Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/bf886929-4be6-3637-be88-573153ce8456.roa
File:                     bf886929-4be6-3637-be88-573153ce8456.roa (raw, json)
Hash identifier:          dGmEw/Czz/jznhO19t/GzvFxwGbuYKNW2nNF3wKjlhc=
Subject key identifier:   5A:90:F0:00:E9:21:16:64:24:71:C9:22:0F:D5:81:FD:46:F2:5A:6E
Certificate issuer:       /CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
Certificate serial:       010D0C9F4328584F3CE29E421C95FB73EA19CF40
Authority key identifier: 65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/bf886929-4be6-3637-be88-573153ce8456.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     46156
IP address blocks:        159.208.50.0/24 maxlen: 24
                          159.208.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:9e:42:1c:95:fb:73:ea:19:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=2deca494-497a-4d5c-936a-61d52885e13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:8f:7a:b8:fa:1a:91:90:1a:26:6e:d8:92:
                    4d:27:76:f1:d7:b4:58:31:7a:8b:78:16:a1:b1:b7:
                    4a:e7:66:28:9a:58:18:6f:46:3a:16:13:d1:c6:42:
                    8b:b1:f1:f2:7a:4b:f4:8a:52:51:ea:b3:9a:5d:1b:
                    b2:8b:90:b4:23:0a:4a:85:cb:94:e1:8c:f3:e6:ce:
                    f7:71:84:32:4a:be:8a:f9:7f:d3:ce:b1:db:34:57:
                    4f:02:de:eb:31:b6:bf:93:40:af:4d:87:76:2c:42:
                    37:36:3e:02:de:f5:ce:c2:8a:cf:2c:85:ad:c9:f5:
                    17:4a:27:dd:a6:e5:01:5d:e6:1b:56:2d:7d:dc:f9:
                    89:22:e2:f4:a2:06:54:c6:01:3f:0d:f8:15:80:58:
                    f0:3b:ce:d1:91:44:2c:92:3a:6b:1f:7d:06:54:82:
                    14:83:2c:79:98:d6:06:81:ca:33:8d:90:7b:94:2c:
                    5f:d5:49:ff:4f:d1:10:ac:e3:57:5d:70:12:37:b1:
                    82:f4:2e:28:46:5a:c1:f5:ba:85:6a:6c:f1:3f:2c:
                    16:82:38:75:21:0c:3e:c4:29:31:66:7c:a2:bd:84:
                    a6:73:de:6f:5c:8d:a0:af:ca:29:01:32:51:5f:f9:
                    2c:11:04:31:8d:de:56:3a:31:ff:d8:06:f8:a0:d7:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:90:F0:00:E9:21:16:64:24:71:C9:22:0F:D5:81:FD:46:F2:5A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/bf886929-4be6-3637-be88-573153ce8456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl

            X509v3 Authority Key Identifier:
                keyid:65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.208.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c4:e6:a4:c4:b1:9d:5a:df:b9:6c:0d:f6:01:53:94:d4:bd:
         d3:4b:f4:f8:a0:c5:ce:5a:65:98:54:9b:d4:98:53:02:dc:be:
         4e:0c:55:63:3b:db:44:d9:06:0d:2d:ef:1c:56:6d:c4:d6:9c:
         fd:ee:32:5a:97:cf:ef:43:2b:4b:08:fc:f5:87:8d:95:8f:79:
         d7:69:f9:ba:8b:1b:8e:10:51:da:a0:c1:41:b4:88:d0:73:35:
         7a:70:37:c9:67:32:c4:01:3a:56:05:f4:38:3b:9a:dc:cf:1c:
         d8:84:5e:22:59:1d:7b:4f:70:3f:ff:95:8b:57:30:00:20:14:
         bb:29:33:c7:3e:56:c8:43:90:c7:55:1f:73:52:e4:35:63:c2:
         53:29:fd:88:01:11:1e:e6:2a:1c:dc:f4:25:87:01:8d:cc:53:
         2a:fb:24:f7:a1:35:11:6c:d9:28:20:ab:d5:bf:de:0e:08:bd:
         03:6f:dc:59:2f:fb:3b:c1:52:cb:50:32:d0:f3:9f:53:da:c1:
         88:59:2c:ec:d9:b8:f0:b7:0a:cc:c9:36:33:c4:51:a4:76:28:
         64:03:fd:b1:50:2f:b9:5e:d5:e2:25:8a:71:da:43:11:06:5a:
         44:0a:be:94:59:6d:20:21:33:3a:7e:76:07:c5:e4:46:19:0b:
         05:48:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:43:59 2026 by rpki-client