Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
File:                     2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa (raw, json)
Hash identifier:          ywm6J69/bbzWagk8g3Be+AhrnFC2cKWJNhxTTewblmo=
Subject key identifier:   C5:3B:37:8C:35:AB:68:E9:5C:04:99:68:B3:6F:6C:CA:32:23:5D:FE
Certificate issuer:       /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial:       010D0C9F4328584EE38C9D568F8301A2352B8800
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     399804
IP address blocks:        158.51.124.0/24 maxlen: 24
                          158.51.125.0/24 maxlen: 24
                          158.51.126.0/24 maxlen: 24
                          158.51.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9d:56:8f:83:01:a2:35:2b:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=b88fda7d-c1b5-4834-8f2e-d1ae07095cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:7a:ac:e3:e9:29:a6:77:b7:f5:be:b9:9d:
                    fd:9b:b3:1e:07:3b:ac:24:10:49:92:41:2a:a1:bf:
                    04:4d:04:2f:44:98:75:c2:7f:d3:bd:b1:ac:ab:75:
                    e6:b9:39:07:9c:cd:f4:ef:b9:12:09:df:f3:aa:b0:
                    72:e5:8f:15:12:5f:e9:8e:41:73:e1:3c:df:1a:a5:
                    f9:45:a4:c5:d9:31:b6:96:3f:2d:33:18:12:2e:44:
                    af:16:af:15:2c:38:5a:0b:f1:93:ff:e4:c3:02:d7:
                    c7:d2:57:b0:10:e9:a1:76:54:d6:47:8a:ef:25:06:
                    d3:2f:ce:94:9f:7c:3d:4e:d9:7b:25:2f:e8:08:ea:
                    d1:72:49:a6:e2:fa:5a:b3:9a:9a:99:b3:16:dd:7f:
                    98:e8:0e:71:78:48:a5:6f:3e:cb:73:8f:2b:2d:a3:
                    e5:a4:65:98:c1:30:4c:81:1a:c6:b9:d7:a2:2b:61:
                    16:fb:bc:a3:d1:2e:01:59:d9:29:ab:c2:76:3a:19:
                    2b:33:7e:2b:6a:1a:08:46:ad:d1:60:f8:97:23:65:
                    28:57:73:6b:c3:92:8e:81:49:b9:bd:43:d3:1e:eb:
                    79:f3:41:1a:26:bc:e4:4e:f2:1a:57:6c:c9:b2:1e:
                    e1:d8:2b:aa:9c:01:2b:05:b3:df:aa:bb:4d:e9:b9:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3B:37:8C:35:AB:68:E9:5C:04:99:68:B3:6F:6C:CA:32:23:5D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl

            X509v3 Authority Key Identifier:
                keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:66:ec:be:c2:1f:1a:74:cf:d4:84:b6:af:8a:a5:e3:20:de:
         c3:94:5d:db:64:f2:e5:55:4e:1a:52:24:23:b2:9b:4c:13:27:
         f8:2d:c7:0e:bd:28:75:c8:0a:8c:53:44:b5:e1:87:74:e3:54:
         5c:a1:d7:75:b3:f7:e1:a2:b6:d6:d9:0b:14:04:63:cb:41:ab:
         0d:28:e2:7c:09:18:1f:71:68:3a:0a:33:86:ee:c1:9c:63:b5:
         a9:66:99:0d:1b:65:4f:18:03:af:41:f1:e3:91:b4:4c:09:d5:
         dc:f2:57:4d:35:f2:22:4e:4a:30:80:cf:6f:c2:81:4d:92:b4:
         30:d1:12:1c:52:f0:98:bb:ea:c7:0d:9f:75:4c:2d:77:e7:20:
         5f:12:ea:75:92:5d:f2:c6:08:9a:a2:2b:d2:f1:ea:90:67:56:
         66:d1:d2:3a:c1:f4:0d:b0:77:45:40:2a:69:5f:ac:31:b8:b5:
         d0:35:40:6f:5c:8e:8e:6a:1c:d2:98:90:37:2c:03:6f:47:86:
         10:99:14:c5:8e:d5:7b:13:31:0b:86:10:5a:97:9f:b3:ef:94:
         38:c6:d1:90:2e:99:25:04:11:cf:10:2c:8a:46:b6:1d:1b:4a:
         6e:19:f4:ef:49:fc:1c:16:66:d5:89:07:3e:1c:ad:fc:bf:0a:
         9a:48:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:37:04 2026 by rpki-client