Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8ac227b-2947-3335-8d12-f8f54d943c99.roa
File:                     d8ac227b-2947-3335-8d12-f8f54d943c99.roa (raw, json)
Hash identifier:          tGQLEm2T7FwC4V4NtVgDiixmwhMuTA9NyoV2UWKfHeE=
Subject key identifier:   91:47:55:A6:A4:10:90:30:9C:41:D2:3F:4F:58:EC:19:36:02:01:B3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D667A58C8EAEB4B248C6E5D18
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8ac227b-2947-3335-8d12-f8f54d943c99.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     132337
IP address blocks:        154.18.216.0/22 maxlen: 24
                          154.59.96.0/24 maxlen: 24
                          209.146.43.0/24 maxlen: 24
                          209.146.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:58:c8:ea:eb:4b:24:8c:6e:5d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=247a4c86-9dd5-4370-8f3b-1230d48349b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:91:99:eb:2e:82:e3:d2:fc:e8:6e:2e:10:
                    a4:94:52:bb:70:c0:27:88:e0:82:ff:0f:a2:c5:37:
                    c3:25:69:f2:3a:90:f1:50:7d:ef:73:7e:a4:0a:80:
                    d5:55:8a:f0:2d:f8:8e:23:b0:3e:09:46:2e:0a:9b:
                    14:84:1d:cb:ae:53:d5:79:68:5a:e5:b4:5c:0d:a1:
                    e6:30:4f:18:1e:35:11:d0:0d:88:16:a3:97:19:c5:
                    b0:08:3f:15:76:58:c6:cd:55:40:c7:f2:5c:f8:19:
                    3a:09:ac:fa:3c:ee:df:cf:c7:cc:dd:48:a2:e5:fd:
                    cb:4c:d9:a5:18:d9:0c:00:28:28:f1:ee:3d:d2:ea:
                    13:ab:20:ae:a6:de:70:f4:60:a3:af:e2:d8:6d:64:
                    6a:7d:99:0d:c0:cc:c8:89:29:8d:e2:c6:6f:9a:c7:
                    59:29:b9:01:68:ed:88:47:e5:58:4b:12:bf:17:96:
                    6b:bf:2f:90:12:8b:b6:fc:f5:13:40:2c:79:78:bb:
                    61:1e:29:c9:88:49:2d:11:0a:d3:f3:cc:f3:be:07:
                    ef:c0:97:33:23:17:1f:97:b5:6d:7a:96:92:44:79:
                    d3:e5:04:50:16:1b:63:86:a6:03:11:56:e5:90:1e:
                    51:f8:bd:c4:4d:10:98:b0:a8:da:f3:f1:e7:81:93:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:47:55:A6:A4:10:90:30:9C:41:D2:3F:4F:58:EC:19:36:02:01:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8ac227b-2947-3335-8d12-f8f54d943c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.18.216.0/22
                  154.59.96.0/24
                  209.146.43.0/24
                  209.146.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:a3:f5:aa:8d:6c:93:09:42:b4:4f:97:02:9d:c0:92:91:
         f5:10:81:9d:3a:e5:79:8d:dc:26:c2:e4:c5:7f:5d:e0:da:79:
         64:89:08:51:1e:32:df:da:59:ff:9e:6e:f8:d4:a6:84:37:5f:
         a7:6b:8a:dc:60:6b:8c:4e:2c:24:4d:4a:be:a4:5c:7e:ab:5f:
         f5:4b:b0:51:ba:6d:92:2b:55:c4:13:41:22:01:ae:7f:0b:18:
         61:bd:b6:d6:2e:7b:d3:75:dc:a0:02:b3:cd:3c:46:40:db:80:
         fb:ca:4b:ee:1c:aa:64:27:fd:13:0f:d0:40:20:b2:26:1d:61:
         ed:00:ce:61:48:97:12:80:39:b1:30:61:42:73:f1:84:78:2d:
         06:65:74:37:01:c9:fe:f9:b6:b3:68:b6:e5:03:40:c5:1d:c3:
         12:8a:c9:13:e8:a9:02:9e:61:0e:c6:dc:8b:55:b1:47:13:ee:
         4d:fa:d2:fe:48:3d:e5:7d:9e:f9:83:bd:be:36:0a:13:3a:c1:
         a5:b1:b7:6d:80:0f:58:1c:5d:a1:a5:c6:9c:c7:3a:91:23:9e:
         77:8b:aa:b8:21:8c:69:ee:76:e8:e1:bb:fd:85:ea:ca:0d:b4:
         3b:82:8d:e7:b7:28:5c:39:74:86:f9:b4:77:c2:e8:a1:94:8d:
         43:7e:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:56 2026 by rpki-client