Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9aa9455c-184b-387c-99ed-a22c51138362.roa
File:                     9aa9455c-184b-387c-99ed-a22c51138362.roa (raw, json)
Hash identifier:          6wdTmaa32NtdO7jWWhOJFbf1GVKOraXfuvJ7nCLU96s=
Subject key identifier:   88:6E:17:85:5A:2A:5C:24:0E:AD:0C:B6:24:5E:03:D0:99:BE:D4:64
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D80807DC28A647C4A093611A0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9aa9455c-184b-387c-99ed-a22c51138362.roa
Signing time:             Tue 14 Apr 2026 08:43:56 +0000
ROA not before:           Tue 14 Apr 2026 08:43:56 +0000
ROA not after:            Mon 13 Jul 2026 08:43:56 +0000
asID:                     29752
IP address blocks:        107.151.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:80:7d:c2:8a:64:7c:4a:09:36:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 14 08:43:56 2026 GMT
            Not After : Jul 13 08:43:56 2026 GMT
        Subject: CN=05d9a3f0-8a86-476c-88cf-a72044434fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:be:24:fa:4a:57:57:41:72:60:d2:63:78:
                    bc:5e:47:67:cf:9e:6e:82:91:1f:16:20:64:9d:7b:
                    4a:62:1a:6b:fb:30:a4:9e:9d:b8:0a:cb:28:e7:b3:
                    96:e9:24:61:20:49:3a:28:08:8f:d9:4d:cb:08:2e:
                    ea:dd:62:c0:c1:30:52:55:5b:15:1f:98:7c:14:30:
                    9a:d9:30:47:92:a6:12:b6:fb:33:70:1b:54:47:71:
                    04:ad:a0:42:a6:98:99:2e:e7:8c:71:4a:3f:d3:e8:
                    69:ed:c0:80:47:d5:b2:db:ae:da:86:44:0b:33:80:
                    d0:23:a4:67:6b:ee:8d:f1:1a:8c:28:78:71:94:05:
                    f8:5b:b3:bb:4c:c0:83:ca:3a:05:b7:8d:20:d2:21:
                    3d:0b:95:e2:cb:08:3a:a4:98:11:b4:04:86:d3:e7:
                    32:a1:5d:9d:92:b2:eb:a5:60:8c:54:77:87:44:0f:
                    72:65:d9:84:6c:b3:82:06:90:7c:d7:dd:6f:89:29:
                    c9:0d:f9:78:86:0d:09:e7:31:67:ce:70:ca:ed:7a:
                    0f:0e:d8:b3:a4:b2:2e:4e:99:80:f3:8d:4b:ab:d2:
                    40:5e:ed:2a:6d:06:22:02:7b:da:a2:53:6a:9a:c9:
                    7d:9f:a7:79:fb:d9:8d:11:76:a7:91:09:7c:7d:fe:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:17:85:5A:2A:5C:24:0E:AD:0C:B6:24:5E:03:D0:99:BE:D4:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9aa9455c-184b-387c-99ed-a22c51138362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:22:eb:fc:dc:c8:ce:07:56:3d:cd:fd:c9:37:58:71:4d:
         cd:4b:dc:5a:7f:95:80:72:58:5e:d2:ed:d2:d8:16:dd:24:2f:
         8c:9d:ba:48:44:3e:59:9e:fc:62:f5:76:e2:5d:22:7a:f3:50:
         9c:c4:e3:6a:ad:e4:23:66:c9:a7:20:1d:46:d7:5f:8b:2f:53:
         cc:9b:4f:cf:d9:fb:02:a3:8f:c4:e3:b2:86:fd:7e:22:6e:66:
         71:62:c0:78:0f:03:f0:06:6d:95:5b:22:dc:4c:56:2a:6e:46:
         a5:7d:64:88:73:10:60:fc:68:9a:4a:a4:bc:8f:c1:4d:ce:a4:
         c9:9a:47:00:8b:de:10:8e:49:e5:94:35:c0:e9:45:88:97:4d:
         49:01:e4:cc:41:0f:a1:97:ed:9d:bf:3d:eb:52:7f:e5:ca:f4:
         7d:1b:23:f6:f3:e7:d5:39:42:2d:8e:02:70:18:13:39:56:2e:
         dd:7f:f7:c1:33:61:00:5a:11:50:8d:f7:a7:b2:2e:28:09:34:
         6c:b3:f2:a1:f1:1a:9e:4e:ff:b1:12:d2:3d:d5:a7:45:5a:00:
         a4:cb:66:be:dc:92:25:d0:93:a1:56:b4:ee:f3:eb:d5:aa:a1:
         5f:da:aa:73:79:dc:d7:28:08:a6:cf:b2:5e:fe:a1:16:8e:2e:
         e6:44:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:21 2026 by rpki-client