Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0bc957d-e827-353f-9650-48950ead8c23.roa
File:                     f0bc957d-e827-353f-9650-48950ead8c23.roa (raw, json)
Hash identifier:          phe2zI/IZbMVvhmTB9PONyTPfWtT7zd2vyYUvyC8GDc=
Subject key identifier:   CF:12:3A:73:10:90:35:F1:59:5B:F1:F2:8D:9A:F5:5C:F5:1B:A5:F7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA79329D8D67CB6D21BB0CC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0bc957d-e827-353f-9650-48950ead8c23.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     214054
IP address blocks:        198.89.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:29:d8:d6:7c:b6:d2:1b:b0:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df595686-c260-4076-a863-8a2d86a3b8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:0b:1f:b4:a5:e1:2a:68:1a:c4:7f:a1:48:
                    e2:3d:cb:65:7d:f5:74:68:10:bc:0d:e5:6c:8c:0d:
                    89:93:61:15:ab:55:70:41:ba:22:3d:0b:94:9e:96:
                    31:55:df:26:61:46:58:c6:d4:b4:82:3c:4f:77:fd:
                    e9:c0:14:94:94:e8:f0:d6:c8:68:d0:39:69:05:38:
                    19:5f:df:b1:5d:89:0a:71:2b:47:b8:1e:bf:66:82:
                    d9:9c:ed:51:33:e9:6b:e5:71:ee:c1:e8:8c:fc:79:
                    d4:18:cb:d7:23:6a:14:7f:f7:e4:33:70:aa:f9:21:
                    72:8b:2c:65:50:c8:fd:c9:1a:0e:61:e2:b8:aa:1a:
                    78:21:37:6b:40:5a:91:8e:93:a5:b1:44:f8:07:30:
                    07:4a:39:4c:7f:0b:05:b7:21:db:5b:7a:92:de:28:
                    54:cd:4f:fe:6c:6e:22:e6:a7:21:09:7d:ad:06:89:
                    e0:e2:73:f0:f4:6c:09:83:99:14:0f:c3:2f:26:e0:
                    33:06:a3:44:0f:c1:8a:44:c2:8c:9f:ee:12:d4:38:
                    00:fe:20:ec:0c:42:fc:fa:56:c8:a3:2a:b2:21:68:
                    00:c4:64:74:59:85:bc:f9:93:f6:61:7f:c2:c1:25:
                    b5:a1:bf:1b:60:21:88:b6:d2:93:97:85:04:e7:84:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:3A:73:10:90:35:F1:59:5B:F1:F2:8D:9A:F5:5C:F5:1B:A5:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0bc957d-e827-353f-9650-48950ead8c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:51:f2:45:5c:c1:c8:c1:15:2b:ac:b2:d0:46:5b:ad:97:63:
         28:6e:7e:a6:d1:e5:4a:24:bb:47:72:09:4d:83:07:bf:58:27:
         ff:12:0f:59:d3:13:5e:e2:08:03:29:96:0d:b7:4a:f5:c0:56:
         f9:89:d6:3e:df:a7:ce:41:f3:cf:42:84:07:87:b7:68:d0:a5:
         2f:14:c4:06:f0:93:5d:cf:06:cc:b0:6d:61:95:fa:87:17:aa:
         19:09:5b:c5:f8:35:81:9e:81:8f:4b:28:ac:5c:ea:e5:96:bb:
         3e:79:cf:e4:fd:a1:62:af:c3:2c:d6:af:23:a5:c0:34:ec:8f:
         e4:39:5b:e3:7b:a4:6f:99:1e:83:6c:21:21:8e:1d:b2:d9:4e:
         aa:21:9b:10:7c:7a:97:a2:74:e1:a5:61:b4:9c:a6:6a:d3:11:
         c6:ea:7d:a8:b3:d5:0b:20:f5:ec:36:b6:c4:c1:c5:04:94:af:
         11:05:39:b8:7e:4c:e4:cd:d7:33:e2:22:5d:a0:ec:1c:6e:b5:
         f6:90:53:6a:59:08:2e:45:4d:a3:ad:15:d4:a0:fa:51:49:a4:
         17:91:eb:7c:bf:73:3b:04:28:26:af:b1:8f:60:1f:b2:08:fb:
         84:31:df:68:82:66:02:a2:bf:72:78:46:fd:dd:ee:bf:b7:f1:
         0d:fe:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:50:35 2026 by rpki-client