Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa
File:                     eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa (raw, json)
Hash identifier:          TIoz9O0EAqAD5wv+EEopKAWGWGw12slcuxF1xijH4uM=
Subject key identifier:   79:38:E8:76:20:D2:AA:A4:F5:A3:EF:44:74:34:9E:6D:97:1F:36:1A
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F4975EE3F45CA90B62BD41B80
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        157.185.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:ee:3f:45:ca:90:b6:2b:d4:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=83d45c10-7fb2-452c-b452-5ff13172140d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:4c:06:eb:93:8f:6f:a6:06:2e:dd:7e:a3:
                    c3:b1:8d:c3:03:81:df:fd:61:46:ce:aa:e1:8d:8b:
                    53:c1:d3:65:e1:ad:90:ed:53:b6:1a:ab:ec:05:0c:
                    fd:67:a0:cd:97:94:e7:15:91:e8:11:fc:53:ae:94:
                    f6:f5:3a:c0:e5:a1:04:1a:68:58:b8:92:4e:b1:bb:
                    5c:ac:84:e9:93:42:68:08:cf:5b:f2:a1:84:80:4b:
                    9f:57:ea:14:78:26:9e:4a:06:cc:19:3a:05:68:53:
                    f7:fb:ea:c0:2a:85:e9:37:ff:b5:fe:13:69:c3:3a:
                    85:8e:ec:d4:0f:0e:94:f7:f8:7a:f2:77:bf:11:49:
                    73:9c:b1:83:6e:f6:f0:c3:fc:ae:59:46:96:d7:1b:
                    a1:0e:28:a0:9e:8f:4a:45:be:f2:ab:a4:03:9b:f3:
                    a0:7e:57:18:3b:3d:58:8b:96:0d:88:8d:a9:79:8b:
                    05:00:80:06:f5:46:d8:84:ba:1c:04:7a:52:dd:c7:
                    c0:99:dc:92:a4:05:09:37:b0:2e:7d:a2:5e:0f:4f:
                    6c:cd:dc:c9:d5:e5:1b:9b:4f:6e:10:fa:71:27:7f:
                    06:46:7f:99:80:e4:79:8e:fd:50:c4:28:53:02:cb:
                    bd:b2:a8:77:f2:ec:aa:f6:08:5c:30:2a:15:e2:df:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:38:E8:76:20:D2:AA:A4:F5:A3:EF:44:74:34:9E:6D:97:1F:36:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:33:24:c8:6e:e3:43:a0:7e:7c:31:a9:69:e4:bd:a0:7d:
         d9:e4:65:7c:eb:66:03:90:2e:e6:a7:01:cc:fa:3d:b8:f3:ac:
         de:df:ac:6d:9a:8a:c4:2b:96:84:7b:4b:35:ff:98:2d:69:3b:
         77:0d:ec:0d:e7:a8:3c:44:3d:77:41:53:d2:50:11:40:28:af:
         d9:c9:46:8c:66:ce:54:bb:f4:be:c4:09:fc:d8:9d:11:3f:64:
         9a:c2:c7:3f:74:32:a2:e1:ad:e9:6f:bd:45:f2:61:d6:78:96:
         e0:bc:99:14:ea:2e:ea:f7:8d:9d:89:b1:97:f3:c7:93:66:25:
         41:39:7f:bb:d7:64:fe:95:5a:4a:04:7c:53:6a:9e:68:78:83:
         99:5d:71:51:36:e6:3d:44:06:fa:80:9c:ef:f7:3e:a7:fb:13:
         39:f0:bc:67:5d:3d:f2:f9:34:96:11:ff:76:61:39:3f:42:35:
         f6:38:a3:74:5d:b2:5e:3a:be:25:84:65:fb:09:b7:77:4d:65:
         8c:1b:ef:22:71:b4:b0:5d:6c:2e:54:61:e4:35:17:f6:90:6b:
         41:ac:2c:e8:2c:87:c9:5a:e1:79:b4:da:4f:a0:41:63:8e:8d:
         00:c2:48:a4:cf:c1:6f:c3:9b:f4:7e:dc:2b:92:58:a3:43:83:
         86:35:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:05:57 2026 by rpki-client