Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/e2d234f6-07f9-30e8-8869-9fa18c7bdca0.roa
File:                     e2d234f6-07f9-30e8-8869-9fa18c7bdca0.roa (raw, json)
Hash identifier:          JNMKZtzgruY5P6RGDlrJ8cWc43TOi72yX0MZdRkbp/M=
Subject key identifier:   A6:17:B5:FD:25:DB:AF:30:37:A9:FC:2E:E5:30:1C:20:59:C6:8E:B3
Certificate issuer:       /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial:       010D0C9F4328584F00DCBF815B911DA4D4880780
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/e2d234f6-07f9-30e8-8869-9fa18c7bdca0.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        158.51.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:bf:81:5b:91:1d:a4:d4:88:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=a74ff03b-d001-4c71-81b2-aea0f9e4b1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:74:3e:2b:3c:7a:cd:06:09:b6:d9:e5:3b:
                    c2:20:fe:61:8f:01:a3:3f:fd:8a:42:ad:54:1c:2d:
                    ab:29:14:70:a0:9d:c3:7f:f5:fb:57:a7:dd:9e:98:
                    83:bd:fb:ad:e0:15:d8:87:4e:ca:ce:92:f8:60:9b:
                    00:07:4f:fd:66:6a:c5:8a:ce:21:37:ba:cf:d1:d8:
                    84:f7:6d:21:c3:f7:49:09:bc:bd:1f:ee:8a:8f:f3:
                    53:35:6f:c2:7a:03:91:3f:17:11:41:ad:85:34:26:
                    ed:6d:57:b6:a1:c6:9b:a7:1d:43:0c:9c:87:f0:2c:
                    d8:7f:4e:87:fd:25:03:69:ce:59:d7:60:6c:30:32:
                    77:3f:61:35:ba:64:aa:04:53:93:cc:d8:de:32:70:
                    10:b2:26:7d:78:75:69:4b:d7:40:4d:d5:82:03:59:
                    6c:59:4b:ef:a3:6d:00:53:23:c7:c3:f6:a3:59:13:
                    e5:db:1e:1c:c3:73:d0:57:a2:d5:ca:49:34:53:45:
                    ad:13:4a:bc:00:9c:a2:d6:b6:73:ca:be:ea:64:ad:
                    e2:02:96:8d:31:ae:e5:4a:f5:d5:1e:7c:8a:b0:a8:
                    e8:32:15:1b:c8:22:05:af:b9:60:b1:34:34:d1:06:
                    60:52:09:28:89:31:be:2b:51:27:c1:d2:02:f1:38:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:17:B5:FD:25:DB:AF:30:37:A9:FC:2E:E5:30:1C:20:59:C6:8E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/e2d234f6-07f9-30e8-8869-9fa18c7bdca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl

            X509v3 Authority Key Identifier:
                keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:40:5b:32:68:a6:aa:60:dd:39:68:b7:28:73:08:7b:25:
         24:0c:cf:f1:75:cb:18:34:4e:36:fc:5a:ea:79:96:22:17:0e:
         78:65:6e:65:42:fb:90:e8:ca:cd:d0:32:bc:34:57:c2:2c:42:
         08:ce:83:36:2c:b2:6e:3e:0c:2f:7e:64:3e:fa:3d:56:c3:21:
         68:43:f4:3b:be:68:d2:ef:dd:04:01:6e:1c:79:8c:45:06:26:
         31:9b:18:cc:1d:9c:e2:a2:ca:a4:a4:f8:27:46:fd:b6:9f:8a:
         2e:aa:a6:7c:1f:2c:cb:78:2b:2c:af:43:56:7b:93:0d:d3:e9:
         3a:ce:04:0d:e5:a8:26:c8:ff:22:ce:b7:7c:ef:d5:c6:4f:b2:
         09:c0:d3:6d:b0:28:14:28:54:5a:df:a0:c3:fc:66:46:0a:bb:
         0f:77:a1:81:2e:0f:06:64:bf:8c:7c:32:b8:60:4f:9a:37:65:
         3b:a7:e7:10:9b:f8:61:0b:f3:de:e8:e2:76:63:38:79:0e:35:
         96:a4:b1:15:8b:46:52:e7:51:0b:e7:08:25:5a:7c:ff:f6:80:
         ea:b2:b7:70:e3:38:01:f4:b0:44:cc:e8:b9:47:1d:db:b9:20:
         96:8c:d4:91:b8:31:6c:ca:db:43:7a:6d:cb:97:45:c1:1c:37:
         8e:e8:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:44:19 2026 by rpki-client