Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/020f61b4-5238-3133-aa05-501f9fb5d462.roa
File:                     020f61b4-5238-3133-aa05-501f9fb5d462.roa (raw, json)
Hash identifier:          FfZ2P1l8TwEjmHcydWdd6UhsmDXx/E788NVa1k4s3sA=
Subject key identifier:   ED:68:C0:AD:8A:5F:CD:AA:1A:5F:F4:1B:39:CA:48:3F:32:D7:0A:9F
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584AB1AA085A2600C5445A276500
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/020f61b4-5238-3133-aa05-501f9fb5d462.roa
Signing time:             Mon 14 Jul 2025 13:51:32 +0000
ROA not before:           Mon 14 Jul 2025 13:51:32 +0000
ROA not after:            Sun 12 Oct 2025 13:51:32 +0000
asID:                     14618
IP address blocks:        159.26.144.0/24 maxlen: 24
                          159.26.145.0/24 maxlen: 24
                          159.26.148.0/24 maxlen: 24
                          159.26.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b1:aa:08:5a:26:00:c5:44:5a:27:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jul 14 13:51:32 2025 GMT
            Not After : Oct 12 13:51:32 2025 GMT
        Subject: CN=6ea46a55-0664-46f7-b0d3-6103ee61e3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:ec:ac:49:cd:a5:2b:4f:53:3f:5d:0f:f3:
                    48:08:18:67:e8:f6:30:65:53:11:bd:e3:5e:4d:c6:
                    e1:bf:07:c2:e6:70:89:ec:e4:65:fc:ad:5b:8f:72:
                    85:62:a5:f6:c5:6a:b6:12:5a:f3:74:29:e8:92:de:
                    60:26:f9:e2:b2:25:ed:a3:b4:47:b9:d5:81:49:39:
                    42:b6:45:18:aa:e9:7b:89:84:76:b5:0d:d5:7b:2b:
                    85:5e:d3:a1:0c:ed:77:dd:dc:e0:72:52:91:e2:5d:
                    86:34:85:d2:a4:21:5c:16:d6:a6:95:c7:34:be:86:
                    5e:44:c7:16:92:14:a3:e8:00:91:bd:2f:40:16:42:
                    00:45:7d:19:7d:eb:3f:c7:2d:12:4f:04:81:48:23:
                    73:5a:5f:9e:b2:79:61:93:50:71:99:29:31:ad:3d:
                    5e:3d:72:10:cd:fb:1e:ac:0b:90:0c:32:6f:a5:f1:
                    e8:0e:47:b5:31:80:fc:38:b6:bb:c8:6d:79:e1:5f:
                    98:34:e4:a7:50:5e:4a:5a:a4:75:cb:ac:4a:38:c7:
                    88:d8:fc:5e:3f:37:c4:06:dc:2d:33:4b:16:e1:4a:
                    33:9f:15:2c:1b:b0:16:d8:f7:b7:c3:a5:39:01:3e:
                    6f:bb:f6:dd:9d:26:7f:f9:cb:45:82:00:d2:f7:51:
                    06:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:68:C0:AD:8A:5F:CD:AA:1A:5F:F4:1B:39:CA:48:3F:32:D7:0A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/020f61b4-5238-3133-aa05-501f9fb5d462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.26.144.0/23
                  159.26.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:67:81:2e:8b:b2:f0:6a:a5:18:59:94:89:16:d4:d3:e7:37:
         d3:f4:7f:a3:1c:a2:a4:88:69:fb:d4:80:3a:dc:f4:df:91:6f:
         ea:49:93:4d:60:e6:fb:cf:46:3a:3e:4d:75:5c:20:32:91:bb:
         3a:88:29:03:2e:45:67:18:eb:5e:09:9b:96:be:d8:2d:73:60:
         07:b2:df:a9:67:d0:2c:7d:00:e1:2c:be:c1:b8:43:e3:6f:ac:
         ea:4a:b2:8a:49:7e:5a:9d:7d:05:60:a2:7c:38:d5:23:60:e0:
         24:cd:28:15:7f:06:bf:97:f8:e7:3d:49:99:4a:66:71:f0:98:
         65:54:55:47:0f:5c:95:7e:f1:d6:93:bc:01:a2:35:fd:45:11:
         26:6b:50:db:7e:e2:a8:15:45:fa:0f:de:3e:93:f0:10:7a:cd:
         86:22:d8:4b:b7:60:41:6d:5c:84:a5:b5:ac:ab:43:bd:45:24:
         eb:9a:e9:3f:69:10:2a:fe:90:f8:53:b8:dd:83:3e:4f:97:11:
         fa:6a:86:22:cd:bc:47:f7:16:31:fa:f4:e3:f2:84:6b:b7:6a:
         90:de:36:43:ca:3d:0e:10:92:1e:0d:96:6f:a7:3b:b4:c8:d3:
         ce:27:9e:d0:bc:41:40:ab:93:dc:97:1a:c5:a5:a5:d6:ec:72:
         76:6c:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:25 2025 by rpki-client