Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/cb26024d-0398-3c64-9131-807614c5aa15.roa
File:                     cb26024d-0398-3c64-9131-807614c5aa15.roa (raw, json)
Hash identifier:          +a+TyBCPTTuKcXrf4HFfncVCICI7JTnjla4lKh3a8HI=
Subject key identifier:   6D:36:16:E0:E5:1A:EF:2F:4C:BA:78:D1:8E:E3:82:C2:D0:36:55:CF
Certificate issuer:       /CN=a327a78b-38c6-4e70-927c-f4959d89c6b4
Certificate serial:       010D0C9F4328584D0D4249F51FC8D96E17B63A46
Authority key identifier: 75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/cb26024d-0398-3c64-9131-807614c5aa15.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        167.150.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:49:f5:1f:c8:d9:6e:17:b6:3a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a327a78b-38c6-4e70-927c-f4959d89c6b4
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=58c0b795-c845-4013-af57-5868bcd33946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:de:3d:6a:f2:86:bd:53:6d:5e:b3:f8:05:
                    25:e7:e5:89:fe:fe:18:00:c0:02:b4:4b:11:54:6d:
                    fa:70:02:46:56:65:bf:a4:a1:a5:65:2a:db:fe:c0:
                    5e:c2:84:aa:ca:4e:8f:d9:44:c4:f8:20:74:b1:b2:
                    3c:47:87:61:c1:7d:df:55:86:89:09:f1:47:ae:33:
                    f0:89:37:f3:37:78:b8:3e:cd:04:72:e4:f2:91:fc:
                    14:cb:1e:8d:ed:24:c9:08:e3:2b:58:69:aa:72:16:
                    fc:79:54:21:5f:fb:9b:47:6a:78:9b:69:74:b4:68:
                    2d:fc:6d:94:5e:02:95:94:56:c9:b4:ae:37:21:9c:
                    78:c5:aa:f0:34:36:47:21:57:30:6d:e6:21:3c:53:
                    1f:7a:83:72:03:cf:a9:a4:37:83:80:98:bf:8a:2b:
                    e2:74:21:69:b5:4f:45:f7:48:55:e1:5b:19:16:83:
                    bb:93:7d:5f:fa:2e:20:15:46:42:2c:9f:45:22:bf:
                    35:10:8e:bf:99:75:dc:d1:56:17:f3:38:80:c0:cd:
                    87:14:88:93:54:99:cb:1e:ec:99:3a:59:ff:93:9a:
                    7f:39:e8:91:4f:fe:81:81:0c:cd:9e:cd:26:15:7a:
                    a2:1c:41:3c:10:8b:55:38:31:11:b6:b0:40:b2:d1:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:16:E0:E5:1A:EF:2F:4C:BA:78:D1:8E:E3:82:C2:D0:36:55:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/cb26024d-0398-3c64-9131-807614c5aa15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:04:29:9c:89:b6:00:8a:f0:53:59:d4:02:16:60:81:ef:f7:
         84:2a:b2:54:6c:0a:bf:22:c4:69:c5:39:26:84:a4:7e:ce:ac:
         9c:87:7c:89:2d:f4:01:25:8e:7a:b0:69:87:20:b8:5f:92:c4:
         90:cb:91:94:aa:3a:99:98:ac:0b:1e:45:40:2c:d2:32:b5:82:
         1b:aa:7f:39:d8:3a:58:c2:23:ec:06:a5:42:73:7e:74:84:83:
         4c:ff:50:5c:ae:ef:3f:ac:2c:36:12:be:06:46:36:2f:22:ca:
         5d:ca:c1:6e:ec:25:d4:6d:b6:98:f7:96:c1:e2:86:fc:a2:5c:
         ed:c7:b0:77:cc:9d:85:73:d6:09:9e:07:9b:70:4e:b3:f0:ee:
         77:3c:b2:80:ce:52:15:40:a0:22:b5:dc:7b:d9:02:7a:2d:c9:
         a1:3e:b5:b6:36:6f:0f:10:3a:85:8a:af:b2:47:42:53:57:68:
         6f:e8:e1:8d:c2:32:b9:bc:8e:c8:2c:6e:37:d6:bf:9d:91:69:
         5f:2c:46:41:39:f4:af:da:ba:9b:a9:0a:c7:b6:9c:bd:13:42:
         8e:1b:1e:69:d1:ca:20:4f:80:ea:bf:36:40:9d:e1:79:d6:4a:
         c1:9f:a8:cf:6c:e8:e5:d7:3d:97:43:b4:f6:43:66:5a:ff:a0:
         77:12:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:12:05 2026 by rpki-client