Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/ec0fedf3-ac17-3060-a3d1-a437f5ee9dfe.roa
File:                     ec0fedf3-ac17-3060-a3d1-a437f5ee9dfe.roa (raw, json)
Hash identifier:          r8JfrNuig//XIDoRKbWMub72u5IrvzG4isEZihdeB5g=
Subject key identifier:   77:6A:E8:FC:0C:01:4D:BF:32:BC:C5:3D:E4:BE:2B:B5:49:67:90:B4
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584DBD05E5A4BEA51684C4E73921
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/ec0fedf3-ac17-3060-a3d1-a437f5ee9dfe.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        159.26.128.0/24 maxlen: 24
                          159.26.130.0/24 maxlen: 24
                          159.26.142.0/24 maxlen: 24
                          159.26.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:e5:a4:be:a5:16:84:c4:e7:39:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=36ddb839-1eca-4b38-bec0-fdcc2e0307f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:d2:75:e7:fa:ec:5a:e1:2f:ca:bf:56:d7:
                    da:ba:f7:57:d8:d1:26:60:14:42:0b:8e:0d:20:80:
                    8d:b4:ea:7a:5d:b5:52:76:1a:82:72:3d:92:f2:6a:
                    7d:3c:71:2e:bc:5e:81:30:fc:2f:6c:36:95:a7:ee:
                    66:63:11:9c:48:1c:d8:3b:24:ca:df:3f:21:a5:36:
                    71:1f:c7:7f:67:41:12:98:8e:eb:18:01:35:6a:ad:
                    14:a4:aa:2b:b0:86:1d:e5:5f:68:32:e8:80:df:bf:
                    df:38:2f:69:ad:fd:21:44:89:a0:1a:17:b1:d5:45:
                    62:d0:0f:04:33:1c:04:3a:c7:4a:34:0b:40:d8:3d:
                    7a:ba:de:28:f9:fa:cc:e3:55:39:5a:33:c3:c3:f7:
                    ff:16:b9:32:71:68:c4:28:48:07:0f:74:f5:92:4d:
                    72:05:bf:2b:04:86:2c:ef:3c:f3:c8:91:d5:43:90:
                    17:6b:3d:0a:72:ae:7e:97:d1:7f:8b:d3:6e:07:f5:
                    47:b1:71:63:3a:1b:99:3d:00:7a:a2:cf:a6:b2:55:
                    f7:f9:c8:e1:47:72:99:7b:a2:d8:c5:0f:d1:7c:03:
                    11:6e:14:73:7e:af:b3:69:46:9d:5f:f2:02:85:9f:
                    98:a3:85:38:52:43:ed:66:1e:05:c1:7c:98:9d:c5:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6A:E8:FC:0C:01:4D:BF:32:BC:C5:3D:E4:BE:2B:B5:49:67:90:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/ec0fedf3-ac17-3060-a3d1-a437f5ee9dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.26.128.0/24
                  159.26.130.0/24
                  159.26.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e1:fe:20:42:4f:6d:c8:d4:d3:ed:04:5b:63:98:ad:fb:14:
         73:74:2b:d1:fb:be:d1:bd:1d:25:63:24:d7:c1:80:43:4c:0a:
         f8:91:32:2a:9d:c8:7a:dd:22:1d:9d:4a:2e:6a:2f:48:f6:9f:
         f7:2e:7c:49:0b:8c:29:a3:3e:4f:ec:f3:72:0b:d1:a3:2d:fb:
         5c:49:b4:66:b4:65:a1:77:1a:29:a0:16:d1:89:88:bb:dd:28:
         06:12:6f:fe:e9:68:28:04:7d:a2:c2:a7:d5:c4:93:04:f6:17:
         9a:fd:43:5b:8a:56:f3:05:e7:e6:98:7f:08:ea:21:c7:65:7e:
         c7:27:0b:26:b1:98:e3:d4:46:3a:25:97:b7:3c:1b:cd:fd:bf:
         4c:db:dd:f3:16:9c:ae:66:bb:fb:a9:fd:af:bf:6d:4b:64:57:
         de:2e:6d:a2:0b:7d:51:01:36:80:15:13:01:36:f8:d4:64:51:
         a1:ff:1f:3a:1a:30:f7:04:7f:3b:a9:f5:5c:74:e4:f1:73:8a:
         e5:7f:d4:33:52:ee:1e:6b:4b:9b:8e:45:2d:25:a3:33:b2:01:
         41:cb:95:e1:e7:af:47:f4:1b:58:c6:cf:8e:ff:9e:05:06:98:
         26:aa:e2:8c:19:30:4d:ab:8c:fe:ab:c0:40:73:44:4a:12:ad:
         53:08:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:13:09 2026 by rpki-client