Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eeb4ca42-60bd-3b03-9d88-033d8c8354b3.roa
File:                     eeb4ca42-60bd-3b03-9d88-033d8c8354b3.roa (raw, json)
Hash identifier:          IYvZyioDkbLT3UxAm7+57BOv/47zHjUE2bCVgtKwl2k=
Subject key identifier:   FE:1F:11:C9:F4:30:1C:66:64:7C:96:38:BF:AB:B7:6A:7C:94:0F:77
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F6DBD6B8ED7DC691B3F8D2A80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eeb4ca42-60bd-3b03-9d88-033d8c8354b3.roa
Signing time:             Thu 08 Oct 2026 01:00:11 +0000
ROA not before:           Thu 08 Oct 2026 01:00:11 +0000
ROA not after:            Wed 06 Jan 2027 02:00:11 +0000
asID:                     0
IP address blocks:        154.39.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:bd:6b:8e:d7:dc:69:1b:3f:8d:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  8 01:00:11 2026 GMT
            Not After : Jan  6 02:00:11 2027 GMT
        Subject: CN=2e8a9db7-bb58-464c-84f7-75c4cd5c23e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:5a:0b:33:cd:c2:a1:b7:95:0a:57:0f:48:
                    75:5c:f6:bb:14:fc:a2:ae:ea:f1:c3:62:09:86:5c:
                    c7:68:71:7a:26:d0:6c:45:c0:63:c6:20:c3:1f:5a:
                    08:02:01:72:e4:ac:c9:e7:85:ab:2b:21:b1:56:9e:
                    e0:5a:11:f3:ca:76:c8:68:ee:e0:d1:55:d5:40:e3:
                    88:1c:34:d5:65:a9:db:4a:e9:a9:57:c0:48:91:41:
                    d7:1a:e5:6b:54:52:12:ab:bf:b0:d5:73:a5:16:79:
                    7a:13:72:1e:9d:48:57:9c:ce:f0:84:c8:b1:4e:60:
                    a3:63:d0:8d:c4:8b:c1:c8:3b:b3:88:b6:db:59:65:
                    65:ec:8a:07:49:7c:4a:27:9a:0a:ac:45:34:c4:cc:
                    f1:c9:32:e3:5a:1e:2d:6f:f3:ea:44:ee:43:7f:d1:
                    44:44:c7:ba:82:55:8d:67:13:5b:f1:80:f9:2c:b5:
                    45:c4:2a:24:44:05:43:36:71:93:68:f4:2e:3c:83:
                    5e:df:97:47:31:cc:4b:61:57:b2:8b:65:6b:03:5d:
                    7b:20:a0:9d:66:c6:21:2f:7c:1f:b4:75:0c:7f:a7:
                    bf:da:d0:6d:10:1c:0a:da:8c:47:33:08:ef:1d:29:
                    e5:4e:90:08:33:d4:88:a8:26:6f:22:62:66:68:a3:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1F:11:C9:F4:30:1C:66:64:7C:96:38:BF:AB:B7:6A:7C:94:0F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eeb4ca42-60bd-3b03-9d88-033d8c8354b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.39.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:9c:84:8e:39:2d:86:0e:72:ae:fa:f0:bf:87:d2:73:54:
         5d:a2:f9:1a:42:c4:a4:65:11:60:28:e2:eb:60:f8:aa:52:2f:
         5f:4d:84:64:3a:b6:43:54:cc:3b:ae:fb:31:2d:e1:de:85:6b:
         5a:73:95:60:f2:2a:65:57:75:95:d5:e1:12:e0:14:21:51:33:
         d1:d4:76:e5:3a:ed:63:c1:a1:fb:5d:3f:cb:98:f1:f8:57:d2:
         0f:1d:74:66:7d:b7:d4:d6:b3:d2:a2:83:3f:04:44:9c:e4:fb:
         ca:da:a5:8e:dd:fb:04:19:32:c3:fb:d4:26:7e:b6:de:3f:d7:
         ad:c6:1e:de:a5:ee:1e:da:54:6f:6b:55:62:12:01:0f:b5:fe:
         ff:f9:4c:15:69:b7:a4:e1:da:31:dc:1a:bd:fc:86:43:4d:42:
         c4:41:22:cb:12:d5:a3:bc:32:71:d5:2a:3b:70:7f:ac:79:f6:
         47:5b:41:f9:dc:a5:61:37:0e:ab:3d:9f:01:2b:73:c3:2a:8a:
         8b:c0:fc:da:86:01:e8:72:38:a5:77:c1:8e:f1:49:8e:90:dd:
         71:0a:12:8f:88:79:f0:01:d5:94:95:79:65:6c:46:0c:09:a2:
         ff:a3:60:3c:c9:43:f4:ff:1a:40:22:35:01:d4:28:5a:fc:8d:
         81:d3:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:12:19 2026 by rpki-client