Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/021eac85-cded-3afb-a08b-7bd0564b7758.roa
File:                     021eac85-cded-3afb-a08b-7bd0564b7758.roa (raw, json)
Hash identifier:          2knNO9kqKkSY5dNsTDEpKfjslvNgH1lXkIujxkq3Wi8=
Subject key identifier:   7B:61:6A:E9:79:84:7D:E5:D8:74:9C:FD:3A:CE:B6:1E:00:0C:AE:A9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5FEF6FEE82DFF5550A4CDC60
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/021eac85-cded-3afb-a08b-7bd0564b7758.roa
Signing time:             Thu 02 Apr 2026 16:45:48 +0000
ROA not before:           Thu 02 Apr 2026 16:45:48 +0000
ROA not after:            Wed 01 Jul 2026 16:45:48 +0000
asID:                     204708
IP address blocks:        154.6.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:ef:6f:ee:82:df:f5:55:0a:4c:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  2 16:45:48 2026 GMT
            Not After : Jul  1 16:45:48 2026 GMT
        Subject: CN=3fd81814-01f3-4414-889b-e6b4ac20884e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:83:1a:44:3f:82:ed:e1:ef:2d:68:0f:ba:
                    b8:7c:de:d2:e4:ad:ca:43:b9:da:6c:12:ab:4c:10:
                    a6:cb:71:e8:56:b3:c0:e8:29:47:62:f2:06:33:9a:
                    8b:ba:1d:58:40:f2:51:47:ea:3a:17:b1:7f:bc:90:
                    ef:b4:9b:b0:07:33:5c:cb:1f:1f:be:be:70:f6:a7:
                    46:9a:da:fe:a3:ba:f4:5a:0f:34:48:50:4d:c0:01:
                    1e:d0:e9:46:2f:7f:18:20:8c:8d:41:41:af:0b:06:
                    99:d6:ea:39:f4:32:9d:b5:be:ae:5a:5c:dc:34:b5:
                    68:3c:b8:ea:51:5d:e0:f9:10:85:bc:74:2e:37:da:
                    22:4a:af:c3:62:37:f1:03:fe:9b:fb:26:22:36:1c:
                    d5:f1:c5:37:c3:f9:0d:bd:a3:b1:f5:ce:1a:26:da:
                    81:04:f4:95:3c:4f:8c:f9:8c:62:95:92:03:a4:8d:
                    ce:05:19:c6:ea:d0:bb:41:6d:f5:df:b2:89:8e:87:
                    7b:f8:bd:71:95:c0:bb:22:eb:60:d4:3b:37:dc:5c:
                    60:f6:1a:8f:97:d4:f1:45:1b:2a:9a:c9:1f:76:fe:
                    ed:c6:0d:81:89:dc:40:49:b7:5a:10:fe:95:3c:69:
                    f6:90:7c:94:e2:a7:c9:21:68:c6:2f:96:9f:b2:ee:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:61:6A:E9:79:84:7D:E5:D8:74:9C:FD:3A:CE:B6:1E:00:0C:AE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/021eac85-cded-3afb-a08b-7bd0564b7758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.6.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9e:36:5d:81:bc:04:9d:26:7e:79:91:cf:17:93:00:14:4f:
         2f:1e:de:6c:4e:31:34:81:c0:63:a5:8c:c4:f8:40:36:0f:a5:
         28:68:a6:1d:43:a6:0e:8b:b3:c2:e5:94:60:d7:f5:b0:08:cf:
         ac:b6:c6:79:dc:63:0e:45:97:16:a4:1f:58:77:3e:49:ff:3a:
         dc:45:65:b4:af:50:2a:9c:21:22:dc:ea:49:cb:da:c0:4f:0c:
         53:23:a9:58:35:94:17:c3:a9:20:94:b4:3c:82:c8:93:d8:52:
         da:e8:ca:3b:42:50:ad:e3:dc:f7:f6:2c:ac:c2:6a:a9:fa:6a:
         c7:f5:80:41:0f:bf:33:0e:f5:db:da:49:e9:f9:9c:3d:9b:0d:
         d2:71:da:bb:94:e6:fa:5d:0a:ce:28:75:f8:16:2a:24:b7:7f:
         0a:f9:0f:fd:27:5a:56:65:3c:54:94:d7:07:30:84:c9:25:7f:
         2b:73:c1:db:dd:b2:11:e6:ad:a9:29:f3:21:3b:11:5f:e3:03:
         8a:50:72:e7:34:5e:cc:6a:e4:ee:84:07:bd:e3:79:a5:7c:1d:
         c5:cf:2e:57:02:ba:7f:7e:53:3b:a0:ce:82:88:bb:a4:9f:c9:
         f8:2a:7b:14:0b:6c:bb:06:a8:d9:7f:5b:a7:09:0a:06:b5:dd:
         40:83:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:22 2026 by rpki-client