Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/90bee97d-e55c-3ba3-80b7-e1ff8440ad15.roa
File:                     90bee97d-e55c-3ba3-80b7-e1ff8440ad15.roa (raw, json)
Hash identifier:          okwd34Zx/YVuJGvMXD6bj8Y6mxaTi1WTVlD6Zhyw+IY=
Subject key identifier:   D8:45:62:90:A4:6F:1C:B0:0C:55:D7:C3:54:A3:A9:0A:2A:FC:80:FD
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584CD40767EF474C00C5A34D2ECD
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/90bee97d-e55c-3ba3-80b7-e1ff8440ad15.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     2152
IP address blocks:        198.188.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:67:ef:47:4c:00:c5:a3:4d:2e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=d784ea2c-2465-42cf-a0e9-e5912538e536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:c5:6e:f4:e5:7a:88:02:c6:ff:d4:23:ac:
                    49:a1:8c:c0:5a:e4:cb:f7:e9:02:ee:89:9d:b2:72:
                    72:b7:8d:31:ec:d0:b1:a4:ba:e6:47:2e:02:cb:7b:
                    91:5d:b6:e8:af:22:b8:d2:ef:ba:8a:3b:a2:49:91:
                    23:e8:f7:49:09:ab:92:06:bf:76:ef:8f:52:76:4f:
                    e2:11:7f:66:1f:8d:cf:25:33:d8:c4:3e:c3:98:33:
                    e2:6b:f5:ff:b2:a1:6e:5b:f3:e4:94:70:bc:8f:4f:
                    3a:90:4f:b1:78:fe:47:60:3c:50:f7:4b:fb:9b:2d:
                    ef:92:93:ab:b5:30:2a:ec:ed:d2:e3:19:04:f0:fc:
                    53:6d:53:4c:49:63:a0:1b:50:44:0e:6d:a0:44:7d:
                    51:95:6f:91:a7:47:85:c6:e4:09:08:91:dd:25:0c:
                    47:1a:f3:ad:b2:89:6b:6f:03:aa:c3:c6:4f:48:72:
                    f7:46:1f:3f:ab:d6:70:3b:ad:49:01:4d:c1:2e:29:
                    c1:98:56:f6:8c:df:75:7d:60:9c:f6:ce:17:45:2c:
                    3b:2e:7e:35:46:fc:60:4a:9c:3c:a7:d7:2d:25:38:
                    ef:39:ff:2f:4c:8b:18:74:c4:5a:6c:74:e7:b3:c6:
                    29:b0:24:de:83:4e:c0:fc:f9:91:48:e9:ac:85:30:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:45:62:90:A4:6F:1C:B0:0C:55:D7:C3:54:A3:A9:0A:2A:FC:80:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/90bee97d-e55c-3ba3-80b7-e1ff8440ad15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.188.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0d:95:cb:28:56:a4:ec:1f:8f:18:13:df:b6:13:6f:83:7e:
         05:69:38:f1:1f:c5:39:6c:c4:a6:65:48:ab:18:eb:38:1c:7b:
         6e:61:5f:d4:fb:f1:a6:39:5d:af:15:47:a2:dc:6b:56:9b:b5:
         f1:cb:0c:f2:20:6e:71:06:d0:cd:0d:31:86:17:b2:43:5a:eb:
         d3:0d:43:74:6b:77:be:e7:46:75:7e:ac:76:90:7f:1c:1b:e5:
         c2:09:f3:4a:32:d5:3f:94:5e:54:a5:fc:f0:d7:cf:99:12:f1:
         4c:21:f6:0c:a4:e0:4a:06:cf:a1:6b:1a:db:7f:e3:d5:1b:ff:
         c3:cf:9c:c8:a1:07:c8:6b:12:04:2b:44:36:23:a4:6c:84:de:
         20:cc:89:01:c4:bc:53:0a:f0:8d:62:f2:d9:18:cf:ac:d7:e7:
         e8:f8:f1:fa:8d:ef:c4:b7:38:66:a2:d5:d4:b9:f5:d9:af:68:
         9c:df:1a:88:8e:68:91:06:d9:d1:36:8f:41:0b:ab:55:ed:41:
         19:bf:88:8b:52:0f:d6:0c:98:21:12:1a:b9:b0:c7:fc:01:37:
         50:18:d0:50:0d:cf:10:1c:b6:2c:b9:af:53:e5:15:51:1c:97:
         77:ed:90:ef:26:8e:b2:26:a0:2e:6b:12:11:a3:c3:a7:95:5c:
         be:5b:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:19 2026 by rpki-client