Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/0a104528-9fd8-3f96-9da8-dba098354688.roa
File:                     0a104528-9fd8-3f96-9da8-dba098354688.roa (raw, json)
Hash identifier:          X/VGxWnXABe/HdociAuXZnih7RBQANjV237sXz5fYDY=
Subject key identifier:   BA:C2:C6:44:67:D1:23:58:99:16:E3:2F:B2:4C:B7:A0:B0:00:7E:1F
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584D83CA8FD07A69C5F896D7BD58
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/0a104528-9fd8-3f96-9da8-dba098354688.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     40934
IP address blocks:        159.48.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:8f:d0:7a:69:c5:f8:96:d7:bd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=c4f50b58-4ac8-4e0d-b7be-2dc9c64ecef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:de:76:aa:67:b6:5b:ae:a9:40:85:87:48:
                    8e:b9:cf:f9:d1:0f:0b:6a:f3:e1:f0:7c:62:97:9a:
                    8f:85:d6:a7:ac:38:3a:af:32:0c:68:6e:a7:c5:aa:
                    3b:5c:cc:83:f0:1e:44:bf:d8:57:a6:18:ff:f2:1b:
                    07:ec:4f:0e:71:b6:e6:ed:d9:c4:a6:fe:39:6a:26:
                    b9:88:66:b6:91:62:e7:ad:90:44:8d:89:81:a8:11:
                    80:2c:0e:0a:39:00:a1:61:ac:ee:11:ca:91:8d:b9:
                    08:87:f4:17:44:61:f4:e6:2f:bd:a7:67:22:64:84:
                    23:fe:f9:09:f5:3e:b1:c1:f4:d4:d2:ed:3f:01:7c:
                    e9:17:05:0e:7b:55:41:08:86:70:66:8a:4a:ab:a3:
                    70:0b:57:ba:07:56:9e:27:9f:18:79:9d:35:16:e8:
                    ff:f9:31:41:b7:1f:15:a6:91:d3:c4:d8:19:36:0a:
                    63:fe:41:84:d6:b4:86:59:20:48:33:e2:fa:41:ce:
                    71:b3:61:54:b2:81:4d:db:84:1c:9b:3a:af:03:6f:
                    df:c1:53:37:db:62:d3:29:82:77:d8:f9:e1:ef:3b:
                    3d:3d:27:70:f6:de:fc:4c:a3:0c:4b:88:c1:ba:ca:
                    be:73:3b:cd:d4:a6:5e:5a:3a:74:36:e0:1e:e3:17:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C2:C6:44:67:D1:23:58:99:16:E3:2F:B2:4C:B7:A0:B0:00:7E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/0a104528-9fd8-3f96-9da8-dba098354688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.48.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:85:f9:c9:c0:01:4d:0e:4f:06:9a:f9:28:09:69:97:26:
         4b:76:53:61:67:60:5e:7f:10:2b:bb:10:6c:f2:1a:5f:78:3e:
         38:3e:26:f9:3c:12:34:8a:40:c5:b0:e8:8c:6f:e8:cd:9a:2b:
         48:01:96:3f:06:c8:2f:e1:63:10:86:eb:b4:d3:c2:87:2d:0d:
         b0:ae:8a:38:dd:7d:19:a8:53:35:47:7f:6d:c4:a7:19:bd:64:
         63:a4:ab:9d:a3:98:06:b7:66:d2:41:f3:82:cd:e5:74:45:0b:
         3a:29:ad:ea:3d:b4:c6:ce:e3:4a:96:06:a8:13:37:a0:e1:4f:
         c1:6e:b8:63:b5:06:8c:26:13:3d:05:b7:17:dd:ec:d4:ba:29:
         56:b7:7c:0b:61:2d:96:1e:3b:eb:2e:53:31:5b:14:64:49:3f:
         93:9b:34:75:de:6f:04:f6:9d:d3:c0:f8:b1:61:f0:f6:fa:e1:
         91:a5:19:dd:41:fd:14:e3:78:bc:e0:1f:e2:3d:67:49:c1:d5:
         f3:59:74:ed:68:9c:dc:d3:1f:3b:bc:56:01:8e:3c:3c:d7:07:
         9e:3d:06:43:6d:aa:6b:c3:2b:aa:78:66:8c:03:e8:8c:60:23:
         a9:8b:38:36:dc:66:d4:f5:8e:97:4f:46:de:22:60:45:a7:11:
         50:cc:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:56 2026 by rpki-client