Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1468b59e-3c36-3d33-a199-f0df75defcb6.roa
File:                     1468b59e-3c36-3d33-a199-f0df75defcb6.roa (raw, json)
Hash identifier:          lAFgH59hSy4Vy/iTeo93lx1duvIySxMA5nWzXaNQWV0=
Subject key identifier:   E0:57:2E:4B:53:D1:6D:A2:ED:EB:38:1B:BF:D1:B0:63:87:37:EE:A9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F497478B0D825039138992000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1468b59e-3c36-3d33-a199-f0df75defcb6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     154101
IP address blocks:        154.49.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:78:b0:d8:25:03:91:38:99:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=df4169d6-02c6-49b0-949e-f416842e5f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:41:33:91:d8:b1:ae:27:13:b0:25:57:19:
                    b4:26:bd:c8:8c:5b:4a:7b:8e:d1:98:01:11:1f:24:
                    bc:8a:45:c0:5c:83:98:fb:5f:f1:1e:4f:69:d8:d2:
                    63:2c:33:f6:d2:63:b3:79:51:86:07:f9:58:a8:38:
                    71:48:95:1c:7c:62:38:57:ff:35:39:ea:8e:ae:e9:
                    f5:25:dd:a6:f1:52:4a:33:f7:31:d8:43:90:c3:31:
                    de:76:0c:5c:83:01:54:62:85:f5:6c:ed:31:7e:1a:
                    fd:9a:e0:12:49:08:a3:79:be:ba:52:93:92:b8:fe:
                    69:ae:97:fb:15:1a:44:ef:c2:c0:cf:d3:50:0a:df:
                    58:12:5a:4b:8e:1e:64:13:dc:57:83:62:92:f2:8b:
                    03:94:b6:cf:20:52:89:f2:55:79:c6:02:51:ec:14:
                    5b:69:88:6b:5d:d9:22:75:36:32:4c:58:88:27:66:
                    29:c8:9c:b9:b8:fe:e0:93:36:77:91:c4:d5:16:40:
                    e0:b5:c5:89:cf:e9:64:e0:e3:5f:7d:41:fb:d7:44:
                    5f:79:0b:05:c2:6a:05:a9:5d:3e:95:13:be:a5:da:
                    d0:22:df:51:36:e2:22:91:8f:b5:9c:bf:5b:1e:03:
                    26:bc:58:33:cc:8b:34:bb:34:d7:5e:ba:7d:42:36:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:57:2E:4B:53:D1:6D:A2:ED:EB:38:1B:BF:D1:B0:63:87:37:EE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1468b59e-3c36-3d33-a199-f0df75defcb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.49.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:f5:37:7b:34:a1:e8:75:f6:ee:94:2e:c4:fb:fa:e0:6c:
         34:a6:ec:83:d3:9d:07:68:9b:a0:bc:c2:c2:b4:04:e1:f0:c5:
         cd:7d:fb:4d:ad:7e:46:d1:80:11:86:21:fa:c7:ca:1f:50:67:
         95:56:63:bb:46:b1:88:c7:88:c1:dc:59:3c:8c:e4:f9:e2:43:
         75:cf:8d:02:c1:7d:e5:8d:96:2e:bc:8c:6a:f3:6b:95:97:3e:
         b8:92:83:9d:f0:11:ff:0b:97:d3:bb:c4:63:1e:e4:95:df:9b:
         16:09:85:e7:19:8c:00:3b:d7:18:c9:96:50:2d:08:b4:dc:e9:
         dd:f5:5f:ba:98:82:c1:12:32:82:2f:f1:42:1e:4b:62:fd:e2:
         4a:01:a6:07:bc:75:f1:a3:ba:14:68:72:a0:2e:c1:28:ce:61:
         36:7d:70:73:80:68:1f:2b:30:de:c6:f9:6c:37:80:4d:2b:cf:
         35:c7:25:5f:3b:11:fe:0e:17:44:f7:a4:e1:b0:42:5e:57:eb:
         bc:d1:76:c2:89:34:68:34:51:ba:78:fc:6a:ef:b0:6b:eb:fd:
         4f:9b:52:c0:4b:87:b1:32:52:fa:5e:7a:1e:bd:07:61:24:82:
         b1:7f:c2:fb:58:53:ea:8f:e9:ad:f9:ec:12:d8:af:87:3b:a8:
         0d:ca:d4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:57:10 2026 by rpki-client