Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa
File:                     9e38af58-44dc-3d4d-8374-4dcd32e76092.roa (raw, json)
Hash identifier:          R8TqVd90yTgZiJT9JAu2mH0F1G1x74JNplwXjzKq0t0=
Subject key identifier:   6E:9F:40:E5:06:97:B3:51:F5:C7:5A:E6:92:DA:26:90:25:53:46:7C
Certificate issuer:       /CN=22f50b3c-0004-4753-bb50-b088e784de4e
Certificate serial:       010D0C9F4328584D55BA42CDA13371FAA8262C00
Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        158.51.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:42:cd:a1:33:71:fa:a8:26:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=5a29501f-cbd0-4fd3-826d-e4db31951b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:be:b9:01:1e:ba:ee:19:8b:ed:d5:94:ed:
                    cd:bd:42:d8:9e:36:18:60:b6:e6:85:78:0b:9d:cd:
                    04:23:33:ba:5b:f3:7a:91:e1:7d:64:73:dd:b7:fc:
                    1b:b1:ad:f2:47:a7:28:f2:45:62:56:c5:0e:51:9c:
                    7a:da:5d:ca:c8:40:94:91:fb:ad:e9:90:dc:2d:59:
                    07:2a:69:4b:c5:13:96:fa:51:0b:6d:4a:12:14:10:
                    58:c0:50:89:18:12:0f:0f:33:f1:c5:c3:53:14:c2:
                    1c:cb:55:49:5b:b6:33:fe:23:1d:d8:4a:93:b5:7b:
                    f8:e2:be:b6:63:2a:a2:c8:b4:6e:96:18:be:ec:c6:
                    7f:80:29:3c:97:6b:a2:ac:1e:60:4c:7e:f4:e5:1f:
                    aa:08:bb:57:d9:90:58:bb:9d:98:3a:5f:0e:ed:1c:
                    b7:34:a1:44:31:f4:03:5b:06:8e:67:a5:cc:9b:0e:
                    e9:78:d5:41:0b:12:7a:89:0a:ac:9a:5c:1d:65:a7:
                    62:7a:aa:f6:4c:d1:09:ed:b2:77:96:d7:84:a1:36:
                    c4:09:d6:18:66:34:ec:e2:5b:d0:97:5d:a9:95:fe:
                    e6:25:be:f2:18:77:aa:7f:22:06:b7:bb:05:86:4d:
                    95:ba:54:ce:ac:b2:f5:9c:b3:34:ba:72:65:56:c7:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:40:E5:06:97:B3:51:F5:C7:5A:E6:92:DA:26:90:25:53:46:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:a0:0c:fe:0e:ba:71:5d:7b:b7:14:13:3d:c0:18:23:ae:
         af:f1:92:fb:aa:83:0d:d7:8a:79:5d:77:d0:32:ad:21:b4:c9:
         ed:48:95:2e:94:b1:06:c0:5d:0d:cc:f6:6d:94:69:6d:e8:b8:
         75:86:70:9c:dc:19:3a:91:86:d4:cd:14:57:1e:33:5f:d7:21:
         6e:3c:91:f2:1b:14:97:d3:d7:2f:71:f6:77:b7:dc:69:40:12:
         30:68:e1:62:bd:1c:b2:b1:21:f0:08:b8:be:42:b4:6b:0a:98:
         e9:9b:14:5a:4c:21:33:46:f0:c6:b2:f5:58:cc:c4:1b:e7:1a:
         d2:0c:b6:aa:df:db:cb:b4:f0:63:f8:33:b8:96:53:ca:1b:e2:
         8e:24:b8:32:4c:17:31:f6:76:c0:1a:7d:9d:91:09:fe:cd:3a:
         71:5f:5a:d3:ac:cb:13:a2:be:b2:7f:26:07:69:48:39:09:f9:
         18:6b:40:34:84:74:4f:aa:89:48:4a:cb:10:f3:4c:0e:12:97:
         58:86:3b:b2:03:cb:89:cd:36:7a:eb:75:1d:8b:57:76:24:bc:
         55:c4:02:6a:df:0d:da:8f:09:22:fd:63:a5:78:b3:71:6d:23:
         bc:8c:ad:18:4a:0d:ea:66:a6:f9:53:e5:5d:07:24:36:2e:38:
         d0:ae:73:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:30 2026 by rpki-client