Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/79085a12-1642-3f55-944b-46308ebabf6c.roa
File:                     79085a12-1642-3f55-944b-46308ebabf6c.roa (raw, json)
Hash identifier:          e06FT7bN0OKJvCtUZ+rjahR/kgDfVbDdebX61ir4GA8=
Subject key identifier:   4B:EA:85:A7:D2:14:79:BD:22:B9:98:00:F0:A8:81:0A:B2:33:E5:FF
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584D55BA4B01379F95A7DF283D80
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/79085a12-1642-3f55-944b-46308ebabf6c.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        160.153.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:4b:01:37:9f:95:a7:df:28:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=36da5ee8-0d6d-45fc-9ee5-38a663ba899b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:80:80:98:60:7b:d9:91:5b:0d:6d:96:0a:
                    49:50:2d:37:77:2c:dd:2e:a0:49:d3:2c:fb:6a:2b:
                    6a:6d:47:7c:1a:b2:96:c3:a2:93:ed:6e:d2:4d:98:
                    79:54:2d:fe:b9:57:bb:a4:8c:2b:df:a4:7c:d5:4d:
                    98:65:e0:ad:27:a7:44:26:53:49:b7:92:fd:86:e2:
                    65:49:1c:b6:d8:ba:be:06:9a:2c:ab:55:1b:d9:08:
                    ee:f5:cb:87:1d:f2:b6:c1:e8:23:27:4c:18:ad:fe:
                    df:30:03:24:45:81:6b:12:c8:e1:aa:2f:cf:2e:a2:
                    91:77:75:7a:38:05:94:0a:bd:4a:be:66:2c:7f:5e:
                    05:20:c5:87:16:78:20:dc:83:fc:5a:36:d1:30:2c:
                    b6:e2:0d:9f:91:7c:04:a6:0d:f0:4d:4c:e7:03:cd:
                    99:fc:54:7b:da:2b:0a:85:e6:de:2a:88:dc:44:96:
                    5b:96:51:03:6c:84:ac:5a:dd:86:8b:0e:60:44:30:
                    06:cc:06:c0:da:3f:5d:1f:e7:16:43:dd:d8:80:66:
                    76:40:9c:92:16:73:16:44:c6:c7:7c:f3:62:a4:06:
                    fe:0c:f1:c9:43:e9:0e:98:93:84:42:a5:3a:63:0e:
                    14:75:8e:85:21:09:9e:dc:34:04:e1:ee:09:17:c9:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EA:85:A7:D2:14:79:BD:22:B9:98:00:F0:A8:81:0A:B2:33:E5:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/79085a12-1642-3f55-944b-46308ebabf6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.153.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:34:9e:ea:95:90:de:d5:8e:59:fb:81:52:6b:70:8c:eb:
         b4:28:d9:5c:e8:16:1f:74:7b:8b:df:74:fd:61:6f:96:71:a7:
         e0:a2:89:e3:43:eb:0c:7d:f6:33:3b:8e:69:b0:62:a1:2e:1a:
         40:7a:c9:3c:dc:b3:2e:22:8c:3d:eb:3b:06:56:e6:21:60:b6:
         16:85:1a:ad:bb:09:66:d8:96:28:e4:df:ae:35:72:e0:28:ee:
         29:e0:dc:ac:07:42:ac:23:1c:fa:cf:98:6f:87:11:3f:fa:35:
         98:b4:d2:92:42:a8:71:61:35:6e:aa:5e:2e:20:d7:be:44:f8:
         a4:21:d5:8f:05:37:8a:15:46:ba:42:c1:84:28:ce:17:2a:99:
         e8:bd:6c:d9:0d:b3:fe:60:fd:f3:b6:5a:1e:90:6e:7b:e7:e4:
         82:cb:aa:ed:64:62:53:8b:7f:2f:52:70:c8:ed:ef:02:31:e4:
         07:c3:75:23:d0:f6:6b:05:32:d7:f9:5f:30:43:39:76:2f:c5:
         28:70:83:66:f1:d4:b6:42:66:1e:65:25:a3:be:e0:85:38:aa:
         99:5e:12:54:d2:a0:f5:6a:e5:24:2e:bf:35:70:00:19:22:f1:
         7f:a1:4c:5d:6b:22:de:ba:1d:20:cb:8b:c2:8a:f2:18:d3:f8:
         09:67:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:55 2026 by rpki-client