Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/8a633a76-3d36-353c-9a8e-b1cd662f7292.roa
File:                     8a633a76-3d36-353c-9a8e-b1cd662f7292.roa (raw, json)
Hash identifier:          LmalK9+FWFthv8sGofD3aweHOAZe9VuMgyh4eyIMfmo=
Subject key identifier:   48:68:34:79:07:91:3B:0F:35:46:AC:40:27:19:E6:C9:48:A7:DF:B5
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584D75D54D0B249A257FFF557380
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/8a633a76-3d36-353c-9a8e-b1cd662f7292.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     395028
IP address blocks:        205.157.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:4d:0b:24:9a:25:7f:ff:55:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=3f724e06-d509-4572-a2d6-5ad004f2bbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:6e:71:e0:b1:2f:e5:3f:0b:89:e9:e6:cf:
                    d7:8d:16:5f:fd:09:42:28:f4:b1:ef:cf:a5:d6:41:
                    61:d6:5a:f2:96:34:ac:78:7a:9a:7b:ba:00:07:82:
                    bc:f8:de:40:0b:0d:86:7c:4c:56:bc:df:8a:1e:e5:
                    55:83:bc:82:a4:b5:25:d7:cb:14:4c:39:af:95:a5:
                    75:f1:5b:d5:37:fc:b6:3c:48:1d:bb:93:7b:9b:86:
                    de:d6:ad:3e:8f:d8:2b:5a:69:0a:c3:ce:4d:9e:e3:
                    35:3e:49:5e:6a:ef:33:65:e5:76:8a:bd:92:5f:b0:
                    97:9f:cf:e7:fe:b6:ce:b9:2f:98:e0:8d:da:1d:8e:
                    51:f1:bd:61:d4:d4:eb:2d:ec:27:c4:c4:cf:e0:98:
                    1c:b8:9f:1e:90:47:4e:4e:2d:f7:a4:e5:02:a9:03:
                    2b:14:98:af:78:0d:aa:28:32:0e:ab:08:6b:1f:f8:
                    af:a0:10:85:c1:bf:f5:e8:ed:17:8a:29:55:c4:b7:
                    69:c0:58:61:12:04:3d:bd:59:58:5e:35:54:63:f6:
                    9f:df:0e:5e:1a:77:96:4a:83:d1:3e:8a:ef:96:83:
                    0b:96:29:5d:34:96:cc:43:7e:cc:9f:cf:79:14:ca:
                    39:ad:ad:2a:35:9c:b4:5c:e3:32:18:df:4b:47:49:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:68:34:79:07:91:3B:0F:35:46:AC:40:27:19:E6:C9:48:A7:DF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/8a633a76-3d36-353c-9a8e-b1cd662f7292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:36:ad:be:05:7c:35:3e:0f:f6:c5:25:29:c6:d5:f4:ae:48:
         ad:dc:a8:0a:d4:5a:72:7c:4a:1a:66:05:dc:fd:0c:ad:44:d2:
         96:a3:88:97:9e:6e:52:ce:73:e1:33:2a:82:24:3d:75:5d:34:
         9e:fb:db:df:bd:15:85:82:5a:2f:33:60:45:d4:da:5d:83:76:
         e3:53:d1:57:87:2d:4a:a7:de:25:c0:be:b1:c3:f0:72:2e:e3:
         45:c8:72:03:a3:23:9d:ba:ba:9f:34:2a:11:90:3b:b6:3c:e7:
         ab:18:37:d4:d1:65:af:e9:8d:df:3d:4f:42:6d:2f:86:ac:44:
         63:51:d6:45:ec:0e:68:ad:a0:82:da:04:94:76:d2:68:b3:20:
         ee:93:13:4d:ff:ae:64:fb:85:f1:18:4e:49:a7:83:d0:7a:36:
         99:f5:c0:63:27:a6:9e:20:2f:a4:69:f5:44:cf:e1:cc:88:7c:
         31:92:73:c5:4a:6b:68:24:98:a2:ba:8c:a5:8f:21:17:bb:4c:
         7e:c6:49:90:bf:dc:6d:0c:cc:00:0f:aa:ed:9f:5d:32:04:30:
         95:d4:71:37:fb:1e:f7:f3:99:c2:f6:18:a5:b3:93:cb:f7:e4:
         d5:b3:4a:61:56:5d:63:71:f5:13:fe:97:c1:90:50:73:88:1f:
         70:de:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:57 2026 by rpki-client