Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d63ef12-1a2a-308a-91e3-b569d356bea1.roa
File:                     2d63ef12-1a2a-308a-91e3-b569d356bea1.roa (raw, json)
Hash identifier:          ivBdlJSU6gZK4Yel33py70Ak3FgosaARwy566yTf6Ow=
Subject key identifier:   FC:CB:72:7F:11:CF:73:57:DD:D8:85:36:4D:9D:E5:9A:D8:70:19:8B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DA839D69591464BED9E268F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d63ef12-1a2a-308a-91e3-b569d356bea1.roa
Signing time:             Tue 28 Apr 2026 14:13:55 +0000
ROA not before:           Tue 28 Apr 2026 14:13:55 +0000
ROA not after:            Thu 16 Jul 2026 14:07:48 +0000
asID:                     34927
IP address blocks:        149.18.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:39:d6:95:91:46:4b:ed:9e:26:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 28 14:13:55 2026 GMT
            Not After : Jul 16 14:07:48 2026 GMT
        Subject: CN=f0f09c15-9dbb-4381-8897-ba4429ac7245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0c:de:89:da:64:06:b3:bb:20:ae:a1:f6:1b:
                    b3:c9:5b:f7:b1:32:8f:85:a9:3e:d1:88:ba:49:c0:
                    30:3f:f4:a0:6b:e1:c3:0a:4c:51:26:12:92:04:ad:
                    12:33:24:b9:ec:96:35:e3:59:15:ad:35:53:7f:0f:
                    4d:de:2d:4d:eb:27:b6:ca:94:c0:8b:de:8e:04:7f:
                    4e:eb:a8:ba:b6:8a:48:b4:1c:0c:65:35:0b:36:3a:
                    54:ac:0d:b9:6e:fe:78:6b:5c:68:4f:33:33:9c:90:
                    8a:50:15:56:0b:8d:a5:d6:5c:19:c4:6e:a0:b4:80:
                    40:94:c2:67:82:b6:e8:da:43:9d:48:9a:b4:98:17:
                    5f:f1:b3:fc:7c:b9:00:70:cf:3f:55:8b:34:52:26:
                    fd:ce:26:29:54:2c:0a:bd:ec:6e:50:0c:39:4b:ca:
                    76:66:76:e3:42:a9:00:a6:c5:03:52:a5:0f:26:c3:
                    76:b7:18:e7:2d:1a:39:46:96:45:c5:91:ad:5b:d1:
                    7a:62:42:53:62:4d:b0:63:85:2e:85:64:8b:bc:71:
                    6d:26:1f:7a:d0:7a:0b:f4:1a:db:1c:8b:ce:8f:cd:
                    00:ec:a4:b4:2f:13:8e:05:7e:d0:64:1c:74:b9:2c:
                    9c:15:00:2b:45:62:44:87:da:e3:62:87:76:21:3d:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CB:72:7F:11:CF:73:57:DD:D8:85:36:4D:9D:E5:9A:D8:70:19:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d63ef12-1a2a-308a-91e3-b569d356bea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.18.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:fb:2e:d9:77:d4:22:92:8a:ae:6e:b1:c0:1a:63:ec:f6:
         fd:38:bb:05:d7:97:0f:80:27:d9:98:6c:75:d8:db:68:51:80:
         8a:6f:57:c9:f3:cc:c4:78:72:b7:68:de:2d:74:ab:f9:df:ca:
         3e:98:c7:4b:ae:15:84:e0:71:3f:d3:a7:24:cf:ff:8d:0f:c3:
         a0:06:3c:d0:ef:df:e4:0c:2c:af:14:8b:f5:70:70:97:a7:21:
         02:3e:26:3a:ce:76:6f:dc:e3:d5:f0:24:9b:0f:cf:2c:2b:53:
         5b:3f:98:2b:1f:2e:bc:dd:ac:9e:18:08:7b:2c:aa:85:f8:51:
         d0:cc:0d:7d:af:f1:dd:0f:0f:5c:8f:97:bf:76:0c:54:26:da:
         0d:1b:aa:7e:1d:cd:3d:c3:d0:48:b7:bc:e6:26:89:ed:67:13:
         b0:32:93:c2:43:e7:a7:cb:f4:04:95:9f:62:69:e7:57:67:3f:
         96:18:ae:c3:04:50:86:57:16:87:5b:4a:c0:2b:a7:be:3b:fb:
         ec:4c:06:ef:79:64:46:dd:39:6f:06:24:69:fe:e2:6c:5d:5f:
         50:1b:a9:a5:18:4f:6a:1c:d9:f6:99:09:67:0f:36:3f:a1:c8:
         29:67:1e:f4:c0:bd:a0:f8:52:42:5a:8e:d4:8e:a4:6d:db:8b:
         db:6f:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:36 2026 by rpki-client