Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6948249d-d8b1-36cc-a2b8-538fac8182d1.roa
File:                     6948249d-d8b1-36cc-a2b8-538fac8182d1.roa (raw, json)
Hash identifier:          aAJDKX/RHj1hOEyGloKvqSDcs+9F+unxsQ3vxYN2vRc=
Subject key identifier:   E8:64:CE:F2:D0:B0:8A:91:50:5A:AC:EE:47:0A:95:D8:07:AC:87:14
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584E2D9EF9CB67AB488BA13E4380
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6948249d-d8b1-36cc-a2b8-538fac8182d1.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     394352
IP address blocks:        158.51.244.0/22 maxlen: 22
                          158.51.244.0/23 maxlen: 23
                          158.51.244.0/24 maxlen: 24
                          158.51.245.0/24 maxlen: 24
                          158.51.246.0/23 maxlen: 23
                          158.51.246.0/24 maxlen: 24
                          158.51.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9e:f9:cb:67:ab:48:8b:a1:3e:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=2ae20c76-9626-4034-a2d2-b2f3401fff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:96:49:14:91:b4:ae:32:47:eb:b7:48:96:
                    77:67:77:c0:76:c0:10:b5:1c:d1:c9:a4:ce:ae:62:
                    a1:5a:e5:c3:9a:be:74:ba:d4:1a:b5:85:ba:f1:d3:
                    ef:ba:ef:c8:b0:e1:1f:31:0d:39:1d:b5:bb:1c:80:
                    42:f0:72:2f:70:f1:c5:67:bd:7f:1a:d9:8c:38:4e:
                    37:2f:61:2a:38:4a:02:6d:07:b5:5f:5a:3f:1d:c8:
                    59:87:5b:50:47:4e:55:14:6b:34:fc:69:a1:f3:23:
                    5e:7a:15:10:03:1f:62:7b:57:42:df:de:fd:78:df:
                    d4:30:2f:76:9f:8c:a8:51:d4:96:19:f4:ca:bf:d5:
                    1a:5a:6e:18:36:93:64:eb:51:ba:b8:d6:19:05:fa:
                    b6:61:59:9b:75:c1:bf:29:be:6b:df:e3:e5:08:c1:
                    24:1b:86:63:c4:f0:f3:bc:1d:ab:41:fd:ca:74:e6:
                    45:77:a6:91:cf:08:84:72:c2:e6:63:ce:b2:5f:39:
                    26:78:04:90:d3:f2:aa:86:4c:06:4b:91:d9:42:a8:
                    64:84:12:b1:e6:d2:f3:73:ff:ce:8c:d1:7b:15:d9:
                    b8:35:50:57:fb:d0:fb:c2:05:30:18:90:b0:a3:7b:
                    0e:87:43:ac:b7:be:69:f3:78:35:47:2a:e4:5d:02:
                    04:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:CE:F2:D0:B0:8A:91:50:5A:AC:EE:47:0A:95:D8:07:AC:87:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6948249d-d8b1-36cc-a2b8-538fac8182d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:64:17:94:ca:5b:30:9d:39:d1:f4:46:2c:de:0d:61:84:
         05:af:b6:f5:b9:25:af:08:75:97:8f:28:ba:48:45:c6:89:4d:
         13:f1:2e:7a:2c:b2:5b:e7:26:f0:4b:9b:52:91:68:c8:55:21:
         a3:73:f2:31:cb:2c:99:4f:00:a9:bd:a3:7b:c7:f5:43:d9:7d:
         70:51:6f:d2:44:e3:65:92:7a:cd:31:8e:22:87:59:1d:cf:d8:
         d2:88:f3:5c:15:dc:28:60:54:c5:03:ff:25:21:3f:27:ad:29:
         5d:27:53:9c:91:40:d3:cc:9d:c9:db:30:0c:2c:90:ea:24:15:
         32:c4:1e:77:47:e9:52:73:f3:2a:2b:37:66:47:eb:4d:fe:0e:
         6b:3c:10:1b:b7:7f:bb:21:c8:ab:5f:26:a0:71:6c:a2:d1:37:
         83:cb:85:c5:96:93:a5:c0:fd:35:cd:09:04:2a:3f:52:82:6f:
         91:42:56:d0:61:fb:66:a9:c6:a8:67:22:b0:e4:b1:9d:e5:02:
         63:de:fb:ac:9d:be:2d:ea:d9:0b:05:02:8b:3d:d6:1a:9e:75:
         ba:5d:47:62:bf:61:37:a6:8d:e8:36:e0:e5:ba:32:0c:93:a4:
         62:f0:e7:f5:54:32:7f:a0:5c:38:a9:b3:44:b2:c4:5f:50:e9:
         8e:e7:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:23:57 2026 by rpki-client