Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/11fcf488-56c3-38f1-a544-3bbab76f8974.roa
File:                     11fcf488-56c3-38f1-a544-3bbab76f8974.roa (raw, json)
Hash identifier:          KgJB/eEKU0wr+fQg6uH+R9Gt46GXBqMP/mo+XSfBPlc=
Subject key identifier:   AC:C7:B9:99:13:0C:F9:07:A3:36:6D:B8:F0:08:8B:F5:1A:6E:67:47
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584E059C75CF86C93F9820CF4CA0
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/11fcf488-56c3-38f1-a544-3bbab76f8974.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     16509
IP address blocks:        159.26.144.0/24 maxlen: 24
                          159.26.145.0/24 maxlen: 24
                          159.26.146.0/24 maxlen: 24
                          159.26.147.0/24 maxlen: 24
                          159.26.148.0/24 maxlen: 24
                          159.26.149.0/24 maxlen: 24
                          159.26.150.0/24 maxlen: 24
                          159.26.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:75:cf:86:c9:3f:98:20:cf:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=9a82072f-0aef-4196-b3f7-3028e01145eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:19:b9:b3:47:d4:0a:b4:6f:25:fd:ce:a2:
                    c5:8a:92:2d:3c:d5:d8:a2:a6:0d:b0:02:c4:61:b8:
                    03:08:b9:21:b7:69:3f:c6:af:b2:06:5a:37:c0:73:
                    03:d4:1c:a6:b8:fe:4c:3a:1b:9f:13:79:73:1f:5e:
                    7c:2d:98:e2:0a:84:c4:d2:2a:d7:e5:1b:60:cc:f5:
                    4a:b3:a0:b0:1f:69:7e:fc:27:a7:b9:70:8c:66:38:
                    1f:d3:c1:90:27:92:93:a0:28:86:e9:ac:cc:84:5e:
                    70:91:a8:b5:ba:3d:8d:09:d6:ac:63:63:fa:c7:a2:
                    33:19:8e:62:96:ff:64:13:0a:24:57:68:61:fa:d6:
                    b9:e8:c2:27:9e:9a:09:ff:f6:4e:fe:57:22:3a:e7:
                    77:76:c7:ce:ad:ce:91:2e:98:fa:2e:f6:d7:12:fe:
                    06:42:56:b1:7f:a1:b1:62:6d:45:de:e6:50:63:58:
                    96:1a:41:b2:34:e0:84:af:20:42:e6:c5:02:ec:30:
                    ba:c2:fe:65:98:aa:28:43:d5:f4:11:60:34:c7:86:
                    b3:5b:16:82:35:de:b9:a3:33:ec:4d:be:cd:8d:5e:
                    f4:9e:f2:63:20:56:af:c7:f9:76:82:77:8d:77:20:
                    9a:d2:b0:67:41:1e:83:58:a1:bc:53:60:ce:fb:11:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:B9:99:13:0C:F9:07:A3:36:6D:B8:F0:08:8B:F5:1A:6E:67:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/11fcf488-56c3-38f1-a544-3bbab76f8974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.26.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b4:89:58:49:7b:56:55:26:78:d6:a1:98:0e:68:df:73:52:
         26:6b:4d:6d:40:a2:09:8f:57:c9:bd:db:da:69:ae:b7:50:3c:
         8d:c5:f9:99:d3:5e:d6:8e:a5:bc:a1:2f:9f:0f:54:bb:9a:e0:
         3d:98:c2:27:af:8e:54:5e:d4:f1:67:df:64:40:d7:d5:aa:de:
         af:47:1c:39:96:51:55:aa:51:e7:37:a5:cf:28:49:1b:45:ef:
         48:19:77:e6:a3:a8:35:d7:d6:6e:09:2c:60:fb:67:04:ef:a7:
         0b:46:fd:49:64:ed:61:92:75:f2:50:16:38:2e:3b:a4:98:aa:
         73:20:be:6d:87:0a:63:b5:08:70:97:e3:b8:27:ad:20:8b:fb:
         1d:13:b3:4e:1b:b4:e4:19:c9:b6:0f:3e:fe:f5:cc:b6:f3:78:
         3c:a6:c8:e2:7d:61:c5:18:45:0b:12:ca:d3:96:28:55:86:af:
         fb:46:31:31:7d:11:39:9a:63:18:de:d0:7e:b4:42:be:a3:35:
         09:f2:8f:a3:cc:7a:fe:40:d1:67:b3:8c:5d:2c:4e:34:3d:c6:
         78:02:92:25:b0:8a:ff:32:c2:f6:6a:5c:e4:50:60:5c:de:89:
         bf:51:09:20:78:8a:14:34:4c:50:bf:ee:3a:d5:0c:83:8a:20:
         9d:fb:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:27 2026 by rpki-client