Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/689b8e8c-cc88-38a1-afd1-7be1da97ea3f.roa
File:                     689b8e8c-cc88-38a1-afd1-7be1da97ea3f.roa (raw, json)
Hash identifier:          bJ49RVESxGJ+dBTUs6kwSrswO3fJD5m8Omo/zuYzgHw=
Subject key identifier:   06:47:A0:3D:8C:4A:29:8F:D4:79:01:F9:B1:5F:8D:D6:50:7B:44:60
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F3FDDEF8A219EAC3CDAED0A80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/689b8e8c-cc88-38a1-afd1-7be1da97ea3f.roa
Signing time:             Mon 21 Sep 2026 14:38:33 +0000
ROA not before:           Mon 21 Sep 2026 14:38:33 +0000
ROA not after:            Sun 20 Dec 2026 15:38:33 +0000
asID:                     214120
IP address blocks:        149.57.36.0/24 maxlen: 24
                          149.57.38.0/24 maxlen: 24
                          149.57.195.0/24 maxlen: 24
                          149.57.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:dd:ef:8a:21:9e:ac:3c:da:ed:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 21 14:38:33 2026 GMT
            Not After : Dec 20 15:38:33 2026 GMT
        Subject: CN=01f45c16-25ba-45a4-8d39-5e385f51987f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:b4:5e:c8:a6:9b:62:98:e6:21:02:13:7a:
                    b3:ba:86:02:56:74:7f:e0:75:88:c4:12:e4:2f:a1:
                    39:65:f2:71:ab:f2:f1:61:d7:0f:c2:f2:82:7f:37:
                    ab:66:cb:c1:f9:18:c1:d5:2e:19:9e:36:fd:a9:7d:
                    69:72:30:a3:60:e5:2a:18:27:84:03:90:bc:d1:2e:
                    05:70:68:28:22:5e:37:98:a1:72:f8:9b:0a:e8:5e:
                    60:ca:dd:da:fb:0a:99:d3:0b:cc:9e:bd:a9:08:f0:
                    81:cb:df:55:14:56:bd:63:f6:e8:f3:9a:ed:bd:40:
                    60:9b:c9:0a:1c:23:4a:e5:a9:7b:92:7c:4c:65:ee:
                    80:f6:81:00:07:78:52:e9:d5:3c:d7:d3:4b:60:6f:
                    e6:c4:af:ad:7b:c3:b4:94:74:28:dc:f8:ae:c0:cb:
                    66:7e:d7:ec:63:94:35:00:9d:fa:84:5e:d4:cc:c7:
                    ff:4f:e9:6c:c4:bc:eb:e9:1a:f7:b0:67:6b:d1:cc:
                    25:6d:fe:0e:db:97:18:d8:7b:0c:59:01:a4:35:09:
                    31:35:31:a9:64:66:46:5f:8d:8f:ea:f1:84:05:24:
                    0f:72:f4:68:dc:70:57:5f:27:60:1e:f4:70:1f:b4:
                    c7:b5:6f:3d:50:9b:47:e0:ca:41:db:92:d4:ca:7f:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:47:A0:3D:8C:4A:29:8F:D4:79:01:F9:B1:5F:8D:D6:50:7B:44:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/689b8e8c-cc88-38a1-afd1-7be1da97ea3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.57.36.0/24
                  149.57.38.0/24
                  149.57.195.0/24
                  149.57.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:18:65:49:51:8b:35:c5:22:d3:dd:dd:fd:c2:fe:d3:da:ce:
         9c:fd:e8:3f:7d:85:88:47:e3:dc:4a:78:ab:c4:31:ae:d3:5f:
         37:09:97:bf:f4:16:94:e1:69:5d:ea:86:00:db:b4:2d:8f:c6:
         83:81:d7:5a:1e:81:a0:4d:67:b4:5e:aa:f4:14:e5:3c:48:df:
         76:be:da:b4:6f:3a:69:36:52:d8:37:59:03:9b:66:1e:52:a1:
         79:43:08:a2:1e:da:81:09:d9:55:3c:13:71:9a:1c:ba:a9:72:
         f4:46:ee:20:5b:e9:a2:8e:82:e5:44:19:05:35:bf:84:67:f0:
         bf:42:05:6d:bb:8b:f8:1c:24:4f:8b:12:b5:7d:cd:af:a7:2e:
         26:5a:12:0d:2c:37:12:9f:16:2b:1c:a0:3a:36:ef:d6:63:75:
         2a:90:a0:85:e6:16:12:d1:92:63:64:2c:7b:c7:35:9f:ac:d5:
         1a:39:8b:50:25:e5:75:7d:31:43:81:7a:b6:2b:07:7d:a7:7a:
         8b:97:76:95:35:76:93:5b:e1:62:81:70:3f:34:0f:87:9a:08:
         7a:88:7a:db:29:49:be:84:44:b8:7f:c4:65:76:43:4f:04:5a:
         f5:57:af:de:48:a0:1d:36:90:83:79:03:46:3f:34:95:8c:f5:
         fd:50:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:34:39 2026 by rpki-client