Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9b3e0231-c9f5-3510-af2a-465cb2c9e68e.roa
File:                     9b3e0231-c9f5-3510-af2a-465cb2c9e68e.roa (raw, json)
Hash identifier:          JkxuET3SE9yn0lP+lmoGc5toMaVmv6YHP2Hy1bEIq4U=
Subject key identifier:   02:D7:9F:CE:6E:69:D7:C7:7B:06:F7:EE:1D:DE:BE:F5:DF:6A:61:E4
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584D343A39ADAB0FAF2267540D00
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9b3e0231-c9f5-3510-af2a-465cb2c9e68e.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     18526
IP address blocks:        158.51.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:39:ad:ab:0f:af:22:67:54:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=dfe716a6-5fe6-4f33-9459-e41b46401a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:f6:71:d8:95:57:56:d6:ae:d5:95:f6:3e:
                    29:c6:4e:9c:33:1e:df:15:30:47:98:d0:1b:3c:45:
                    cc:03:b3:6a:27:0f:b8:ee:df:19:fc:56:1b:80:2c:
                    ab:3c:33:d2:f1:cb:64:5d:40:99:68:fc:fc:d5:e4:
                    8c:e2:7e:d7:f8:f1:11:df:3d:51:96:f6:4b:a8:43:
                    9d:e2:16:59:72:04:d6:f8:f6:c2:86:fe:85:83:98:
                    99:44:07:fe:4c:4d:ee:e3:e7:ce:62:63:11:5d:57:
                    a6:cf:89:2f:1d:6d:3c:84:63:b7:54:e2:a9:65:dc:
                    a2:07:e1:81:0a:cf:16:05:55:ac:92:4d:dc:85:3a:
                    d7:0e:dd:e5:bb:1d:92:e9:35:5b:39:53:76:49:82:
                    50:ff:ab:52:62:66:47:d7:87:ab:00:4a:83:b9:b2:
                    d0:f9:53:3d:a8:3e:b6:fc:0c:a1:8e:eb:01:0e:0b:
                    21:b7:b2:ea:5d:57:8e:67:51:66:15:5b:38:c3:cb:
                    0d:86:ba:e3:dc:88:2c:7a:b5:d6:35:5d:01:56:8b:
                    ca:e6:5a:22:85:18:a7:7a:75:1e:38:75:bc:2d:c9:
                    5b:9f:0b:ce:a5:35:58:cc:c2:96:0b:d4:01:0f:d3:
                    40:52:6f:86:a4:c2:ec:1f:85:b5:e3:46:49:25:0c:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D7:9F:CE:6E:69:D7:C7:7B:06:F7:EE:1D:DE:BE:F5:DF:6A:61:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9b3e0231-c9f5-3510-af2a-465cb2c9e68e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:3f:a8:f9:e4:68:49:e1:a8:4c:d1:9b:f1:c1:45:f9:9b:
         a7:cc:c5:c7:03:2f:4e:10:64:13:a9:0c:80:63:6f:aa:27:f5:
         ce:a4:c9:a8:63:72:af:64:1f:4b:50:0a:9f:ac:cd:0e:73:67:
         e3:f9:18:06:3e:13:0f:f1:cc:a9:83:3c:84:e9:1f:8c:2a:fe:
         3e:4d:b5:e8:c2:bb:64:33:49:b2:fa:ef:65:02:79:72:6e:8b:
         81:0e:d5:91:46:cc:f9:3a:84:a5:60:5c:b3:a2:ac:a6:54:86:
         b9:41:52:55:fe:e3:55:6f:9f:c2:b5:8d:dc:0d:8d:67:dc:4c:
         d1:d5:ea:7d:a9:3b:89:6d:56:d1:92:02:1d:11:a7:e7:fe:c3:
         73:04:0f:e8:77:d1:71:2d:9a:55:66:c5:69:03:95:f2:68:51:
         47:f3:f9:86:c8:d0:7e:b0:8c:76:55:2b:73:32:30:36:b3:f2:
         0f:07:9d:95:11:bf:83:de:be:a6:fa:0e:65:82:90:9e:3b:71:
         e4:17:bd:32:92:fe:3b:df:cf:5f:5e:d0:6f:7f:f1:38:16:ec:
         d2:0b:65:8b:ca:23:09:9d:12:0d:c8:3c:50:13:9d:69:aa:ea:
         a0:f2:77:d4:90:e9:f8:07:fe:20:00:e3:19:f3:f6:0d:34:cf:
         8f:cd:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:17 2026 by rpki-client