Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d968457-4834-3445-af9d-9d3b94b3aa6f.roa
File:                     6d968457-4834-3445-af9d-9d3b94b3aa6f.roa (raw, json)
Hash identifier:          Pif7NjVplxSMX072EbYYLXp8ld4G+f9He/4Ii8Srr5Q=
Subject key identifier:   C0:24:8A:D1:67:09:B0:D8:F1:43:BD:7E:CF:5A:16:83:48:03:63:F7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4AF83CCDC868A2D060F19380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d968457-4834-3445-af9d-9d3b94b3aa6f.roa
Signing time:             Fri 25 Sep 2026 14:05:26 +0000
ROA not before:           Fri 25 Sep 2026 14:05:26 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     64286
IP address blocks:        149.18.105.0/24 maxlen: 24
                          149.18.106.0/24 maxlen: 24
                          149.18.128.0/20 maxlen: 24
                          149.18.144.0/20 maxlen: 24
                          149.18.160.0/19 maxlen: 24
                          149.18.224.0/22 maxlen: 24
                          149.18.255.0/24 maxlen: 24
                          149.57.6.0/24 maxlen: 24
                          149.57.17.0/24 maxlen: 24
                          149.57.77.0/24 maxlen: 24
                          149.57.85.0/24 maxlen: 24
                          149.57.92.0/24 maxlen: 24
                          149.57.160.0/20 maxlen: 24
                          149.57.176.0/20 maxlen: 24
                          154.6.0.0/24 maxlen: 24
                          154.6.8.0/24 maxlen: 24
                          154.6.9.0/24 maxlen: 24
                          154.6.11.0/24 maxlen: 24
                          154.6.19.0/24 maxlen: 24
                          154.6.20.0/22 maxlen: 24
                          154.6.56.0/22 maxlen: 24
                          154.6.80.0/22 maxlen: 24
                          154.6.84.0/22 maxlen: 24
                          154.6.110.0/24 maxlen: 24
                          154.6.111.0/24 maxlen: 24
                          154.6.112.0/22 maxlen: 24
                          154.6.116.0/24 maxlen: 24
                          154.6.121.0/24 maxlen: 24
                          154.6.126.0/23 maxlen: 24
                          154.6.128.0/23 maxlen: 24
                          154.6.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:f8:3c:cd:c8:68:a2:d0:60:f1:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 14:05:26 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=af504ae8-d890-482b-a757-94467fac08fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:aa:69:6f:fd:b6:d3:96:ed:d4:1a:1e:03:
                    d0:2a:71:91:43:7d:69:bf:38:1b:fc:8e:d2:89:d0:
                    b6:ea:ee:ad:e8:b6:e2:68:a8:ec:ac:87:f6:73:0a:
                    ba:25:71:4a:43:af:67:7b:3b:3f:fe:79:6b:84:da:
                    24:76:22:d9:10:ef:81:43:ce:48:1b:15:d2:c9:58:
                    7e:3e:05:d5:ff:85:d7:7c:ec:03:f3:01:36:67:b0:
                    40:68:37:80:e9:fe:32:56:6c:c6:96:f9:1b:db:88:
                    3b:96:33:47:5f:89:95:78:a1:5e:a1:9d:96:86:d7:
                    d2:f3:27:3c:2e:d3:8a:58:24:b2:61:c3:cc:ad:26:
                    17:0d:ba:62:b8:9e:b7:a8:bf:6d:f6:e0:bb:b2:53:
                    3e:49:35:45:f2:b8:ca:45:1d:c2:f1:cc:a9:5c:20:
                    d2:12:4d:75:aa:5f:de:dc:a0:e6:38:ac:fb:07:3f:
                    a4:13:69:ae:f6:00:f4:51:aa:9d:e7:c8:87:2a:2a:
                    fa:26:3e:9b:dc:34:ea:a5:dd:40:c0:2d:9e:8a:f1:
                    e5:d5:8e:9d:87:27:37:f4:8a:11:fc:8a:60:68:d3:
                    de:64:93:4c:22:73:56:ab:fe:1d:e8:57:fd:25:1b:
                    02:27:91:c7:37:93:fb:9d:5b:43:8b:ab:f4:1b:92:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:24:8A:D1:67:09:B0:D8:F1:43:BD:7E:CF:5A:16:83:48:03:63:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d968457-4834-3445-af9d-9d3b94b3aa6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.18.105.0-149.18.106.255
                  149.18.128.0/18
                  149.18.224.0/22
                  149.18.255.0/24
                  149.57.6.0/24
                  149.57.17.0/24
                  149.57.77.0/24
                  149.57.85.0/24
                  149.57.92.0/24
                  149.57.160.0/19
                  154.6.0.0/24
                  154.6.8.0/23
                  154.6.11.0/24
                  154.6.19.0-154.6.23.255
                  154.6.56.0/22
                  154.6.80.0/21
                  154.6.110.0-154.6.116.255
                  154.6.121.0/24
                  154.6.126.0-154.6.129.255
                  154.6.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3a:d2:92:48:3f:ba:af:64:4f:15:20:34:df:c3:50:49:2c:
         8c:a7:11:eb:07:5c:e5:ce:a1:29:81:14:65:ab:69:7d:49:01:
         7f:97:4a:36:fa:33:07:a7:e3:bd:f3:ca:0f:80:af:b1:39:d3:
         92:ea:a9:09:d2:54:45:3e:81:ed:a0:43:ad:19:79:fe:14:40:
         4e:19:59:70:7e:80:f1:6a:05:96:43:9f:8e:fc:cc:17:d6:08:
         63:14:2b:60:a4:d6:80:c1:6b:55:5f:ed:18:9d:ba:fd:a6:2d:
         fe:e3:fe:1a:a8:68:2f:7e:ad:99:20:75:47:b0:fb:7d:5b:5a:
         f1:46:d2:4a:4f:09:26:d1:90:08:8c:78:cd:54:4a:44:df:4c:
         b3:0b:ef:2d:48:c3:50:65:b9:47:29:be:db:48:2e:41:62:5d:
         44:d7:09:84:71:ac:2b:06:d6:eb:8b:c1:b6:49:ec:74:4c:22:
         4b:79:e0:58:71:9f:15:5f:4c:cf:80:c0:69:93:69:a5:d0:26:
         4e:68:80:64:cc:b9:0f:c4:01:73:dd:76:b4:4f:43:11:96:fd:
         cf:6c:9b:48:b0:b9:69:a8:bd:00:f1:6d:fd:0e:71:8e:4e:f9:
         6c:01:48:c4:53:84:28:40:f2:e6:ea:58:b0:e0:77:15:0c:f5:
         45:93:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:55:22 2026 by rpki-client