Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa
File:                     c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa (raw, json)
Hash identifier:          IOS1TPoN6p+Tw1ExTcM80RkNQaTq8sjt1JY/cD6AEgA=
Subject key identifier:   EE:69:A7:9D:7F:5D:93:26:28:9A:01:EE:F7:01:AE:7E:A6:F6:E1:F5
Certificate issuer:       /CN=3767dced-4e89-4965-b8de-50e421201b4d
Certificate serial:       010D0C9F4328584DE84B37DB1ABA6E2F8BE46C80
Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     11602
IP address blocks:        151.159.0.0/17 maxlen: 24
                          151.159.128.0/18 maxlen: 24
                          151.159.192.0/20 maxlen: 24
                          151.159.208.0/21 maxlen: 24
                          151.159.216.0/22 maxlen: 24
                          151.159.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:37:db:1a:ba:6e:2f:8b:e4:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=9ee2a42e-dcc6-485a-a2fd-63e50cfc50a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5c:99:08:b5:84:85:ec:a3:50:a0:28:a7:5c:
                    ed:55:00:5a:59:df:58:12:10:65:b5:25:4f:b2:45:
                    52:0b:f8:e7:6b:9d:a6:27:78:2c:b0:a8:64:38:e7:
                    09:d8:bc:03:fe:ea:d9:d7:26:12:7d:89:86:24:6e:
                    7a:6a:4e:47:85:a4:bb:25:9f:0d:f4:c5:b5:75:03:
                    69:2b:7c:61:f5:7d:bf:37:3e:a9:5f:04:5a:83:d2:
                    d7:b9:9f:da:45:33:cc:ca:30:05:a6:6b:cd:ef:0e:
                    d0:72:a4:49:b5:f7:b9:60:e1:78:eb:06:6a:3d:a9:
                    f7:a9:e9:56:ad:7d:28:84:26:ee:5f:16:44:a8:8d:
                    9b:6e:1c:7b:db:ff:24:e1:ef:88:9f:f9:58:dd:ef:
                    5c:5e:7b:f4:66:95:ef:ed:cb:f4:d6:3d:e6:2d:c5:
                    2f:b8:d4:a0:25:3f:0e:5b:86:e4:f5:b1:d5:79:88:
                    4e:dd:65:a2:95:2e:ea:04:10:80:32:ab:f3:2b:53:
                    9d:ff:bd:ad:62:15:5b:a9:25:4f:5f:e0:4f:05:01:
                    ce:4c:b2:00:c5:04:e5:ee:5c:d0:0d:5b:f8:2d:ee:
                    85:89:98:5b:8e:46:11:27:48:4d:cf:dc:ca:d6:a3:
                    b4:60:e1:b9:d1:5a:68:6e:d4:24:e2:8f:79:96:69:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:69:A7:9D:7F:5D:93:26:28:9A:01:EE:F7:01:AE:7E:A6:F6:E1:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl

            X509v3 Authority Key Identifier:
                keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.159.0.0-151.159.219.255
                  151.159.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5d:b5:dd:d0:b7:99:fa:50:bd:b6:34:f5:e4:85:bf:4f:f1:
         b5:99:97:fb:1f:b8:87:07:36:78:d7:19:66:28:30:2b:38:14:
         3e:97:02:02:37:4b:e1:5e:78:ac:5e:d1:95:cf:6b:d3:6f:18:
         fd:39:d2:63:39:33:4f:6d:7f:7c:2a:4a:3c:58:ec:e6:b2:1d:
         68:56:a0:e8:c0:ce:4d:b2:40:a6:e6:43:ce:8e:e0:e8:c1:0d:
         42:ad:c4:e2:98:3e:8f:a5:c3:a9:e1:1f:39:54:30:ff:87:18:
         0e:b0:af:38:10:72:f4:51:fb:1c:3a:dc:b3:be:e3:c8:72:e1:
         23:98:d6:b5:65:78:6b:76:7a:a7:e5:ce:d6:47:62:13:d9:24:
         eb:f4:f9:42:d7:d0:e4:81:41:cf:f6:53:d8:c9:25:01:7a:59:
         d2:55:88:c8:f0:82:b5:3a:7e:b9:40:e0:9f:90:74:7e:74:ee:
         9d:bb:80:b4:ae:56:0e:2d:20:36:12:f7:48:15:dc:fc:79:84:
         c6:3b:f8:10:5b:b3:50:91:3d:52:7b:88:4c:73:c8:d7:49:20:
         90:6d:c6:55:23:b8:68:ef:86:f1:cc:04:5b:d9:2e:45:d9:3c:
         7c:55:f3:09:8d:15:77:87:30:f1:e7:1c:24:97:f4:aa:77:1a:
         6f:af:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:56:03 2026 by rpki-client