Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa
File:                     4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa (raw, json)
Hash identifier:          Lfv7qusdNeK0JAXlBjOOc1Y/K/CcW0jR+DFGxCJWWFQ=
Subject key identifier:   8F:15:65:EA:2B:AC:1A:7A:D0:2B:98:A1:E1:E8:3F:88:9B:43:25:18
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F4328584D44FA458D81FEB8C605B89720
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        158.26.56.0/21 maxlen: 24
                          158.26.168.0/21 maxlen: 24
                          158.26.216.0/21 maxlen: 24
                          158.26.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:45:8d:81:fe:b8:c6:05:b8:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=6d90604d-bb76-4499-ad77-6d3153212f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:73:38:c8:63:e2:36:23:e1:1c:5f:13:66:
                    dc:d1:ca:3d:1b:53:05:17:42:c9:90:b5:d9:06:cd:
                    a5:bd:c9:a2:78:49:5d:8b:92:96:cf:8c:cb:67:ad:
                    12:21:3e:cf:1e:c2:9d:d7:b0:55:0c:8c:f8:61:c1:
                    cb:46:cb:bc:63:d0:da:2e:79:9c:d4:87:23:dd:0b:
                    be:34:fd:a9:d1:0a:a0:3c:3c:58:9b:ea:e1:8d:93:
                    0a:d5:11:5c:c3:13:a5:8e:62:6e:e8:f9:5f:00:fa:
                    bd:8c:c7:ab:b1:0b:b8:fc:fd:dd:b7:b4:4c:89:9c:
                    1e:2b:c5:8d:d6:c4:db:0e:19:a6:a3:7f:2c:57:bf:
                    b0:11:de:31:0f:51:bc:6d:12:09:5a:39:ca:03:9e:
                    17:8d:eb:b5:35:f5:5e:76:8c:02:a8:7f:51:8e:2d:
                    b9:57:3f:e3:6e:fe:bf:69:4a:f4:27:b9:2f:34:52:
                    3c:d4:a9:2c:f1:bd:12:6e:f5:9f:a0:6c:9f:92:74:
                    d9:fa:97:3b:f3:1b:f1:0d:55:c6:99:7e:4d:7e:f6:
                    c2:ea:e7:c9:86:5b:f8:52:a5:04:f0:5e:29:d0:94:
                    8a:5b:c2:d0:18:fb:ba:8d:62:f8:48:24:5c:8f:60:
                    6c:64:dc:87:5c:6e:1e:b6:db:92:16:4d:db:78:cc:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:15:65:EA:2B:AC:1A:7A:D0:2B:98:A1:E1:E8:3F:88:9B:43:25:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.56.0/21
                  158.26.168.0/21
                  158.26.216.0/21
                  158.26.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:04:cd:d6:f5:4d:2d:60:24:69:d4:59:ac:37:69:29:4d:59:
         dd:af:d2:19:af:f0:9f:2b:30:8d:9c:a0:02:53:0c:d3:3f:d0:
         e1:2a:c1:c2:37:69:1e:2a:56:be:e3:b4:72:23:4d:3a:44:6f:
         e9:33:1c:67:8a:3d:13:51:18:a2:0d:40:65:68:e9:b8:0c:3c:
         fc:ed:49:1d:45:65:d5:5c:13:17:6f:19:3a:90:f4:9a:52:00:
         1a:69:22:29:30:b0:c5:e2:da:0b:af:b6:71:16:c9:6b:ce:8a:
         6c:fb:fc:b7:7f:18:a9:d4:e5:5d:4f:29:c5:33:00:c1:4d:be:
         0b:f9:6e:d8:54:33:3c:67:c9:d2:69:d2:c4:db:f1:30:13:49:
         6b:4f:24:59:1e:97:03:9d:20:63:c6:5d:51:95:3c:93:82:5c:
         ee:3f:fa:5d:a9:ea:c1:7e:64:65:ff:94:e9:d6:fc:0b:bf:4a:
         88:15:fa:50:ee:68:a5:9a:9e:d3:50:00:e1:09:24:41:2e:1a:
         cf:54:cf:4f:1e:8a:9a:ea:3f:f3:ee:22:05:da:42:5e:76:c3:
         28:fd:41:e1:59:f5:33:57:41:7d:0d:ef:0c:32:9d:80:9b:bd:
         0a:68:4d:ad:b5:4c:be:f5:74:75:17:09:7b:61:25:f7:76:63:
         f9:14:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:09 2026 by rpki-client