Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa
File:                     3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa (raw, json)
Hash identifier:          1HZKcqQBoFZMZCofzPZs93gNIbL14mrppqlhtStHoE8=
Subject key identifier:   FA:E7:8D:C3:14:09:21:02:4A:5D:A7:FE:83:D2:D0:50:F4:72:08:A0
Certificate issuer:       /CN=e96beed0-0beb-4387-bde4-56aa0782ae2c
Certificate serial:       010D0C9F4328584D8AC54A174F5CDB0B58E82C80
Authority key identifier: 08:E6:A0:B8:AF:1D:0E:39:34:3F:22:B9:3A:12:AD:B4:BF:67:81:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     36326
IP address blocks:        158.51.132.0/23 maxlen: 24
                          2602:fcd9::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:4a:17:4f:5c:db:0b:58:e8:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96beed0-0beb-4387-bde4-56aa0782ae2c
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=f961a925-d78a-43e4-83bc-6d69166901ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:13:85:95:53:16:0b:91:26:f0:bd:a2:d8:
                    e4:fa:0a:63:0c:fd:9d:96:00:13:ce:b6:1b:07:0b:
                    f6:ee:0a:d3:b1:02:c8:56:a2:20:29:6b:a0:08:60:
                    b3:d4:1d:b2:9d:76:4e:35:4b:48:ee:52:ec:27:87:
                    71:3f:9b:07:b9:34:70:2b:9d:9f:57:c7:4c:cf:63:
                    5e:ba:65:fa:6a:65:73:af:be:be:fb:d5:d1:8d:ac:
                    56:b3:67:0b:c0:0b:c0:c3:19:55:a7:a6:01:dd:c3:
                    a3:aa:f6:d2:af:96:6d:3e:48:e8:75:e5:1a:41:ff:
                    4c:55:8e:02:d5:2f:c8:98:8e:a0:08:10:fb:bf:85:
                    0d:74:7e:4e:b3:f9:b2:07:90:40:06:a0:51:72:80:
                    c1:d6:0a:bc:cf:60:a4:24:95:5b:02:31:88:bb:cf:
                    b2:24:49:9d:08:18:a5:7b:7a:f1:89:50:63:c6:dc:
                    75:8a:c4:d0:91:37:f7:8f:80:10:93:c0:e0:cb:8e:
                    56:e4:a5:62:40:6c:f0:5c:d0:93:36:42:9c:9a:6c:
                    18:70:9e:bc:e1:b4:9d:52:28:10:a4:a9:ba:19:5f:
                    9b:01:b1:d4:28:0c:31:48:9e:5d:c9:cd:13:1e:5a:
                    d9:98:46:ef:48:ba:cd:77:26:0f:9e:74:52:54:1b:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E7:8D:C3:14:09:21:02:4A:5D:A7:FE:83:D2:D0:50:F4:72:08:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.crl

            X509v3 Authority Key Identifier:
                keyid:08:E6:A0:B8:AF:1D:0E:39:34:3F:22:B9:3A:12:AD:B4:BF:67:81:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.132.0/23
                IPv6:
                  2602:fcd9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:ac:10:04:7e:d1:31:06:81:6f:36:ed:03:1d:d3:07:6f:1d:
         96:a9:fa:06:64:c8:b3:30:f9:a3:57:36:5f:53:0c:39:70:7d:
         27:78:6e:2d:8d:57:00:15:76:7c:ae:e1:63:64:ea:56:9f:78:
         1b:11:c2:db:04:b4:8c:4b:04:ac:6d:bd:74:d2:a2:05:2e:d1:
         8c:1f:fe:c0:3a:22:73:d8:7a:59:fc:91:10:2a:79:0c:df:5d:
         00:59:16:d0:70:88:2e:7a:5b:2e:38:59:f2:7e:0f:d9:6b:56:
         58:9c:b8:ce:7c:ca:6d:1a:2d:21:4d:bf:9d:2c:ae:51:ca:60:
         63:47:bf:ce:67:f5:2d:10:71:ba:e6:27:e5:c1:cd:05:28:e0:
         e2:6a:4c:74:e6:23:68:88:f5:96:cb:f2:d0:93:48:5d:aa:bb:
         32:74:17:55:a1:6d:18:af:24:c8:8e:3b:5b:9c:dd:28:e2:e0:
         ab:25:36:fc:52:1c:42:88:c4:ef:27:39:41:95:da:14:d6:25:
         cb:25:9a:4c:b5:13:df:01:d1:1f:cb:14:88:8e:07:e7:7e:53:
         4d:8e:83:12:b0:6b:ac:8d:f4:a3:6f:3d:97:f3:42:15:ca:a6:
         1c:3d:d0:08:35:e1:97:6d:34:fc:dd:fd:8e:47:c4:a4:e7:b5:
         e1:b4:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:18 2026 by rpki-client