Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11589f5c-ad25-33f2-87b0-c3dc8b3cce26.roa
File:                     11589f5c-ad25-33f2-87b0-c3dc8b3cce26.roa (raw, json)
Hash identifier:          c5o1Np5o/rMM86BS+6M5nR6bNi5AzU7YX8d+0YfOMf8=
Subject key identifier:   D4:28:C5:13:2D:28:33:FE:CA:15:4A:71:F7:54:02:3B:EB:78:F2:6D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DADC6CF2CBE0CB5E3BB3B8200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11589f5c-ad25-33f2-87b0-c3dc8b3cce26.roa
Signing time:             Thu 30 Apr 2026 13:57:00 +0000
ROA not before:           Thu 30 Apr 2026 13:57:00 +0000
ROA not after:            Mon 27 Jul 2026 14:14:38 +0000
asID:                     214760
IP address blocks:        149.18.64.0/24 maxlen: 24
                          149.57.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:c6:cf:2c:be:0c:b5:e3:bb:3b:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 30 13:57:00 2026 GMT
            Not After : Jul 27 14:14:38 2026 GMT
        Subject: CN=f7e53ebb-e548-495a-b39f-c5c0bcfdf8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:13:a7:42:22:d5:22:59:d6:4c:0e:3b:e6:
                    8b:ca:9b:ec:51:c5:82:63:7f:3e:d2:43:ec:cb:c6:
                    9a:c0:4f:32:6a:cb:e2:3f:fb:92:40:47:54:0c:ea:
                    7c:1d:1b:d2:19:b1:1c:0a:e9:23:ac:e3:c3:42:d5:
                    80:16:3d:5c:cc:c2:8a:86:68:12:c0:09:81:80:5c:
                    83:38:2c:1b:c0:96:24:ce:5b:e7:14:79:c8:90:f2:
                    e3:74:ca:9f:e6:05:aa:89:49:71:d2:8a:8b:03:75:
                    0b:a8:29:c1:c2:e6:73:54:86:b0:19:2d:59:f3:20:
                    f3:35:54:fd:14:82:f4:2d:3c:7c:35:63:d1:52:f7:
                    87:7b:0e:08:b4:e9:15:ee:96:a6:da:8e:59:1a:74:
                    84:04:b7:d5:b0:01:7d:26:dc:22:d0:c7:b4:92:0d:
                    71:5d:7e:5c:32:55:ad:89:fc:e1:74:64:e9:c7:68:
                    c3:3f:ca:f2:76:a1:55:f6:79:53:10:83:41:d7:56:
                    83:db:18:1d:36:69:3e:5f:83:b1:c0:72:82:c8:60:
                    55:2c:fd:71:a8:a3:76:d2:36:2f:ce:5f:cb:3c:a4:
                    77:d7:d2:8b:43:d8:41:78:fc:d0:a5:49:dd:d8:c4:
                    bf:f5:35:55:b7:c6:d1:2a:19:76:28:66:3f:63:8c:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:C5:13:2D:28:33:FE:CA:15:4A:71:F7:54:02:3B:EB:78:F2:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11589f5c-ad25-33f2-87b0-c3dc8b3cce26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.18.64.0/24
                  149.57.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:07:24:09:7a:0b:a1:5a:57:7f:89:2b:d9:dd:52:c2:c2:
         d3:6e:17:bd:c9:f5:c6:de:3b:ba:b2:44:b3:df:de:83:21:40:
         46:83:cb:37:83:db:80:b8:02:33:75:70:14:f5:1f:22:68:b1:
         95:17:e3:54:eb:46:54:b9:af:13:32:ce:85:75:8e:af:2a:0f:
         df:9a:4e:4d:b9:25:36:72:5d:e5:49:77:bf:ce:d7:52:d6:53:
         ed:bd:9c:de:21:91:fd:d5:5f:26:15:cb:7f:56:44:49:67:89:
         49:e4:ae:20:18:02:9a:08:f7:f8:5e:4f:8f:85:c0:1e:07:3b:
         17:6b:d0:b2:fb:31:e4:fc:8e:dd:1a:3a:f3:1c:b0:3b:45:a3:
         00:27:93:12:8b:da:e0:80:fb:93:75:d9:da:32:b2:2d:80:1a:
         fe:4f:58:f2:ae:22:5c:b9:be:5b:24:22:ca:09:e9:c7:97:e0:
         a1:93:60:29:ec:1e:32:5a:27:62:ac:04:3e:aa:ec:f0:9a:18:
         7a:ae:99:01:fb:37:e0:f8:2f:07:f5:2c:30:ac:1e:a2:36:c7:
         50:3e:ff:88:e3:f8:2a:01:68:de:24:30:31:f3:43:12:aa:4e:
         8f:41:87:24:da:32:bb:f6:f1:d6:0c:41:46:db:a2:42:75:ec:
         57:ac:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:33 2026 by rpki-client