Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7b943e84-475b-3fcb-8349-68e6038eadaf.roa
File:                     7b943e84-475b-3fcb-8349-68e6038eadaf.roa (raw, json)
Hash identifier:          v1/dMzWjwiCSxqE91xWSvsn3Bqka4o0eVz3BQI6yfMQ=
Subject key identifier:   10:91:79:B1:53:86:F2:AF:45:14:31:93:0E:23:CC:89:D1:CD:B5:37
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584F497337808D4AF0B4112B51A4
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7b943e84-475b-3fcb-8349-68e6038eadaf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        158.51.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:37:80:8d:4a:f0:b4:11:2b:51:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=31b2325a-64ea-40c4-987a-c545c0d22c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:6e:41:ce:50:27:ea:07:4a:32:64:f8:1a:
                    cc:0f:0b:df:d5:7c:6c:61:35:73:f6:52:bb:02:ca:
                    63:06:ef:73:68:4c:96:f9:65:c9:e0:d2:73:ac:39:
                    3e:78:e0:43:4c:ae:a9:26:df:33:05:9e:f0:8e:8d:
                    e9:f7:ee:c7:75:f6:92:d0:ac:39:81:89:17:0e:6b:
                    6a:37:ed:c8:36:0c:97:1e:66:cd:cf:e5:10:a9:8c:
                    a1:9a:4b:51:27:1f:cb:ad:1a:91:b0:c0:2d:c7:52:
                    38:9c:a9:1d:44:69:a0:f1:b8:72:89:41:d1:9b:f4:
                    69:1d:1b:78:a4:76:3c:6f:49:9c:ce:1f:bc:1e:a9:
                    1e:28:9a:4f:96:3b:16:26:fd:ef:ca:5d:03:60:72:
                    b1:15:7b:6a:d2:6b:86:91:6a:6a:ee:a5:17:77:bf:
                    31:ce:62:7e:0d:30:97:a4:a5:ad:85:17:8a:7b:0f:
                    31:2f:89:ca:69:ec:2e:08:b0:36:7d:a0:80:bc:b3:
                    f8:23:61:54:69:31:d2:ce:13:b6:de:df:67:b6:80:
                    df:b3:4f:bc:cb:c0:2a:17:30:72:e3:30:df:5b:e4:
                    59:63:cd:32:1d:2d:d0:ef:95:81:5f:30:1d:8a:c9:
                    d7:8d:41:65:ef:7a:f4:0b:a3:cf:13:ff:5f:d9:5d:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:91:79:B1:53:86:F2:AF:45:14:31:93:0E:23:CC:89:D1:CD:B5:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7b943e84-475b-3fcb-8349-68e6038eadaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:d4:c6:bf:a7:04:25:86:ca:e3:95:63:70:d7:84:4f:bd:
         17:5e:78:b8:e7:6b:39:e2:a2:c2:0a:55:5b:cd:82:eb:dc:99:
         1c:93:21:2d:49:c2:ca:bc:5f:1f:9a:2d:3b:0f:72:83:01:1c:
         49:b0:78:bd:60:78:33:8b:7c:74:b5:d1:a2:d7:d7:9f:26:cb:
         06:10:bb:95:8b:d9:2c:ca:ea:88:26:a9:b7:7e:da:5f:2d:29:
         47:be:d4:39:8e:77:12:84:f1:7d:47:ed:04:e3:c6:4c:3e:7f:
         95:fb:f9:88:e5:79:3b:4d:01:97:19:11:ea:fa:35:45:2a:b6:
         75:d3:3c:60:24:60:56:e4:d3:85:eb:47:a3:d1:47:cd:01:c1:
         7e:2e:1f:65:60:48:31:f6:8e:93:1e:76:f3:42:d5:f2:2c:a9:
         18:a4:90:a0:49:8a:bf:44:27:23:c5:82:3e:28:37:06:13:0d:
         fb:9a:6d:53:f8:4b:d1:9b:fd:10:bd:6f:d9:58:70:09:0a:bb:
         d5:b5:3d:fe:01:91:99:17:7b:e8:b1:63:03:54:ec:86:21:75:
         7f:21:50:f7:86:26:56:58:b5:d6:99:b1:3b:cb:ec:35:34:fd:
         4f:dd:12:38:a1:b9:8f:68:7a:30:e6:e8:91:86:59:1f:c2:d5:
         97:88:4a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:03:46 2026 by rpki-client