Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/0a1836da-cda9-343f-894d-83a386a7f1c0.roa
File:                     0a1836da-cda9-343f-894d-83a386a7f1c0.roa (raw, json)
Hash identifier:          aM2ybaonCdTyOaUKNFnVRc2Rs2xT79tbND7Qy1FghUc=
Subject key identifier:   14:E1:5B:6A:6E:65:C1:05:0F:06:78:6C:F6:7C:B6:3A:40:F5:05:08
Certificate issuer:       /CN=27a0a206-0e8b-48c1-9191-51dfb13bd365
Certificate serial:       010D0C9F4328584D8EF582B2D782E5B51E9EDC80
Authority key identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/0a1836da-cda9-343f-894d-83a386a7f1c0.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        167.251.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:82:b2:d7:82:e5:b5:1e:9e:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a0a206-0e8b-48c1-9191-51dfb13bd365
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=0fa37296-2a3a-4e7b-af83-736bc76bbc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:9b:84:e9:b5:94:0f:10:b2:a1:59:17:4d:
                    51:ad:71:ee:b8:f5:fc:0d:18:4f:4e:f7:cb:82:27:
                    1a:1c:77:4e:11:23:bd:f8:5c:4a:62:26:1d:dc:82:
                    92:85:04:a5:13:2c:92:6e:6b:87:5f:15:f0:44:f1:
                    1d:66:85:b3:1d:dd:73:85:e1:f1:ec:ff:a3:c3:a7:
                    f1:30:1f:00:e4:90:a4:17:92:6c:c2:28:62:23:bd:
                    01:ae:c2:36:bc:4a:4f:b4:e1:48:f1:1c:06:a6:e8:
                    75:84:88:8b:9c:eb:15:36:c7:42:56:ab:23:ad:b1:
                    01:5b:70:4c:c1:d3:41:b9:10:93:fc:4c:c8:b3:e0:
                    bc:3b:14:d6:71:3a:50:79:64:85:d1:d5:df:97:07:
                    51:91:35:b7:d0:03:aa:66:b6:68:b3:c3:af:6c:fc:
                    dd:ab:cd:65:34:5e:9c:0e:33:76:2c:c0:60:e7:0b:
                    40:57:9c:b7:77:f3:6b:f6:8c:d2:70:06:6a:cc:de:
                    70:b3:64:9c:1c:0a:9d:f1:45:4a:c9:6c:92:bd:33:
                    7e:57:23:5a:85:dc:54:87:5f:1b:e0:f0:98:72:89:
                    1c:92:0f:cc:a8:3a:bd:b1:ce:c1:c9:28:17:4a:5f:
                    2a:3d:20:fc:c5:bb:35:fe:23:cf:be:ac:eb:cd:e4:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E1:5B:6A:6E:65:C1:05:0F:06:78:6C:F6:7C:B6:3A:40:F5:05:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/0a1836da-cda9-343f-894d-83a386a7f1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl

            X509v3 Authority Key Identifier:
                keyid:5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.251.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:9d:69:14:15:7b:40:19:93:3b:34:4a:4d:05:9f:8a:7a:
         94:0b:19:c9:a8:1c:0e:c2:2e:6d:cd:70:0d:f5:1b:aa:15:0b:
         b7:2c:2c:b2:2f:b9:88:cc:77:e5:41:6f:9b:c6:18:cc:5d:d1:
         d8:b9:ad:35:3e:30:21:28:79:93:e0:72:2e:eb:83:62:b4:1c:
         69:f4:21:20:21:28:3a:a4:38:77:54:94:53:0b:8b:bb:bb:8d:
         27:f3:c1:47:70:44:31:3d:43:24:ad:c0:57:1c:43:3b:a2:ef:
         e6:2f:05:bf:d7:20:e0:00:32:4e:6f:7c:3e:c7:ef:ea:77:bf:
         53:f0:4e:2a:34:7c:e6:ee:59:bd:8c:1e:4b:31:f6:d3:f3:13:
         42:2a:e0:ad:cf:85:67:98:57:6e:8c:9b:19:e9:dd:73:26:63:
         32:4c:2b:23:af:0f:2f:9e:dc:90:3c:67:54:d1:d4:73:b0:dd:
         7d:17:56:49:7b:3b:2d:fa:7c:1e:da:e6:0b:a2:b6:f7:99:77:
         41:d2:36:fb:88:b4:b7:cf:38:79:55:5a:3e:fe:f7:fb:f0:c9:
         3b:8a:62:ac:7b:e5:d9:07:da:63:70:3f:c7:d8:1b:42:12:67:
         1e:b8:1f:86:3b:dd:03:7b:e9:12:ae:b8:3f:5a:f2:92:21:3a:
         f2:08:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:17:28 2026 by rpki-client