Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a3062d0e-3f2e-34c7-a604-610d12600acd.roa
File:                     a3062d0e-3f2e-34c7-a604-610d12600acd.roa (raw, json)
Hash identifier:          oWcK8e/BGAzfCO7JRtvaMBovM4RUaVJuO9/X/CKo9n0=
Subject key identifier:   BD:94:95:D7:AE:AF:DA:77:C7:01:4E:B0:0B:DB:7A:8D:9E:04:A2:52
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E9EB01959DC368601F11A8F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a3062d0e-3f2e-34c7-a604-610d12600acd.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     0
IP address blocks:        154.49.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:b0:19:59:dc:36:86:01:f1:1a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=7cb8f4e1-8cd1-4ce2-8938-d0b2d522aacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:1b:a0:d2:20:57:4c:eb:21:41:71:4d:a6:
                    8a:bc:c8:14:43:29:3b:55:f9:78:b0:4a:40:fd:d8:
                    fa:d8:81:10:9e:73:61:3b:b0:50:f2:a6:10:67:34:
                    af:32:36:19:ea:d1:6c:bc:d0:86:ba:e3:4d:35:80:
                    fb:bc:6d:f4:32:87:1d:b3:62:b6:50:f7:e1:01:45:
                    08:a6:20:b3:af:63:62:63:f3:66:83:30:d3:e3:9c:
                    b9:fd:93:cb:54:5d:5e:40:16:ba:51:bf:eb:cb:01:
                    7f:50:ca:12:f1:ab:be:42:34:44:e3:50:a6:ad:28:
                    9c:e8:c7:80:6c:8a:cc:8e:4f:0f:5b:a9:07:e2:e4:
                    f6:14:13:60:8d:1f:56:c1:ab:91:d0:3b:05:c0:e2:
                    e1:8b:cd:e5:86:9f:9e:39:21:54:ce:c7:3b:f8:d9:
                    37:12:dc:fd:28:a5:3a:8e:8e:03:68:60:d6:0d:3a:
                    26:fe:44:12:4e:05:44:ed:19:c8:3e:cb:a1:29:8e:
                    6e:51:bb:1b:a4:69:de:a5:92:fb:c7:1c:84:d7:f2:
                    41:e8:b4:01:61:52:aa:0f:ff:1d:64:e3:f0:8a:d5:
                    3a:af:ad:4f:72:78:45:02:d8:aa:93:74:ea:5d:39:
                    9c:ab:28:99:0e:f2:79:4f:82:71:29:59:28:39:2b:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:94:95:D7:AE:AF:DA:77:C7:01:4E:B0:0B:DB:7A:8D:9E:04:A2:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a3062d0e-3f2e-34c7-a604-610d12600acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.49.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:62:ec:44:12:ee:fa:d6:b0:c8:6d:95:ae:6a:9e:0f:01:c3:
         c8:4d:fb:dd:ab:38:83:c7:47:79:59:44:9c:e4:57:8e:94:0a:
         a9:a5:3f:cf:fd:9a:d4:74:96:d6:ba:f9:c5:81:99:db:ce:21:
         e5:a5:45:55:95:92:32:f9:6b:c7:fc:de:41:1f:79:7b:d0:5a:
         a6:35:8f:5d:ae:bc:c0:ae:b3:d5:3d:0a:3a:43:5b:90:e9:58:
         69:bd:5c:98:c6:72:05:d6:be:f7:93:00:b6:ba:79:2a:2f:60:
         09:4a:fb:35:47:3d:0f:88:91:ed:95:11:0a:ba:ed:2c:61:92:
         d0:67:0c:6e:df:30:32:03:b5:2f:a1:ad:aa:ea:5b:4b:c7:a1:
         08:a2:5f:7b:b0:4e:44:be:5f:bb:b3:8a:28:11:db:27:f3:c3:
         4f:0e:d5:ae:48:a8:f1:03:1c:d7:fe:73:5d:0a:cf:fb:be:2b:
         b2:f3:70:d3:46:10:b3:b0:19:58:0a:78:a9:12:2a:fe:fa:ce:
         7d:5d:58:82:50:84:83:eb:d7:91:20:a5:38:ff:46:06:01:2f:
         65:15:c7:a9:2f:2f:e2:f4:fe:7c:3a:74:0b:78:ad:22:0f:51:
         94:d3:9f:55:40:bd:91:95:ea:f6:49:10:e5:f3:d2:3f:ee:a7:
         87:e7:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:11 2026 by rpki-client