Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/54a62362-8715-3a48-8d28-30e354286410.roa
File:                     54a62362-8715-3a48-8d28-30e354286410.roa (raw, json)
Hash identifier:          aZbtoNl6WY/+82nRM/nKP7JY/oo2cPgovMhvUEoNZkY=
Subject key identifier:   BB:AA:9F:17:50:52:50:DA:79:41:67:F3:57:28:9A:25:15:82:19:FC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F71ED7ABDC8E4EEEEB7FD2880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/54a62362-8715-3a48-8d28-30e354286410.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     263801
IP address blocks:        149.46.8.0/21 maxlen: 24
                          149.78.32.0/19 maxlen: 24
                          149.107.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7a:bd:c8:e4:ee:ee:b7:fd:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=4ec58258-26f0-4f53-94e1-07c494a1231a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:d5:26:f3:93:f0:db:f4:d2:62:25:95:5a:
                    5e:2c:16:8a:de:66:c2:b0:8c:55:ad:7a:93:40:5f:
                    44:26:3c:e8:83:2c:25:bc:52:1d:52:b8:ef:fc:ff:
                    cf:8c:32:5e:a0:92:13:48:73:6a:57:91:93:e1:2a:
                    b7:05:e3:72:78:07:e1:5f:f2:83:47:38:00:0d:fa:
                    84:32:da:64:a3:cd:0c:0b:77:32:86:16:a3:cc:a4:
                    db:04:c4:79:f5:2b:23:dc:4f:5a:b1:1f:73:6c:44:
                    b2:75:8a:91:55:61:17:60:49:f0:96:3c:b7:ac:43:
                    75:43:4c:c4:63:bf:fa:90:6e:12:b0:2f:cd:17:91:
                    ec:81:01:f9:bd:3d:c1:ff:bf:f8:12:ab:7b:42:f4:
                    e4:bc:0f:92:d9:db:7f:7f:c2:da:0e:0a:43:ef:3e:
                    6f:83:70:63:2a:4b:0e:fc:aa:58:d3:a9:5f:a9:32:
                    6b:1d:e9:1a:ec:0b:8f:18:8c:d2:8c:cc:79:fd:27:
                    2c:51:20:79:dc:d3:bf:b7:e4:14:26:a5:26:5e:05:
                    60:ba:53:31:c0:85:6a:70:5c:c6:56:d6:fe:5b:3b:
                    33:32:e1:b9:a8:36:af:79:c7:71:61:94:db:f9:d3:
                    cc:c3:07:ef:a7:2d:24:12:1e:85:15:7f:86:d8:c3:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AA:9F:17:50:52:50:DA:79:41:67:F3:57:28:9A:25:15:82:19:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/54a62362-8715-3a48-8d28-30e354286410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.46.8.0/21
                  149.78.32.0/19
                  149.107.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d2:55:01:af:14:df:85:29:70:79:7e:a1:3e:24:51:9c:da:
         b1:8f:fb:b6:96:07:09:87:fa:72:1d:79:22:e2:3e:9c:33:d8:
         80:bf:5b:79:f9:9b:7f:c0:4e:8c:91:e9:e8:5e:92:70:d7:7e:
         ce:77:9e:f9:11:72:c2:58:e2:1f:dc:46:4b:41:0f:0b:82:ea:
         68:0b:e8:dd:3f:49:ce:e3:7f:8e:66:f9:bd:78:67:e6:b9:0f:
         1f:3a:62:5e:b5:b3:a0:a9:f9:69:87:ed:66:34:d3:28:90:0f:
         f1:e8:08:ac:da:55:2c:77:f4:32:2e:9f:eb:3d:41:cc:82:f8:
         6e:27:09:75:8c:21:aa:67:17:cd:5f:80:82:29:ae:bf:10:c4:
         ad:d2:67:0f:1e:90:80:03:da:d1:74:95:ab:ae:ee:93:ed:3d:
         0b:75:e3:24:f7:39:db:3b:e4:17:e1:20:84:38:32:bf:c0:8d:
         7e:1a:9b:69:b7:05:65:22:41:8c:30:ad:a9:7a:0d:12:f1:3a:
         de:84:9d:14:97:46:8e:6a:7c:be:f3:3f:37:d3:20:92:48:e8:
         09:cf:84:92:a0:2f:1a:a8:2e:c1:fb:2b:34:9e:f3:2f:62:dc:
         1b:a4:4f:bd:b0:84:3d:25:74:38:d0:3b:12:4a:e9:2c:ef:6d:
         e9:6c:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:11:58 2026 by rpki-client