Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
File:                     3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa (raw, json)
Hash identifier:          bst1TxyDgqpVAOscZ9q4rJKgWpUc5c9XWPOkUJ3leIg=
Subject key identifier:   09:87:31:C1:13:AE:BC:6C:10:5C:05:AC:E8:7C:F0:84:1C:B5:87:A9
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F4328584DCF2B0F03246FE6721117C500
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     15171
IP address blocks:        158.120.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:0f:03:24:6f:e6:72:11:17:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=ab074668-8012-4de7-aaa5-167aa663bc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:5b:7c:a4:b4:bd:51:e7:62:ee:a7:d6:12:
                    55:3b:45:f8:08:b8:5b:0a:12:07:19:2d:8a:b1:9d:
                    9e:84:47:74:b8:4a:da:e2:e1:0a:75:a8:b2:9c:7c:
                    66:d7:34:05:65:4d:20:2d:8a:94:a9:6d:a9:f2:e5:
                    e5:bb:10:88:36:f0:35:2d:56:23:08:f9:6e:de:2a:
                    e1:12:8a:7a:0a:b6:70:a7:85:7a:48:3a:57:4c:ae:
                    77:fa:e5:10:b2:f2:29:05:c3:8e:0e:15:b2:52:56:
                    f5:3b:14:0d:11:09:7c:cc:ba:90:40:ee:76:c5:b0:
                    91:3d:26:57:c5:c2:96:7c:f4:c0:59:88:59:5c:b1:
                    ed:3b:20:db:dd:f3:03:3c:c1:9b:27:f4:e9:4f:67:
                    80:2f:6f:dc:25:9e:85:49:3a:cf:e0:f0:54:0e:14:
                    62:5f:1b:f8:e1:d4:03:a0:0b:5c:48:87:82:15:f8:
                    af:e7:3f:cb:b7:78:a9:f4:18:b9:53:75:df:be:e7:
                    66:78:8e:6e:35:48:8b:34:bf:f4:5e:77:94:df:06:
                    3b:60:04:7a:ee:32:7d:1e:5c:88:b7:bf:6a:d9:cb:
                    ec:36:e7:48:51:13:86:3b:8a:ce:91:c5:d3:81:c3:
                    8f:c3:c4:87:9b:4a:a7:91:c4:21:65:34:c5:43:fc:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:87:31:C1:13:AE:BC:6C:10:5C:05:AC:E8:7C:F0:84:1C:B5:87:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:7d:8a:bd:9c:b3:70:e7:0d:7e:dc:21:64:49:53:e5:d0:
         cd:f7:e6:a4:b4:ad:6a:2b:90:ef:4d:34:ce:84:78:20:61:d5:
         9d:9a:30:e3:73:e2:de:bf:51:b9:0e:77:e0:2f:89:26:6a:f7:
         0b:f6:2c:ee:cb:6f:e2:c2:6b:3e:a0:3a:a2:ce:6c:61:83:2f:
         47:0e:0d:9d:64:50:dd:03:cb:a4:7a:5b:e7:58:22:68:fc:a1:
         19:7d:71:3d:41:18:b5:d2:c1:3c:a2:c2:97:97:5b:04:65:98:
         40:8f:94:af:0f:78:05:d1:78:e8:44:77:17:8a:64:15:ec:d5:
         22:37:a9:12:be:fb:71:b4:2a:10:30:22:ba:de:9b:a8:35:6f:
         c2:f5:7d:00:4c:2c:ff:91:2e:e8:70:29:d4:c1:dc:ff:47:5e:
         f1:cf:06:ca:72:9a:a2:3b:c7:72:9e:38:42:1f:fa:94:6b:60:
         f8:4e:c9:25:50:af:90:4b:53:8b:d1:67:0b:84:fc:b4:a0:66:
         c5:fc:36:79:51:05:99:c7:53:5f:c9:07:12:96:6e:ab:57:f0:
         ff:9d:b7:b6:d5:f3:03:1e:15:07:40:07:e0:27:8a:a1:81:40:
         b4:32:16:bf:18:48:68:6f:79:f4:7a:45:d9:59:e5:5d:04:31:
         ce:b3:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:27:24 2026 by rpki-client