Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/055297b9-7fd7-36b3-aec0-6450bbc734a7.roa
File:                     055297b9-7fd7-36b3-aec0-6450bbc734a7.roa (raw, json)
Hash identifier:          lNQvCd1nnhPxYeoR+vTi9DwNT8ddTWGlosL6j5E27oY=
Subject key identifier:   5C:20:B6:50:91:2B:1A:46:68:9C:C8:62:43:3F:45:16:22:8B:B1:C0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D4EBB9DDE5566F9C4D2D5F580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/055297b9-7fd7-36b3-aec0-6450bbc734a7.roa
Signing time:             Fri 27 Mar 2026 12:52:39 +0000
ROA not before:           Fri 27 Mar 2026 12:52:39 +0000
ROA not after:            Thu 25 Jun 2026 12:52:39 +0000
asID:                     32043
IP address blocks:        154.63.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bb:9d:de:55:66:f9:c4:d2:d5:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 27 12:52:39 2026 GMT
            Not After : Jun 25 12:52:39 2026 GMT
        Subject: CN=466039b1-33b0-4b64-99e1-eaeefb5f0371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:72:8c:b6:59:24:34:9a:b8:ac:5d:97:9b:
                    f2:9e:74:1f:24:b4:a4:85:51:cd:39:a9:5e:3e:8a:
                    03:14:b7:ef:d0:d8:66:7f:42:49:85:0c:3b:7e:e4:
                    ea:18:c1:9e:e5:7e:0d:ab:20:e7:b9:ca:d8:09:55:
                    01:a8:a5:a1:f1:91:56:21:1c:7a:5a:06:51:ea:bd:
                    a4:a8:6d:23:f4:40:37:c8:87:b2:7e:c2:a7:f8:dd:
                    97:f9:e7:ec:45:e6:e6:5d:b1:8c:04:d7:09:44:de:
                    59:a7:dc:07:06:51:ce:82:d2:de:d6:3f:53:e8:4c:
                    db:fd:a1:15:22:00:bc:f9:50:86:80:ae:0c:f6:bc:
                    50:cc:90:23:de:be:32:8c:a4:18:fd:d4:5e:bc:fd:
                    95:0f:8e:df:24:6c:ef:e3:1e:e8:38:b2:a5:40:78:
                    fd:24:37:9d:3f:7a:f6:a3:4a:32:11:fd:60:6f:0a:
                    ef:19:ae:21:c2:29:79:b6:22:94:13:fb:c7:68:f9:
                    61:fc:e2:54:e7:28:98:aa:34:64:57:85:67:9d:c2:
                    88:9a:ac:63:f2:35:9c:e0:d6:7d:ca:97:2b:3d:72:
                    cb:88:42:49:de:05:ec:8b:28:b2:30:b3:0c:33:14:
                    42:02:f3:2e:20:37:f2:00:89:04:a8:8b:46:61:82:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:20:B6:50:91:2B:1A:46:68:9C:C8:62:43:3F:45:16:22:8B:B1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/055297b9-7fd7-36b3-aec0-6450bbc734a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.63.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:24:95:11:f2:3f:5e:73:48:c8:0a:98:ca:24:81:b3:4c:
         80:42:5f:d8:ab:3f:00:c7:57:fd:be:b8:c4:3b:43:8a:8c:54:
         e4:cb:c1:cf:12:a1:b7:1d:31:dc:3c:30:9f:63:6b:d0:c6:10:
         11:b2:5a:a1:a8:9a:f9:85:ab:ca:3e:02:2b:e8:b7:33:b6:5f:
         f1:27:8b:b7:06:c8:a7:65:47:75:cc:7f:96:0d:2a:89:12:6e:
         f9:00:c2:2e:2c:3c:4d:fe:d4:11:cd:8b:6e:81:45:cd:12:02:
         b8:f5:e3:d3:f7:ab:8b:6f:1a:94:b8:36:ed:97:13:21:88:b4:
         48:30:00:e9:14:73:b7:38:c0:4e:9b:da:f5:29:18:25:21:fb:
         81:d3:59:12:54:db:6c:22:64:c1:d7:6f:17:8f:2a:9d:fc:87:
         d4:1d:74:8f:5e:eb:04:9e:68:e9:9e:3a:cc:c2:32:84:0d:06:
         dd:dc:f6:0f:eb:fe:4e:0c:f2:a5:8e:99:8a:99:ec:22:ff:66:
         36:45:58:a6:bb:a7:9a:69:66:de:61:93:88:a1:9b:40:89:ae:
         ce:85:6e:8d:c0:5a:be:a5:f6:a3:07:2b:20:d7:ce:19:b9:be:
         f8:a1:9c:72:24:5b:41:38:6e:a5:16:d7:a7:c0:38:05:51:71:
         e5:97:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:19 2026 by rpki-client