Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1fe27312-7931-391d-9136-0aaf304eb718.roa
File:                     1fe27312-7931-391d-9136-0aaf304eb718.roa (raw, json)
Hash identifier:          puDNaDuXYw6egXcmzmvlb4BK4cB2IM7trjNt8nam4h8=
Subject key identifier:   D4:B0:7D:BF:1B:85:37:67:0F:8B:B9:7B:AB:6B:0C:93:DC:58:1A:18
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DBBC43A94246B417466ACF000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1fe27312-7931-391d-9136-0aaf304eb718.roa
Signing time:             Tue 05 May 2026 14:13:07 +0000
ROA not before:           Tue 05 May 2026 14:13:07 +0000
ROA not after:            Mon 03 Aug 2026 14:13:07 +0000
asID:                     402389
IP address blocks:        154.30.32.0/23 maxlen: 23
                          2001:550:1d06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:c4:3a:94:24:6b:41:74:66:ac:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  5 14:13:07 2026 GMT
            Not After : Aug  3 14:13:07 2026 GMT
        Subject: CN=a2bae56f-7d10-49b1-a7fc-6e4761d67a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:8f:50:15:86:f8:72:99:61:38:49:c7:37:
                    97:63:0e:11:e2:8e:ab:9a:51:64:b9:89:a0:f7:a0:
                    c5:49:48:5d:92:11:65:3c:91:75:25:af:99:99:d9:
                    90:31:d9:fb:98:88:cd:3b:56:05:e1:97:ab:52:82:
                    09:b4:f1:ba:13:eb:54:33:3a:27:60:6a:41:a0:ec:
                    76:74:8e:b0:52:1d:86:04:b9:5b:79:1d:78:8b:25:
                    98:b7:e2:6d:a7:1c:a9:9a:fb:0b:28:92:41:a7:39:
                    49:bf:83:3a:44:1d:e3:96:77:96:af:c3:a9:20:68:
                    76:74:35:0a:1e:d2:25:16:76:85:b7:e9:7a:d3:b9:
                    a3:42:a8:0f:75:29:03:8c:2a:5f:90:a2:ea:7a:b5:
                    0d:2d:9d:04:e0:73:cf:cc:8e:9e:a5:b9:e1:96:06:
                    66:a2:7a:d2:0c:35:00:d7:c6:6a:91:8f:70:68:ba:
                    96:4b:a8:fb:63:6c:ba:30:fe:e9:ec:02:f4:a6:ed:
                    aa:12:f9:8c:68:f1:a3:1e:64:b8:98:31:1c:23:e4:
                    15:b5:30:9c:61:aa:03:d9:70:db:62:b4:a5:20:49:
                    64:f5:11:dd:9b:80:54:ad:b7:6f:d7:ee:13:7b:1c:
                    30:07:f1:5d:25:d9:8d:a5:ef:50:01:72:e7:eb:60:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B0:7D:BF:1B:85:37:67:0F:8B:B9:7B:AB:6B:0C:93:DC:58:1A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1fe27312-7931-391d-9136-0aaf304eb718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.30.32.0/23
                IPv6:
                  2001:550:1d06::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:49:6a:67:76:b2:f3:8c:38:f2:a5:e6:86:b3:56:57:9c:
         7d:09:f1:ed:4d:01:f4:ec:6b:e3:4e:2b:bf:94:2a:04:f2:60:
         52:13:b2:5a:5b:e5:3d:81:f1:0d:74:7c:95:06:8f:26:e8:e8:
         25:9d:42:b9:32:2a:a7:0c:03:23:68:38:b0:8c:b2:7a:69:83:
         d1:0b:75:92:0e:6a:8c:72:b7:b9:7d:36:78:ab:72:1e:49:08:
         b3:1e:ca:73:ae:60:60:2b:1f:4e:dc:cb:d1:a1:4b:34:eb:65:
         06:f4:2b:9e:d0:c0:a5:92:73:85:33:1b:21:73:f7:1e:55:9d:
         ce:c4:62:f4:23:6b:ac:cb:69:90:95:b1:e1:45:59:9f:40:a2:
         7d:d7:bd:2f:5f:c2:7c:8c:d8:d3:3a:bd:02:eb:7f:e9:a0:b1:
         76:7b:a3:51:14:db:3f:09:90:eb:a6:df:98:64:6c:4b:1d:b6:
         9b:20:0e:56:fe:76:1a:b5:a2:09:5f:58:38:e0:a1:f5:ae:d4:
         b8:71:70:d1:22:a2:d7:4d:46:41:8c:1f:76:fa:33:b5:b8:96:
         9b:f7:aa:e9:bd:30:a9:64:b4:f3:2e:36:f5:31:e4:9c:2a:61:
         e1:62:04:d6:b9:95:1b:30:ae:97:e6:8a:a0:02:aa:44:75:66:
         fb:93:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:13:58 2026 by rpki-client