Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0/5e0c1258-56ad-31b4-934e-4e61816d3519.roa
File:                     5e0c1258-56ad-31b4-934e-4e61816d3519.roa (raw, json)
Hash identifier:          sai2yq5ihfQUt9V0q1SUGAO3QXN5DNfcw5KkIYjxrD8=
Subject key identifier:   1B:C1:C6:AE:2F:36:A5:BB:0B:91:83:F4:75:E9:25:FD:39:74:72:9F
Certificate issuer:       /CN=7e59f61e-abdc-4e76-b1c9-9354242aedd0
Certificate serial:       010D0C9F4328584F4B6CD7B54A93BFD2813CB900
Authority key identifier: D6:3D:43:21:D1:98:D0:CF:44:96:AA:60:2E:14:EB:1D:95:43:C2:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0/5e0c1258-56ad-31b4-934e-4e61816d3519.roa
Signing time:             Fri 25 Sep 2026 18:00:23 +0000
ROA not before:           Fri 25 Sep 2026 18:00:23 +0000
ROA not after:            Thu 24 Dec 2026 19:00:23 +0000
asID:                     18898
IP address blocks:        162.254.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0/7e59f61e-abdc-4e76-b1c9-9354242aedd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0/7e59f61e-abdc-4e76-b1c9-9354242aedd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:6c:d7:b5:4a:93:bf:d2:81:3c:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e59f61e-abdc-4e76-b1c9-9354242aedd0
        Validity
            Not Before: Sep 25 18:00:23 2026 GMT
            Not After : Dec 24 19:00:23 2026 GMT
        Subject: CN=2390c1d5-6275-4407-b17b-1c0a5bcddb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:08:2a:41:d9:14:5b:14:9f:f9:e1:e1:53:
                    5d:bc:29:a9:c0:fd:d3:0d:31:bf:4b:04:72:b5:c6:
                    d8:ca:37:e5:a5:9d:e5:db:1c:e8:23:dc:24:7b:26:
                    58:1b:52:bd:21:c7:b9:75:9e:61:85:f0:fe:cd:8b:
                    da:65:1c:ba:21:4f:11:35:70:19:ba:4e:f1:b6:c7:
                    2c:fa:ce:6c:10:82:2c:a5:a4:40:6a:31:4a:26:4f:
                    c3:fe:ce:ca:92:0f:07:19:de:91:68:f4:34:61:09:
                    29:87:df:9e:23:21:78:ad:83:b2:c8:c4:a9:c3:23:
                    68:d7:d5:aa:66:57:fa:bf:52:e3:29:a5:59:db:dc:
                    ec:fd:68:27:3f:22:a7:fa:f9:16:aa:ff:66:4b:d3:
                    9e:da:ff:32:c8:4e:ed:7d:93:84:a3:b8:fa:9f:c3:
                    76:42:50:54:3b:f6:9c:79:72:44:eb:ff:34:c8:ac:
                    3a:ef:d1:38:89:9e:da:53:c3:52:e1:aa:88:42:46:
                    5c:d9:e9:66:03:28:2f:42:3d:c8:22:5d:48:71:b8:
                    d3:5a:01:f9:e9:58:a0:3f:23:0d:45:c5:10:64:a2:
                    8b:b1:24:44:c6:a0:f1:25:c9:1c:dc:5d:01:36:c1:
                    b7:2c:41:d3:bb:6f:ec:2a:20:7b:ee:d7:f6:a7:d0:
                    87:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C1:C6:AE:2F:36:A5:BB:0B:91:83:F4:75:E9:25:FD:39:74:72:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0/5e0c1258-56ad-31b4-934e-4e61816d3519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0/7e59f61e-abdc-4e76-b1c9-9354242aedd0.crl

            X509v3 Authority Key Identifier:
                keyid:D6:3D:43:21:D1:98:D0:CF:44:96:AA:60:2E:14:EB:1D:95:43:C2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7e59f61e-abdc-4e76-b1c9-9354242aedd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ca:2d:fe:cd:f7:2d:e2:b1:b3:15:6d:a3:68:ca:b1:b1:d6:
         fb:51:94:96:cd:38:fc:f4:e2:95:32:4b:e0:e2:4f:f1:fa:78:
         9f:55:b4:ae:38:51:1a:4b:12:79:a3:ee:3d:33:6b:2b:91:63:
         0e:ba:c5:cc:cd:78:c8:2c:0a:8e:33:6e:d8:bd:4f:d5:97:c9:
         20:7a:74:f5:cc:f8:be:15:3b:30:07:3c:92:0a:97:43:c9:99:
         14:9d:9e:5d:c6:38:71:45:de:65:96:ec:77:15:aa:6f:50:61:
         2a:a3:f5:53:fc:fa:79:73:86:23:df:3a:b9:d0:30:1b:68:86:
         f0:12:28:df:70:fc:57:14:55:e1:11:4f:1c:91:7f:6f:87:51:
         44:8f:23:74:bc:9f:b7:b4:55:a0:67:ad:6f:6e:9a:3c:85:2a:
         2a:aa:e5:cd:3a:7b:f5:0e:a0:cf:9d:c9:7e:14:f6:c2:1f:6c:
         2d:4a:77:3a:d3:d8:9a:7e:0b:8b:6a:0b:61:11:fb:db:03:fb:
         5e:df:21:67:fa:99:c7:28:2c:04:b2:60:25:4b:2a:67:a2:f8:
         51:89:13:fc:10:41:b2:97:fc:11:59:bd:05:64:79:1b:ec:ed:
         df:df:7d:38:3d:d0:e4:c8:db:5a:1c:27:cd:b5:20:24:1d:d9:
         b2:f2:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:49 2026 by rpki-client