Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa
File:                     c75bc20f-6532-3c41-9539-e3da4d4b642a.roa (raw, json)
Hash identifier:          Y2LKO+gEpfZ6uIIc1lJwA721BzsL8U2+4yb8VddF6VE=
Subject key identifier:   CC:F2:B4:A5:43:57:AA:23:E8:8C:47:89:F1:06:85:B7:3F:22:98:1F
Certificate issuer:       /CN=e41130c1-4af1-4678-90df-9d7c854ceb98
Certificate serial:       010D0C9F4328584D0BDD096710656102F9C02D40
Authority key identifier: DF:24:BF:B9:B1:E3:38:17:32:1C:79:8B:22:FE:17:99:A6:0B:C5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     19431
IP address blocks:        158.51.236.0/22 maxlen: 24
                          2605:9340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:09:67:10:65:61:02:f9:c0:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41130c1-4af1-4678-90df-9d7c854ceb98
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=e9d31fd1-fa10-4371-a25c-608c439596e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:6a:c6:3d:91:46:51:77:1d:7a:8d:95:73:
                    67:c0:24:7b:93:a6:a6:63:68:04:38:65:31:a8:ae:
                    22:41:52:fa:1c:17:44:0f:8c:3e:6f:a1:73:6e:da:
                    35:eb:1c:62:49:2c:13:82:aa:f9:21:a2:9b:34:e4:
                    31:45:9c:10:8e:cf:29:01:70:1e:21:d1:5b:9c:02:
                    2c:9f:f4:f2:5c:8c:86:9a:70:08:19:b1:e5:fa:8d:
                    f3:1e:fa:b4:df:6b:72:7e:4c:1e:c4:09:61:94:1a:
                    83:b3:99:d1:d1:55:fa:87:62:19:fb:c5:a9:d2:60:
                    bb:1e:d8:3f:07:cb:97:3b:c1:d2:fc:1e:08:31:fd:
                    72:a5:20:e7:eb:80:60:8a:58:12:f1:18:b2:ac:c8:
                    23:79:98:da:1c:7e:34:ae:de:a1:d8:4f:3d:c5:2f:
                    1c:eb:8d:7c:39:c3:90:32:6a:12:c0:4c:05:b4:7a:
                    0d:8e:ff:0e:6f:83:66:ba:f2:24:12:de:5f:14:96:
                    b7:75:9b:c9:1a:88:cd:f5:5c:e0:c5:09:a3:77:86:
                    9d:3e:24:50:80:bc:a4:2a:bf:25:d5:23:6b:27:56:
                    d6:d8:e1:fb:c6:5f:2d:f4:b2:7d:02:58:e7:e3:13:
                    c0:85:20:ab:a7:83:64:c4:fd:0f:91:9c:be:40:d3:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F2:B4:A5:43:57:AA:23:E8:8C:47:89:F1:06:85:B7:3F:22:98:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.crl

            X509v3 Authority Key Identifier:
                keyid:DF:24:BF:B9:B1:E3:38:17:32:1C:79:8B:22:FE:17:99:A6:0B:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.236.0/22
                IPv6:
                  2605:9340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:02:32:68:51:9f:bf:d9:72:be:3c:84:e5:d0:0a:3d:96:ff:
         5f:fa:60:44:1c:8b:0a:ef:f3:e7:2e:d0:3c:fe:4b:2b:31:85:
         49:21:cc:0a:a5:99:b3:7f:0b:30:5b:78:bc:71:d8:eb:e9:8e:
         0b:c0:40:71:d1:a0:30:7c:00:13:20:72:a0:df:5e:84:d3:7b:
         84:39:9e:e5:02:10:b0:2e:72:d1:89:23:75:ba:e3:ea:9d:54:
         2e:87:8b:40:21:d4:a7:23:8d:76:37:11:68:9e:32:fb:bc:48:
         10:0c:97:72:95:9a:b4:e1:6a:16:5c:99:ce:52:55:7c:4d:40:
         dd:cf:77:ef:b3:47:79:ad:e8:8a:1e:4a:40:9e:02:f1:d0:57:
         aa:db:d6:b1:e0:47:80:b0:22:b7:ca:ec:f6:a8:9e:7e:25:d4:
         f4:69:aa:0f:0f:f2:43:08:76:e9:24:ca:17:f7:c2:6c:8e:cd:
         c1:a3:be:d8:11:f0:26:76:ca:0f:32:c4:b4:61:47:9c:d5:b3:
         5a:74:f3:7e:3e:31:88:58:a4:61:ee:b9:7d:d4:50:38:5c:8c:
         1b:a4:b8:0f:98:21:b9:db:5e:45:b3:67:45:fc:34:57:2b:8c:
         a6:11:0c:4c:5b:4d:f2:97:ac:02:3e:69:1a:61:50:ed:09:1b:
         55:a5:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:58 2026 by rpki-client