Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa
File:                     c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa (raw, json)
Hash identifier:          f4qxQgPSXiFLgQkaIdo1mK+A6K7f+7/Fdhorx6GijEY=
Subject key identifier:   99:36:71:27:81:DD:DD:DA:C4:BD:92:37:0F:C2:30:21:62:44:09:E5
Certificate issuer:       /CN=3767dced-4e89-4965-b8de-50e421201b4d
Certificate serial:       010D0C9F4328584EA791AA69804F1825B0D199C0
Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11602
IP address blocks:        151.159.0.0/17 maxlen: 24
                          151.159.128.0/18 maxlen: 24
                          151.159.192.0/20 maxlen: 24
                          151.159.208.0/21 maxlen: 24
                          151.159.216.0/22 maxlen: 24
                          151.159.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:aa:69:80:4f:18:25:b0:d1:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cc04d025-adcb-4899-b93c-e1cdc82ab336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:21:42:41:cf:f2:f3:2f:0f:6d:33:21:23:
                    1f:87:64:7f:d7:8d:ee:02:33:34:4f:c7:ba:2f:5f:
                    10:64:38:c5:0b:04:04:cd:15:77:00:f6:30:df:69:
                    27:87:18:d6:d0:02:aa:c4:94:42:25:0a:6c:13:84:
                    37:c2:59:8d:c7:2b:23:5c:68:08:69:2d:14:6d:ec:
                    e9:28:40:4b:87:1e:3a:9d:98:72:e9:0c:af:38:9a:
                    2a:2d:33:85:5d:9e:3f:18:db:c0:99:6c:18:d2:22:
                    6a:98:50:40:45:88:2a:19:82:fb:28:cd:5f:0f:28:
                    09:b7:df:e9:f4:dd:3b:57:39:cd:b1:27:3b:78:ec:
                    55:a6:54:7b:f4:fb:ec:30:30:54:3a:94:60:2b:66:
                    eb:73:7e:e2:2b:fb:ac:a6:f0:2c:96:f3:db:58:a5:
                    28:6b:71:cf:02:46:5b:0b:bb:d3:65:3e:fc:2b:a9:
                    02:e6:30:05:1f:7b:03:77:7d:d5:24:28:af:c5:a2:
                    30:c7:53:66:0a:92:d5:fc:c7:e2:51:b5:cc:5a:8b:
                    46:11:88:7a:9a:02:73:01:d8:c8:ee:86:28:94:2b:
                    f1:82:71:af:4b:fb:9b:67:7f:71:15:50:96:58:b3:
                    37:a4:0c:2b:af:80:77:67:e5:87:f3:00:31:27:d4:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:36:71:27:81:DD:DD:DA:C4:BD:92:37:0F:C2:30:21:62:44:09:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl

            X509v3 Authority Key Identifier:
                keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.159.0.0-151.159.219.255
                  151.159.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:15:ec:82:ca:b9:bf:27:d7:80:fc:16:72:38:8f:a6:27:
         fe:19:1c:27:7f:15:2b:f4:69:e0:ab:f1:3b:50:e8:30:bb:9f:
         4b:71:cf:71:4c:9c:9b:88:bc:45:b7:98:1b:38:b6:9b:6b:31:
         de:3a:a8:b6:39:50:36:48:38:71:26:09:85:0d:70:92:58:a2:
         ea:40:be:96:d1:4c:95:ee:bf:cb:7c:5f:9f:73:3f:24:ec:dc:
         88:8b:54:0f:7a:0d:9b:f9:05:20:9b:53:94:36:63:b3:42:37:
         6c:ab:47:0b:e3:e2:0f:53:8a:8b:ab:f8:4f:09:e9:5a:34:fe:
         d2:c4:cf:d3:06:f7:2e:de:ee:8b:6f:e8:66:12:3e:e8:0b:5b:
         f7:ca:41:08:0c:42:dc:6d:e3:71:ba:ec:0b:bb:7e:bd:1c:03:
         b7:42:48:35:62:83:b7:5f:41:4d:b5:0a:37:78:ad:a7:00:fa:
         02:2a:19:c5:20:13:76:14:60:ae:60:8a:b8:81:1b:be:1e:f2:
         fe:2f:ac:d3:50:79:33:23:46:e4:1d:dd:11:6d:38:c1:70:a7:
         1f:e9:42:e4:5f:af:c5:c0:80:1b:c7:f6:53:a6:fe:2f:6a:d0:
         e4:ee:35:09:69:97:1b:60:89:fe:0a:be:94:d6:45:41:34:7e:
         c1:aa:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 14:39:24 2026 by rpki-client