Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/358a9cc2-3448-3c6c-910a-7f3af1ef5ff1.roa
File:                     358a9cc2-3448-3c6c-910a-7f3af1ef5ff1.roa (raw, json)
Hash identifier:          kzk1TwMokfd1O8VY/qxcGCwnhXW6wDlzxeVq83B/FFE=
Subject key identifier:   93:76:EE:E3:E1:EF:11:E0:D0:15:95:20:D6:66:E2:12:50:9F:F6:2C
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584F8DD853149A1A1AF63637DA80
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/358a9cc2-3448-3c6c-910a-7f3af1ef5ff1.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     32181
IP address blocks:        158.51.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:53:14:9a:1a:1a:f6:36:37:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=e48fd47c-52fb-4f00-b1a9-2f9a2c4b99e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:59:40:92:57:74:1c:a5:1e:e5:b6:55:97:
                    50:3e:ab:0e:35:d7:e0:0d:c7:42:a1:7d:b7:21:89:
                    46:a9:c6:f0:84:7f:eb:2f:47:ca:a2:fa:26:00:d5:
                    5e:c3:7d:91:f7:f4:7a:38:82:5f:a4:b8:05:61:e3:
                    df:78:22:21:8d:97:66:35:0d:4f:3a:bf:8f:19:1a:
                    ff:3d:e6:cf:ac:d7:89:14:4c:8b:d7:97:70:cb:0d:
                    e2:0c:f1:fd:61:f6:5b:69:d0:d5:a4:92:87:68:66:
                    39:9e:61:34:7f:00:99:cc:eb:28:40:74:e3:fb:14:
                    27:0f:06:eb:aa:3d:93:29:7c:4d:f6:28:f0:a1:09:
                    5d:7c:c4:2d:ec:a3:b8:5d:ee:dc:47:de:ac:9d:2a:
                    fc:c9:34:e8:63:9c:1a:03:a1:54:6a:bd:75:95:73:
                    88:19:a5:be:d1:36:ce:a2:6d:f3:a9:fe:bb:50:59:
                    a8:32:91:55:3b:0f:c9:6c:5e:43:5d:de:9a:93:cf:
                    38:60:1f:85:6a:fd:34:0d:90:29:76:50:43:be:a4:
                    1c:d2:c1:54:95:f3:a2:f5:3f:5f:fd:71:e9:e4:ed:
                    d0:89:96:0d:b8:78:10:d1:7b:74:25:a6:d6:24:62:
                    2c:65:47:a6:60:04:14:7a:2f:b8:10:e9:a4:96:9d:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:76:EE:E3:E1:EF:11:E0:D0:15:95:20:D6:66:E2:12:50:9F:F6:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/358a9cc2-3448-3c6c-910a-7f3af1ef5ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0d:11:eb:a7:ee:d6:cc:04:dc:d4:69:d3:35:e6:b7:d1:f0:
         1e:5c:f2:a0:69:ee:8b:f0:27:ec:1b:3c:21:ed:c9:32:91:6a:
         92:e8:5d:87:46:a5:89:f5:d7:d6:2f:02:2c:a0:1c:a2:3a:d3:
         24:7a:f7:f8:e6:02:a6:7d:99:1a:c8:bd:d6:61:13:a7:68:9c:
         c4:c8:f9:1b:8b:f9:3b:26:5c:d2:0d:18:fb:60:8b:64:67:12:
         2d:5a:94:ef:b6:69:fb:8b:56:73:4d:dc:56:58:09:68:19:b9:
         75:78:c2:b5:c3:c0:74:25:bc:dd:8a:6b:07:4f:6b:94:53:f3:
         3e:c4:b7:4b:93:1c:13:8c:de:42:c3:52:23:3d:90:e7:e4:c6:
         e7:12:9e:96:7e:b4:72:c2:4d:40:db:e5:b4:76:43:6a:e8:a8:
         4d:3b:6a:e4:2d:a8:dd:26:a5:66:ad:94:75:10:f7:26:11:c1:
         56:fd:6d:0b:ae:08:4f:df:4d:19:ee:3a:75:fb:e9:61:38:e6:
         05:96:95:81:df:32:ac:18:d0:f2:d5:79:f3:79:93:51:3f:31:
         39:20:94:6b:63:dd:60:91:bc:b5:b1:88:4f:42:8c:ed:4f:56:
         fe:ef:23:a6:dd:fe:b3:1c:43:87:0e:58:00:72:26:c7:2f:39:
         fe:ad:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:49:56 2026 by rpki-client