Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/211fd89e-7f84-3f89-953c-6dfee705d4fc.roa
File:                     211fd89e-7f84-3f89-953c-6dfee705d4fc.roa (raw, json)
Hash identifier:          qWiVXCW3ZoslT90bomd3DS4bSUTcqRdpkW5l7K2Ub0o=
Subject key identifier:   D4:D6:8C:BA:69:0A:3A:06:FC:7D:59:FD:D3:65:0E:77:C1:09:96:C2
Certificate issuer:       /CN=4241fd4f-7ca1-4822-8ae9-684d75b05110
Certificate serial:       010D0C9F4328584F20F79EDF7CA76661BEFAB940
Authority key identifier: B9:E3:F7:30:C7:2B:E0:44:26:25:D5:9F:CD:4B:BB:D8:0F:03:E8:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/211fd89e-7f84-3f89-953c-6dfee705d4fc.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     398206
IP address blocks:        158.51.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:9e:df:7c:a7:66:61:be:fa:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4241fd4f-7ca1-4822-8ae9-684d75b05110
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=596164d7-fa9e-4f52-9cea-6c50650e9587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:44:eb:80:f6:07:cf:94:fd:2d:d9:80:51:
                    af:74:6c:bc:3b:c3:35:d2:b9:68:91:63:d3:b5:c9:
                    bf:8c:8a:be:52:a6:ab:93:43:89:71:ca:72:ff:99:
                    46:0a:54:40:45:bb:8e:f2:6c:95:bb:6f:03:4a:ab:
                    6b:41:67:da:11:1b:15:fa:ec:e9:3d:e2:f3:eb:68:
                    a3:a4:92:ca:f9:0d:bf:c9:08:65:58:90:af:53:a0:
                    40:3e:1a:71:ac:4a:66:53:f2:b2:14:66:ef:88:15:
                    46:87:93:ff:be:a8:b8:4d:b8:d9:4c:17:30:09:11:
                    5b:19:97:0c:b1:20:bf:e7:a5:9c:af:e8:2d:5a:91:
                    4c:a9:65:06:7d:00:8e:23:8e:c9:72:2a:e2:06:b0:
                    fc:ed:25:ef:57:1b:52:4e:75:98:68:14:a9:d9:f0:
                    9d:1c:8b:21:0e:24:ab:98:08:d8:02:49:f3:1a:77:
                    de:fd:83:6a:9b:31:4a:fb:65:29:6c:8d:2f:ed:96:
                    64:2d:24:a8:0b:08:0a:5a:59:01:43:93:5b:4c:b8:
                    0b:95:d5:f7:bb:5c:a7:23:b2:b1:53:eb:3a:29:56:
                    fa:3c:05:44:41:fb:02:93:dd:b4:f6:38:97:93:f2:
                    fd:b7:f8:79:2c:9d:03:7d:fa:e8:4b:c4:db:bb:5d:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D6:8C:BA:69:0A:3A:06:FC:7D:59:FD:D3:65:0E:77:C1:09:96:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/211fd89e-7f84-3f89-953c-6dfee705d4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.crl

            X509v3 Authority Key Identifier:
                keyid:B9:E3:F7:30:C7:2B:E0:44:26:25:D5:9F:CD:4B:BB:D8:0F:03:E8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:12:c1:45:4a:57:02:da:b1:aa:5c:4e:c7:97:7d:79:20:d6:
         47:69:2b:48:7c:f6:70:31:56:26:32:5a:60:41:19:43:81:28:
         46:90:42:31:82:9f:1e:49:e1:ac:5c:3d:21:63:44:f4:69:42:
         45:29:f8:07:c1:30:fd:a1:57:00:7b:77:62:8c:97:55:95:ba:
         d8:8e:b9:b5:ed:65:af:b6:29:f5:ff:e1:cc:e7:a4:6b:f2:4c:
         1d:13:82:0c:71:55:9d:a8:b3:89:85:d1:9f:4a:75:03:6d:b0:
         39:c1:af:b1:11:3f:9e:94:98:dc:c1:18:59:51:fe:5d:13:7d:
         80:88:76:3d:ef:56:42:bd:9c:4c:c9:de:d6:8c:c5:dd:42:d7:
         bc:02:b4:e1:b4:d7:ab:27:ec:fd:9e:25:f8:39:e0:b2:64:a2:
         fb:d5:53:13:80:27:b0:4e:bb:35:8c:56:5a:2a:94:72:84:8c:
         6a:9c:60:60:9f:26:71:fb:8e:21:19:c6:4d:18:6d:87:10:03:
         3b:b4:96:62:9c:4b:64:e0:e1:da:b2:29:87:74:50:f5:db:92:
         15:8a:49:5b:0f:43:e2:76:73:e3:34:29:fd:34:c0:83:84:23:
         15:1f:34:95:1e:88:0d:a0:d3:13:c8:67:1c:a7:61:82:aa:a2:
         78:4d:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:53:46 2026 by rpki-client