Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa
File:                     1392b7e6-1885-350f-b7e5-6101dd3690e6.roa (raw, json)
Hash identifier:          odFPn7NH7kQq82R+1VUfKiwkPbw6Ib9Je3joto/RVgw=
Subject key identifier:   CA:09:9F:69:B8:DF:29:C4:75:E4:32:8E:D0:23:EE:30:A0:96:AC:E1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F3FE033D807422A2BDFD35DC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa
Signing time:             Mon 21 Sep 2026 14:43:07 +0000
ROA not before:           Mon 21 Sep 2026 14:43:07 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     138890
IP address blocks:        154.21.105.0/24 maxlen: 24
                          154.21.217.0/24 maxlen: 24
                          154.30.158.0/24 maxlen: 24
                          154.47.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:e0:33:d8:07:42:2a:2b:df:d3:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 21 14:43:07 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=0f79657a-416c-4a64-91d5-c09d03cd60b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fe:80:22:ba:da:a2:65:5f:9e:b0:39:19:65:
                    4a:64:78:ab:61:19:6b:18:1e:c9:1a:4a:c6:0a:7f:
                    33:b3:32:8d:36:0c:a0:72:39:88:97:32:03:15:97:
                    5e:d5:a2:4f:8a:19:73:cb:6d:2a:ee:6d:bc:e0:e4:
                    aa:b2:ce:0c:a7:22:89:c9:8a:d5:93:83:35:0c:61:
                    af:3b:96:ff:42:7b:eb:7f:51:71:13:f6:78:a3:64:
                    67:f0:15:3d:67:df:85:aa:61:4f:22:62:4d:36:f7:
                    5c:28:40:a1:4e:4a:bd:00:e3:9e:b8:ab:c9:a8:c6:
                    b9:2c:56:bf:95:8c:02:bb:94:12:6c:6f:1b:61:3e:
                    a6:3c:48:d6:fe:74:96:68:0f:8e:d6:b7:1b:61:e4:
                    db:46:70:32:42:b6:d8:6e:14:e2:72:56:87:4d:c0:
                    42:22:98:0d:e2:97:cb:8b:d2:25:81:96:18:47:7d:
                    75:b5:5d:39:fc:07:27:90:f0:1b:ae:e9:c7:3d:57:
                    79:87:a5:b6:f4:c9:c0:20:76:37:56:73:7d:17:90:
                    fa:34:ea:d4:db:ba:e6:a9:06:94:7e:50:ae:82:f0:
                    25:00:d6:05:3e:5c:86:66:bd:6d:df:de:c1:64:54:
                    95:32:38:be:db:3f:f4:f7:fe:96:41:bd:4d:6f:d0:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:09:9F:69:B8:DF:29:C4:75:E4:32:8E:D0:23:EE:30:A0:96:AC:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.21.105.0/24
                  154.21.217.0/24
                  154.30.158.0/24
                  154.47.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:25:9b:c3:e0:f9:a0:2c:4d:b7:74:3e:d5:3e:fa:1d:8a:2f:
         c2:da:55:57:e1:f5:bc:7c:90:1e:1c:cc:75:7c:83:a3:09:90:
         3d:84:00:8e:59:f0:5e:32:a8:13:65:6c:61:2b:b3:44:34:db:
         d2:f6:5a:7f:d3:f1:20:be:ce:0a:80:71:4f:48:6c:fd:85:1f:
         b8:4e:a0:93:f6:51:98:c0:88:0f:7d:2b:cb:87:8a:aa:1d:86:
         6f:75:56:a3:c6:e8:3c:f7:91:98:bd:d9:c7:ca:5e:0a:5d:b5:
         5c:be:0b:16:85:7d:33:35:3a:58:22:e3:4d:c9:e3:09:b3:4c:
         78:c6:07:3d:52:91:5a:3e:b2:d1:07:1c:20:b2:69:2e:61:32:
         5f:7d:38:93:97:92:1b:76:4c:b1:86:a6:fa:35:e8:90:ab:14:
         9b:f3:09:2c:af:fb:14:2b:30:6b:d1:62:2f:98:9f:55:66:68:
         d6:be:1d:c4:53:fa:2e:c4:af:45:9f:2e:de:6e:19:70:dd:4a:
         bb:1d:1b:f5:aa:ad:6b:bf:b8:ae:e8:82:77:4a:2b:1b:65:2c:
         38:d2:a2:ff:92:bf:fe:47:fd:66:39:4d:70:fc:42:b9:d5:0b:
         76:24:c0:eb:ed:65:f0:c3:1b:66:a7:a0:28:59:73:25:d6:5a:
         73:df:3a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:45:57 2026 by rpki-client