Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/3b90ec76-c4ab-38fa-a7db-ef07da72b2c7.roa
File:                     3b90ec76-c4ab-38fa-a7db-ef07da72b2c7.roa (raw, json)
Hash identifier:          yGRq9Y97RkugE5rVlD25FVst93XzAogy4yGKP2veCrU=
Subject key identifier:   80:1B:01:CC:57:68:2F:D3:EE:C2:5E:7E:43:F4:E4:7D:EF:EF:3B:9D
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584D07ACE7E80A5DA681A8C96180
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/3b90ec76-c4ab-38fa-a7db-ef07da72b2c7.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     397004
IP address blocks:        205.157.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:e7:e8:0a:5d:a6:81:a8:c9:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=382be645-3596-47c3-a377-c1ea7fe9295f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:ac:3f:cf:57:97:f9:0c:56:14:b2:cb:ec:
                    6d:b1:2b:a7:fd:4e:0a:04:3b:08:a0:51:fe:d8:d7:
                    80:65:9b:09:51:39:90:5b:44:20:82:f3:70:d0:dc:
                    d9:7f:e3:8b:2f:d9:5f:00:47:db:ee:b9:bb:e3:d2:
                    ad:57:5b:46:f1:c0:27:72:b8:5b:ae:8e:fa:fb:7c:
                    e0:fc:36:69:0b:7b:5f:97:77:d1:d4:d1:55:50:84:
                    10:62:e9:e0:ac:82:a9:9a:c1:57:95:4f:ec:05:69:
                    19:5e:0f:a3:0a:8d:31:19:79:24:2c:79:d2:36:0a:
                    1d:b5:0f:b1:fe:00:ab:f6:db:c0:c7:35:cb:ce:4c:
                    26:0d:03:b0:a6:6e:d0:4e:36:0d:56:92:28:2e:2f:
                    fe:e5:34:e2:44:70:07:62:dc:e1:99:12:2a:6c:8f:
                    e0:4c:c3:1f:35:cc:4b:f5:74:10:df:b9:60:84:86:
                    3c:33:1e:d5:b8:8f:98:94:2c:fb:9b:11:a6:01:1d:
                    fa:cc:71:6d:20:df:17:f3:04:e1:ca:d3:7e:32:69:
                    88:c1:c1:90:14:c8:85:fc:68:17:07:9e:cf:a4:a3:
                    5d:93:6d:78:64:5b:75:e5:04:1d:a7:be:4c:79:66:
                    89:74:5b:9b:9f:7f:95:ee:e5:ed:2d:4b:40:c8:7a:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1B:01:CC:57:68:2F:D3:EE:C2:5E:7E:43:F4:E4:7D:EF:EF:3B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/3b90ec76-c4ab-38fa-a7db-ef07da72b2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:75:5e:99:ef:47:be:74:89:36:6b:aa:cd:9c:8e:ae:82:fc:
         44:5f:35:bd:50:e9:c3:0d:6a:f9:05:d6:28:be:f7:59:b3:2f:
         a3:77:20:16:03:b2:f3:e8:59:9a:a3:47:81:ed:59:e4:88:63:
         eb:85:2e:04:66:90:5e:80:9c:da:aa:58:5d:42:96:8a:f9:ad:
         15:6d:70:c6:b0:6d:70:2f:d5:60:6a:fe:41:17:9c:8b:2b:f0:
         d6:8b:c7:e2:4e:c9:fa:15:17:d3:a0:84:9d:67:ad:a9:fe:cf:
         63:49:dd:94:a8:2c:ad:f6:c6:dc:c9:78:14:f2:5c:96:6c:72:
         f1:7d:df:67:0e:5c:fc:18:92:05:69:90:27:e9:51:49:06:dc:
         14:2b:23:92:f2:bd:c3:79:a3:6b:7a:00:aa:b0:78:95:4c:aa:
         e0:91:4d:f3:c1:a6:fa:83:ec:6f:0d:af:7f:60:30:97:f1:6b:
         7d:b4:3a:a8:44:b6:44:4d:5d:a6:60:ab:35:67:57:94:9f:78:
         6f:56:cd:75:f7:e3:b2:ed:63:b4:df:5f:5c:04:3b:2a:c8:03:
         5d:58:13:79:7a:e0:bf:a0:10:cb:f3:34:03:3b:bc:a2:06:2c:
         69:83:c0:82:f6:15:2a:e0:6f:6c:27:78:5e:ec:de:a8:58:64:
         31:3e:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:06 2026 by rpki-client