Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa
File:                     fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa (raw, json)
Hash identifier:          6do07B0JRZVhr21CSLztUjS1hOjHTq/bzA5vjGQzqEc=
Subject key identifier:   2B:93:20:F3:50:07:CD:4A:9B:81:5B:77:1F:85:97:C6:4F:5D:30:84
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584D7CCFD714E48A552E6B237880
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     53407
IP address blocks:        158.120.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d7:14:e4:8a:55:2e:6b:23:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=3f5bf4e3-3be0-4f94-b23b-a9814500a71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:7e:06:aa:50:43:a1:3a:0f:bf:4d:5e:81:
                    d7:ba:5e:67:32:ea:8c:e6:a2:19:30:8e:94:82:d5:
                    e3:fe:3b:aa:ac:e3:60:29:b8:94:48:ab:a4:0d:10:
                    70:39:16:d8:2b:eb:a8:92:e7:37:e3:93:9a:b2:5d:
                    b5:da:db:f6:9c:48:02:01:91:7f:dd:76:7a:19:9c:
                    41:b3:7f:a2:d3:7a:7e:4c:44:cc:1f:07:f3:80:5f:
                    b5:02:79:63:d9:3b:d4:88:a1:13:7a:92:1b:bc:26:
                    9b:e4:f5:65:56:2d:ed:30:be:d4:03:6a:2b:cd:33:
                    eb:00:13:ee:ad:eb:8e:0f:e7:c1:7b:22:51:aa:38:
                    e0:9d:fd:95:3b:1f:55:74:e6:17:de:a7:f9:55:d0:
                    29:90:ac:3f:84:ad:e8:c0:7d:4a:36:7c:d5:13:75:
                    28:47:98:90:0d:6b:27:59:ab:93:e5:2e:d2:26:47:
                    d2:ac:f3:69:ae:f2:a4:da:ac:a3:36:e4:b4:62:c5:
                    e1:2f:ae:4b:66:bf:7a:c7:2f:50:e7:32:a6:f8:70:
                    22:5a:52:b4:a5:d3:8e:4f:3c:04:3b:bc:83:0a:30:
                    f0:8c:be:6c:07:1e:42:47:0c:00:ca:be:fd:39:ca:
                    6e:18:0b:eb:91:28:11:54:bb:2c:09:92:ce:61:d3:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:93:20:F3:50:07:CD:4A:9B:81:5B:77:1F:85:97:C6:4F:5D:30:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:01:50:de:0f:f9:41:90:9a:c8:06:07:94:45:9e:60:f1:25:
         ed:90:9b:57:51:c6:e0:7b:e2:71:d4:ff:72:7e:ba:98:25:93:
         09:1c:7e:e6:d3:68:f8:36:3d:31:63:81:76:0a:be:36:cb:72:
         6f:f8:a8:4d:d0:9d:08:c2:87:f9:96:dd:0c:f6:cd:4d:5f:2b:
         90:55:13:ea:c1:60:7a:9b:46:b7:0d:ae:6b:5e:44:c8:86:2a:
         fd:39:6a:6f:72:0d:83:19:2d:1c:e7:03:2c:6b:b9:82:18:3d:
         9d:fe:56:ad:bc:51:83:a7:fe:db:e9:68:e9:8e:97:53:e2:cd:
         09:46:49:c4:27:3f:2f:23:66:98:c3:71:39:db:d6:3a:73:3b:
         db:15:ef:40:86:74:a9:ce:81:aa:5a:1e:da:1b:ea:5c:09:4d:
         5d:c6:27:5b:a1:00:1c:f1:6f:ea:62:65:d8:7c:80:ac:59:60:
         2d:d8:c0:10:b6:95:3c:c7:eb:bf:31:c6:d7:79:e1:14:d7:5a:
         1e:1d:ce:ef:5a:6f:37:3a:ee:73:0a:df:d9:6b:c2:bb:2e:b3:
         e2:a0:ca:00:63:01:48:47:9a:6e:fa:af:b2:2d:05:a2:02:76:
         a9:d4:9b:5a:93:09:36:80:11:a9:d3:cd:23:4b:da:dc:15:f4:
         76:cc:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:25 2026 by rpki-client