Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa
File:                     d2c7549d-7dcf-3897-85fa-69af9d414cee.roa (raw, json)
Hash identifier:          Y//uhU3x4FAiL8kVqic99NuIumFv1OCOOmqrE3EG4Jk=
Subject key identifier:   54:95:98:35:08:9B:50:59:1C:E3:33:61:19:ED:80:8B:7C:F1:05:79
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584D32D4CDC1EACB34F7DFF4A780
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     45691
IP address blocks:        130.51.98.0/24 maxlen: 24
                          130.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:cd:c1:ea:cb:34:f7:df:f4:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=90ecf0b7-a9ae-4c32-a9d9-35240669c233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:33:61:39:e3:44:bb:13:2f:b8:c2:33:16:
                    25:ae:59:c6:3d:c7:63:91:fe:7f:76:da:a0:23:56:
                    b3:7f:06:24:70:2d:90:76:87:12:32:2e:d6:b1:9f:
                    a5:f5:8c:fa:4a:98:65:f6:c2:e0:03:63:43:af:cd:
                    9d:b0:4c:44:52:37:89:d5:59:9b:d6:0d:d8:11:ed:
                    92:17:ac:1e:f0:ab:61:0f:51:3c:17:f8:04:1f:c4:
                    05:b4:3a:a1:39:77:c5:e0:f4:a8:2b:c8:3c:90:40:
                    33:1e:f4:7e:d5:97:4d:9f:e4:74:0b:ea:f7:21:dd:
                    cc:ce:03:42:16:91:fb:a6:38:6b:23:5f:3f:1b:5f:
                    82:47:a4:85:ba:a2:11:ae:56:48:83:b4:0b:b5:87:
                    e4:fb:ea:64:ef:34:15:05:f5:ce:bd:e8:17:08:d1:
                    75:b4:0f:5d:c8:81:f9:1f:36:0f:7f:d8:3a:fe:60:
                    94:86:5d:61:78:70:4c:9e:c3:a6:6d:b4:dc:30:ea:
                    43:3c:9d:31:23:0d:98:de:95:71:be:c1:99:0f:bd:
                    6b:6a:74:da:d4:b9:9c:61:4f:81:60:8e:95:b6:7f:
                    63:9d:14:41:67:4a:58:e5:6b:81:e2:30:07:e1:b7:
                    5b:8f:b8:07:c7:b1:96:b1:39:13:a8:a2:a2:b4:3d:
                    84:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:95:98:35:08:9B:50:59:1C:E3:33:61:19:ED:80:8B:7C:F1:05:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d1:6f:1c:d4:a4:63:7e:35:e8:24:93:fe:d0:25:63:85:51:
         ad:b4:b5:48:4a:9c:65:67:e4:d5:61:f6:25:6a:da:8e:21:a4:
         06:56:ff:d4:6f:aa:d4:38:1d:92:39:4f:64:9a:24:5e:3a:98:
         39:70:ea:d6:9d:b4:c3:bd:94:78:a5:e0:39:60:33:12:d3:4c:
         d4:4a:e0:f2:ac:04:de:cd:de:46:50:6a:2f:e3:73:9d:67:7f:
         61:37:7f:5f:32:99:be:7b:f6:c9:71:d6:ef:64:d7:9c:54:85:
         af:ac:5e:24:1c:8d:c9:b5:d3:1a:2c:59:60:6f:10:e5:8a:86:
         a2:31:b3:2b:31:b8:7b:e8:28:99:f3:72:ff:c7:75:c8:1c:9b:
         61:30:bb:79:38:01:c6:71:96:62:17:e0:d5:ba:54:5d:e3:22:
         ec:1e:88:8a:1c:e5:08:66:aa:4e:a5:3f:86:09:31:b4:a0:ee:
         a2:1c:7b:39:79:49:5a:41:f6:ad:48:d2:c9:f2:be:5a:9a:26:
         8f:b9:46:a9:ad:8f:dd:68:9c:9b:13:14:13:98:a9:43:cc:fd:
         d7:e5:58:27:68:18:6d:ce:b4:40:6f:ed:49:a0:f3:c3:0b:f4:
         ff:be:f0:b1:61:df:2d:ef:44:fe:06:70:47:cd:6f:33:b9:d3:
         51:82:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 15:59:32 2026 by rpki-client