Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/03512856-e52d-39f0-bc97-30b64a18aef4.roa
File:                     03512856-e52d-39f0-bc97-30b64a18aef4.roa (raw, json)
Hash identifier:          uxypERLvQrH+pHhVzPPt0B/LN7qb8UuTLahd23qpdX0=
Subject key identifier:   31:78:53:69:3D:50:EE:2B:6D:29:96:CC:9B:E6:67:00:FC:8F:99:8F
Certificate issuer:       /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
Certificate serial:       010D0C9F4328584F07D774A954396B478438E280
Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/03512856-e52d-39f0-bc97-30b64a18aef4.roa
Signing time:             Tue 01 Sep 2026 13:00:12 +0000
ROA not before:           Tue 01 Sep 2026 13:00:12 +0000
ROA not after:            Mon 30 Nov 2026 14:00:12 +0000
asID:                     30041
IP address blocks:        158.51.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:d7:74:a9:54:39:6b:47:84:38:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
        Validity
            Not Before: Sep  1 13:00:12 2026 GMT
            Not After : Nov 30 14:00:12 2026 GMT
        Subject: CN=ec6fe91d-bcc3-4498-a832-cd5779439300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:47:34:68:fb:db:fc:47:70:f3:b3:e3:79:
                    e4:0f:02:75:0f:cd:35:de:48:25:12:ef:c8:b7:7a:
                    56:ce:5b:7c:63:00:49:15:07:93:79:ec:f0:ce:31:
                    90:47:32:8f:59:b7:01:c1:99:61:24:c7:e9:44:21:
                    cb:d1:40:f4:b4:4a:96:fd:b1:bd:13:c5:fc:27:8e:
                    a2:7b:5c:a5:4e:88:02:9d:71:66:da:3a:79:d5:c1:
                    6b:6b:3f:12:b1:45:74:bb:71:f0:80:61:0a:62:74:
                    70:15:ff:de:eb:a5:db:19:f2:7f:7e:b7:ed:eb:4e:
                    e7:7b:0f:a8:bb:38:46:93:31:42:8a:21:2d:86:31:
                    c0:59:d3:c5:ca:60:ca:b0:5b:5b:c3:71:c0:69:d8:
                    ba:40:fb:2d:63:d1:ff:47:1f:62:e0:ef:e2:00:39:
                    d3:a6:82:19:b9:16:3f:fb:17:06:af:cd:32:9a:c0:
                    2f:a1:10:96:c6:0e:9c:7b:ec:b4:f3:69:46:e9:ab:
                    8d:d8:da:63:7a:69:7a:47:7f:c8:63:b8:8b:2f:cd:
                    92:68:f6:e2:f7:a4:25:c8:58:5a:e3:d9:f5:f0:a1:
                    e7:34:b9:4a:d9:71:7b:45:b7:3a:8d:2b:9b:2d:05:
                    bf:6e:5f:7e:83:46:60:d3:9c:ce:40:f1:83:25:c6:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:53:69:3D:50:EE:2B:6D:29:96:CC:9B:E6:67:00:FC:8F:99:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/03512856-e52d-39f0-bc97-30b64a18aef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl

            X509v3 Authority Key Identifier:
                keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:19:bf:d4:81:df:c4:f9:b8:00:a1:3d:66:f7:4f:f6:5a:82:
         5b:7c:8a:fd:81:58:81:6a:00:5c:94:9f:dc:69:b2:39:6b:24:
         64:fc:76:05:0e:a8:69:3e:0f:1b:23:fb:f5:17:f5:65:ac:05:
         72:a3:8e:ff:79:f5:63:65:66:6a:b6:87:c3:c4:ce:c2:f5:50:
         ed:93:51:ee:4c:8a:67:24:c3:88:91:d3:4d:cb:0e:50:9e:84:
         69:3c:e4:47:f1:50:41:d3:69:2b:02:19:5f:0b:d2:21:55:0d:
         bf:3a:52:53:5a:d3:71:3b:64:cc:e9:ee:7a:7b:29:2a:45:a0:
         17:f7:2c:8f:99:37:9a:b4:73:19:2b:2c:d7:2b:00:b6:3e:6f:
         1a:fc:ad:e1:7f:dc:f0:9f:e4:f5:6a:9f:6c:34:55:69:de:a8:
         0b:5d:1c:ec:f2:e8:78:bc:eb:19:a2:47:c5:69:98:dd:b0:3a:
         ea:fd:e6:c3:54:6b:5f:e8:e5:50:79:24:3e:7c:97:cc:7a:78:
         fd:2a:9f:6d:29:ee:c2:c5:a2:d3:ee:01:b0:a9:87:cd:f9:a7:
         5f:0c:86:6e:e0:ef:55:4f:56:7f:c7:a3:2b:a2:3d:61:0b:1e:
         10:c3:4c:cc:c7:e8:39:24:97:9c:c8:7e:14:b9:79:d8:0c:6c:
         21:0e:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:40:52 2026 by rpki-client