Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c7bdf12-3d4e-3b2d-a021-c68cd39a698c.roa
File:                     4c7bdf12-3d4e-3b2d-a021-c68cd39a698c.roa (raw, json)
Hash identifier:          D+IkDfQLr9F6lOzjVPyIgYNKavBzfefdz7Uow1Err7Y=
Subject key identifier:   E2:45:27:14:A6:37:3F:21:EE:BF:84:B9:A2:16:D6:6F:40:4C:28:FF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CCA41D295BB50A2F754A8F400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c7bdf12-3d4e-3b2d-a021-c68cd39a698c.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     153292
IP address blocks:        154.61.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:d2:95:bb:50:a2:f7:54:a8:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=4eadacba-c692-4ba7-9a8a-1abe3fea77e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:94:9a:f0:f9:cf:4b:88:4d:aa:6a:fd:66:
                    de:e3:a8:12:9d:3f:6e:be:3c:d1:ef:dc:cc:45:16:
                    ff:5a:35:b2:4b:ba:08:17:48:00:30:6d:09:a0:2b:
                    5e:1c:f8:70:51:78:50:53:a3:66:ab:56:3d:65:e9:
                    97:63:e5:01:13:e3:b3:3d:29:6f:60:93:56:d6:83:
                    33:e1:94:86:45:58:30:8a:81:59:25:8b:a9:a2:de:
                    53:29:2a:2d:e4:7b:9b:09:e9:78:5d:1e:19:c8:a9:
                    89:e0:63:e1:b7:58:8a:d2:49:a6:fb:c2:3f:9b:ce:
                    5b:93:c3:86:39:ff:b7:78:66:6c:e5:77:d7:c2:25:
                    dc:46:d2:6b:c0:2e:1c:f8:eb:28:32:a2:4c:65:2e:
                    0c:36:ef:e4:c2:7b:29:7b:d7:06:bf:8b:75:43:e9:
                    47:82:da:38:ac:cd:72:c1:3f:26:65:89:3a:a2:ea:
                    f7:2a:91:95:85:d5:26:a0:7e:ec:ee:56:d7:b2:b8:
                    3e:f4:5b:b2:52:95:7b:2d:88:a6:63:c2:5c:36:20:
                    7c:10:db:d1:3a:2b:8a:7e:8d:66:01:f8:40:de:f6:
                    34:6b:66:6b:b0:dc:84:39:7e:06:d6:71:bd:61:eb:
                    bb:50:b7:9a:d5:74:9a:0e:c1:8d:a6:98:74:c2:29:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:45:27:14:A6:37:3F:21:EE:BF:84:B9:A2:16:D6:6F:40:4C:28:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c7bdf12-3d4e-3b2d-a021-c68cd39a698c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.61.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:18:67:55:ef:77:c9:fc:d7:e1:38:3f:8f:7a:e6:9d:14:
         38:de:52:55:2f:04:d3:98:06:6f:9c:04:77:b8:d3:af:de:0a:
         17:59:ab:5b:35:87:29:d3:9e:4b:b9:e1:f8:d0:5a:b7:90:24:
         95:e0:cc:da:27:b3:1c:8d:e4:2a:8a:86:cb:39:e4:71:5c:28:
         b7:3e:de:80:9d:81:a8:b7:f2:2c:8a:54:0f:4d:7a:8a:e4:22:
         80:f3:4e:7b:fc:c7:9a:2a:bf:7f:7c:47:8b:6d:a8:b4:4e:b1:
         6f:cc:5b:79:e0:c9:44:34:59:70:0f:cb:cd:a7:71:2b:e6:b4:
         8b:0b:8d:54:d2:e4:bc:44:9e:ca:1f:06:36:cd:3f:49:f3:ff:
         1d:7a:d3:f8:85:e1:83:36:50:22:93:a3:da:95:f6:21:0b:59:
         63:15:7d:0f:52:76:2e:4a:8f:83:88:9e:b9:17:a4:af:86:da:
         23:b3:f8:f1:37:d8:19:75:68:56:65:ad:32:8b:1e:2e:78:12:
         d3:9c:aa:c5:7c:98:8b:e7:27:17:0d:d2:01:d7:35:9d:24:df:
         15:07:e0:9d:2b:2a:bf:88:8b:f8:1c:d9:e7:96:96:e1:2c:29:
         42:85:cc:2f:f2:59:d1:3c:37:b7:c9:38:5b:a6:16:00:79:e6:
         73:f4:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:06 2026 by rpki-client