Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/380b4de8-8adf-3d41-bc86-0c4da9df4299.roa
File:                     380b4de8-8adf-3d41-bc86-0c4da9df4299.roa (raw, json)
Hash identifier:          fZ9nAZV4YwneKY06Ctk04684r9JVbq378C+w1ANcqJQ=
Subject key identifier:   C8:77:99:E9:BF:B1:69:D5:5C:41:E6:A6:66:D6:4C:80:90:0B:F4:E0
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584EA78FF77C702902BE18D70F00
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/380b4de8-8adf-3d41-bc86-0c4da9df4299.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18526
IP address blocks:        158.51.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:f7:7c:70:29:02:be:18:d7:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a6e15712-f675-481b-ba26-96abf1719858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:22:8e:36:27:f6:b4:ef:e2:98:68:50:c0:
                    d2:b7:0f:b3:08:43:93:08:0e:de:08:d3:2e:f7:d2:
                    69:2a:fb:d6:88:04:9c:38:d0:7a:76:bd:0c:ae:52:
                    58:dd:c3:1b:d2:bb:49:03:eb:93:86:f6:9a:ba:31:
                    84:51:4b:91:51:c4:e2:29:7f:67:68:27:0c:66:d6:
                    60:29:f8:1d:63:bb:09:64:f7:47:81:10:f8:cd:fc:
                    a3:6f:d5:67:a4:c2:f5:7a:38:70:0d:36:4c:cd:06:
                    4f:d3:fd:a6:f5:6a:c5:08:44:7f:86:e1:7e:5a:63:
                    14:b1:8e:18:7b:00:1a:82:e9:90:d6:fc:a4:4e:2f:
                    6e:79:33:c9:82:64:8a:9b:23:5b:d0:30:a3:31:e9:
                    0d:27:d3:d1:10:49:e3:8f:ec:15:7a:11:c8:3e:77:
                    0b:ee:a0:d0:5a:97:ca:8d:75:c4:81:0c:db:68:de:
                    d9:fc:d5:fe:9b:f7:e5:03:39:12:d4:46:35:1d:4a:
                    28:61:07:5b:27:01:53:27:6c:29:49:bf:b7:4e:af:
                    d2:ed:8c:04:95:46:dc:4d:3c:58:5a:9f:a1:c8:6d:
                    42:92:2d:d2:ae:a3:36:1d:8f:d9:1b:b3:bf:5f:71:
                    fe:e2:8c:53:cf:17:fd:10:35:6f:21:4b:db:07:e8:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:77:99:E9:BF:B1:69:D5:5C:41:E6:A6:66:D6:4C:80:90:0B:F4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/380b4de8-8adf-3d41-bc86-0c4da9df4299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:de:69:ca:fb:00:9d:a1:1d:30:2a:ca:19:25:b5:ba:4a:
         9e:dd:65:5f:e9:90:86:78:b2:51:30:57:88:ab:f6:f8:58:a3:
         04:70:e5:0c:1a:49:14:2e:67:ff:1e:ba:b1:f6:18:0d:fb:a9:
         05:ce:e2:d3:44:df:bd:b3:e1:63:6c:19:05:da:bc:57:5f:d2:
         0a:2c:ef:3b:73:cb:6a:26:0c:bb:8b:a3:8d:bd:56:6a:b8:db:
         75:e9:c7:24:bc:4e:ab:12:dd:6a:14:bf:30:75:29:cb:25:d4:
         cb:10:cc:db:00:1e:5c:99:48:6d:68:16:38:be:77:1f:2e:65:
         a6:af:2f:f1:aa:9b:80:ec:3a:8d:50:eb:80:85:1f:89:e7:c0:
         f4:f7:27:e0:32:29:ea:80:ef:6f:e7:e2:a4:f5:fc:9b:87:30:
         3d:cf:09:70:ea:4f:48:7c:52:51:31:95:03:15:85:a6:29:26:
         44:01:0c:d6:77:9a:20:6d:1d:00:a1:b4:72:ad:ae:12:7c:a7:
         6f:a6:c9:dc:e6:94:84:72:56:73:ee:80:e6:92:c2:36:29:96:
         f9:cf:c4:f6:5e:db:8c:86:16:b8:52:97:fa:fb:fb:f5:40:88:
         78:eb:21:f0:d1:bd:0c:ec:32:49:d5:07:33:7c:c5:db:10:a3:
         4b:b9:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:35 2026 by rpki-client