Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0191d817-d2dc-317a-a578-5b375960f2e4.roa
File:                     0191d817-d2dc-317a-a578-5b375960f2e4.roa (raw, json)
Hash identifier:          HdCO4+pEpUgXPobIFczHgOIvULLeGk2TbJNwLSj+TTk=
Subject key identifier:   A6:3B:87:8B:A1:8D:9F:C7:CA:70:92:48:C2:9D:2B:28:B9:57:20:BC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B960C87D055AA92F274BD1000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0191d817-d2dc-317a-a578-5b375960f2e4.roa
Signing time:             Mon 20 Oct 2025 16:24:12 +0000
ROA not before:           Mon 20 Oct 2025 16:24:12 +0000
ROA not after:            Sun 18 Jan 2026 17:24:12 +0000
asID:                     206735
IP address blocks:        154.57.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:0c:87:d0:55:aa:92:f2:74:bd:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 20 16:24:12 2025 GMT
            Not After : Jan 18 17:24:12 2026 GMT
        Subject: CN=1f263cf0-e216-4cd5-9f20-3b9202c663e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:bb:06:a3:87:e6:77:35:db:45:77:35:70:
                    ba:84:c7:46:65:98:7f:dd:7d:bf:56:97:4f:d6:f8:
                    9e:ce:8c:c3:25:47:0f:4c:33:91:1a:9b:2f:62:53:
                    17:d0:57:d0:ad:8c:7e:17:c9:eb:8e:d9:92:2a:ab:
                    e1:58:2f:85:4a:7e:e1:ff:60:50:b8:33:b6:b0:30:
                    f1:5e:e2:ae:46:ad:41:56:55:b0:16:0b:c0:fd:ec:
                    92:8d:0d:8c:e0:a5:5a:65:14:e2:32:13:89:83:34:
                    ab:07:6c:4e:ce:1b:fd:d6:97:92:87:8f:c2:28:c0:
                    9a:14:eb:b9:d7:df:5e:07:b5:86:6a:09:a0:12:b9:
                    eb:45:cf:b0:86:f0:05:88:19:fa:e4:89:1f:25:a6:
                    7d:90:e2:0d:4a:ca:e3:ac:d6:c0:cd:0c:6f:96:69:
                    b2:21:27:28:f3:29:c9:2c:d5:78:84:03:00:11:13:
                    86:d0:71:5a:8a:1a:1c:92:41:5b:c4:a4:b7:68:6d:
                    d6:cb:ad:73:ff:af:5e:e2:ca:39:fb:66:f4:3f:3d:
                    5b:83:15:ac:3a:90:41:2d:0b:60:de:d3:a5:92:ea:
                    ff:0d:dc:04:d0:b2:f0:6a:47:63:f8:7b:74:9f:f6:
                    ab:94:b1:79:be:8e:79:a6:2f:65:d6:e5:d7:7f:cd:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:87:8B:A1:8D:9F:C7:CA:70:92:48:C2:9D:2B:28:B9:57:20:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0191d817-d2dc-317a-a578-5b375960f2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.57.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:db:f0:50:4f:b8:9b:57:de:e7:67:cd:46:4e:f8:e8:6a:18:
         f3:a6:06:65:6d:cf:90:70:ee:60:f7:b9:c7:6e:53:8f:d3:85:
         3e:23:9d:ad:c7:5b:59:ff:e5:e7:cf:36:fc:ac:8d:81:98:dc:
         81:04:b6:e3:ce:b8:0e:86:09:59:27:f9:40:7e:1b:fa:0a:62:
         ff:69:88:f1:26:66:5b:43:5d:19:bd:4e:74:b3:e3:ea:41:49:
         ba:bd:77:74:a5:87:42:15:a0:a6:9d:fb:73:6c:89:ec:b9:16:
         73:a4:40:27:e2:34:c3:b5:c1:a0:87:22:c2:e3:c0:c6:67:68:
         a0:d7:fa:96:a0:d3:f0:ec:ec:52:71:79:8d:e6:fb:8e:68:96:
         fc:5a:55:97:9a:ce:38:92:d2:2d:f8:00:d9:29:8e:23:ef:4d:
         b9:66:22:e2:a2:ee:54:42:da:d1:66:cf:f9:d7:8e:b8:83:77:
         39:80:97:e0:a0:ee:02:ff:d5:e1:21:b8:2f:c4:a8:d3:40:cb:
         c4:ae:bd:a8:67:61:16:f5:b9:67:46:c5:60:5d:1b:c3:32:bb:
         b0:44:c9:55:06:b4:52:f3:a1:9e:ca:10:f2:2b:9d:74:17:4a:
         7f:1d:dc:77:6e:ce:cf:82:db:16:d1:90:c5:d0:57:1f:b5:ce:
         91:da:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:14 2025 by rpki-client