4:f3:af:5f:43:25:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:BB:9E:30:F4:D3:B7:57:AE:68:18:79:D3:CD:9C:E5:A6:0E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/2eda61a1-e77a-3e1f-bfd7-3d77bcc33247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c9:73:88:5b:94:61:34:45:f5:09:47:a1:23:6e:6e:b2:0d:
         87:6a:13:1b:fe:06:04:da:2f:9d:e0:5d:91:1f:d4:44:8a:7a:
         a5:e8:c2:a3:05:e4:1a:4f:62:91:e6:50:c7:fa:af:fe:67:b1:
         43:2f:35:62:dc:08:04:29:62:26:6c:aa:29:67:4c:98:7f:d1:
         5b:7f:cf:c8:5e:db:2d:5a:72:03:fa:93:6a:2b:05:af:04:cc:
         a4:2d:f4:ce:4e:1b:f1:27:bd:9a:46:f1:cd:a0:7e:80:6c:c1:
         c4:cf:6d:22:4f:eb:13:7c:84:42:37:90:67:7d:6c:39:42:93:
         2f:6d:c1:06:e7:12:dd:2a:7d:ad:e6:a6:40:13:bf:3f:cc:b0:
         4c:97:a1:1a:f9:39:06:8d:fc:2a:d5:70:0d:cb:6c:bf:05:db:
         5f:8a:92:cb:a2:f7:58:59:6d:0e:9b:e4:34:9f:c5:73:cd:ac:
         5d:ed:cf:fe:fb:6d:0d:c9:82:ce:ab:76:0c:5d:78:b1:1c:f2:
         eb:6b:c8:cb:a9:6d:0f:9a:03:f6:d2:f6:31:ed:1c:ba:a3:e6:
         64:74:36:d3:d6:9e:f0:3b:ec:c8:b0:3e:a9:46:98:97:b2:d4:
         81:56:40:7a:86:19:11:48:68:a9:6a:57:02:c2:17:7c:37:28:
         32:b1:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:23 2026 by rpki-client