Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ff1c334-0d40-3926-89b1-773aab620acf.roa
File:                     4ff1c334-0d40-3926-89b1-773aab620acf.roa (raw, json)
Hash identifier:          iZ5+BPB/XIbZb5AdrJZ944WSOfHrFk4VCfVwp1M1Vkw=
Subject key identifier:   BE:DA:2C:5C:59:E7:51:BA:01:36:EC:2F:14:A0:69:96:44:00:29:8F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DC565C1CC3CEBB8FC1AE31880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ff1c334-0d40-3926-89b1-773aab620acf.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     201749
IP address blocks:        154.38.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c1:cc:3c:eb:b8:fc:1a:e3:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=9bf1686a-a46e-4e82-806d-04f710960bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:56:28:33:fe:86:9c:bc:c8:73:7d:e8:6d:
                    8d:c0:4c:79:cf:76:47:4f:1c:12:6b:6e:d1:3a:c7:
                    8f:28:0c:ba:1a:1b:1d:6e:c8:55:ce:95:c7:8e:7e:
                    9a:a6:86:de:a8:f6:50:f5:ee:46:57:96:24:e3:a4:
                    36:f9:76:14:29:fe:e1:19:55:66:3c:91:be:6b:03:
                    f6:e6:4c:2c:32:c9:27:7f:0d:c5:d1:0d:71:85:42:
                    bc:df:48:62:b1:ef:5c:9d:45:1d:4f:e9:cd:c1:41:
                    14:01:0c:5b:b7:15:bd:8e:bf:a1:67:ad:4c:32:e2:
                    bf:16:d6:51:e0:2c:ba:34:a0:7c:38:2f:d0:7e:55:
                    7f:29:96:6b:e1:77:e3:28:2a:6e:9b:67:33:f6:f5:
                    75:95:53:aa:5a:be:96:15:a1:d9:79:e0:8a:b9:cc:
                    a3:fb:3f:23:26:be:7c:37:27:da:77:70:09:e2:d2:
                    30:ac:f8:e1:2f:5c:93:50:9f:d4:27:5c:58:fd:53:
                    67:84:26:cc:1f:0a:15:ee:50:b8:a6:ea:85:ad:8b:
                    ae:ea:d5:a1:56:81:e0:cc:a5:f1:41:6a:f4:c7:95:
                    28:45:2c:09:13:36:07:77:3d:2c:ba:91:41:9a:7f:
                    5b:9e:90:a4:30:5d:5d:fe:ad:90:e0:a6:db:af:e3:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DA:2C:5C:59:E7:51:BA:01:36:EC:2F:14:A0:69:96:44:00:29:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ff1c334-0d40-3926-89b1-773aab620acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.38.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:5f:16:74:2e:d9:b8:6e:37:bf:28:28:54:3b:d8:f7:82:
         d1:93:58:f3:29:95:83:f5:51:9a:5b:29:3c:ed:4b:60:66:f5:
         14:43:84:bc:5e:85:fe:a8:61:88:ed:c5:df:40:1b:98:a1:ee:
         21:53:ea:d6:b8:5f:49:12:e9:b2:67:67:19:4e:e3:ec:e5:9f:
         b6:72:e3:66:ba:08:80:fd:cf:61:0b:5f:cf:15:fd:fa:18:fe:
         76:92:65:e8:c4:99:e5:6a:c7:cb:62:c6:94:e4:ba:d6:6a:1d:
         28:03:e7:5b:9c:b8:8d:b1:1f:d6:19:20:14:6d:cc:ba:c6:f6:
         f7:fe:ea:2c:86:22:91:72:a7:1d:57:39:dd:ae:2f:d9:ac:1c:
         b4:24:c9:16:6d:8a:b4:ed:59:d1:13:80:c7:9a:f3:d3:20:72:
         ec:5d:aa:14:07:de:96:30:3c:ce:8c:7a:bc:6b:2b:7e:f6:f8:
         04:0b:94:9a:bf:0a:80:4f:78:2f:a6:ab:e4:6c:99:38:72:78:
         91:3f:2e:a3:02:2d:d4:c5:8d:53:dd:06:3e:ab:c2:a1:c7:7a:
         80:b3:ef:f2:e9:83:d1:ea:53:bc:90:a9:57:d8:1d:1e:e0:90:
         ad:5e:3b:82:c5:ea:f3:0a:95:77:39:9f:97:96:10:cb:b4:2f:
         96:fa:99:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZcHMPOu4/BrjGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
OWJmMTY4NmEtYTQ2ZS00ZTgyLTgwNmQtMDRmNzEwOTYwYmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFpWKDP+hpy8yHN96G2NwEx5z3ZHTxwSa27R
OsePKAy6GhsdbshVzpXHjn6apobeqPZQ9e5GV5Yk46Q2+XYUKf7hGVVmPJG+awP2
5kwsMsknfw3F0Q1xhUK830hise9cnUUdT+nNwUEUAQxbtxW9jr+hZ61MMuK/FtZR
4Cy6NKB8OC/QflV/KZZr4XfjKCpum2cz9vV1lVOqWr6WFaHZeeCKucyj+z8jJr58
Nyfad3AJ4tIwrPjhL1yTUJ/UJ1xY/VNnhCbMHwoV7lC4puqFrYuu6tWhVoHgzKXx
QWr0x5UoRSwJEzYHdz0supFBmn9bnpCkMF1d/q2Q4Kbbr+OP6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7aLFxZ51G6ATbsLxSgaZZEACmPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGZmMWMzMzQtMGQ0MC0z
OTI2LTg5YjEtNzczYWFiNjIwYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmiYUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvCXxZ0Ltm4bje/KChUO9j3gtGTWPMplYP1UZpbKTztS2Bm9RRDhLxe
hf6oYYjtxd9AG5ih7iFT6ta4X0kS6bJnZxlO4+zln7Zy42a6CID9z2ELX88V/foY
/naSZejEmeVqx8tixpTkutZqHSgD51ucuI2xH9YZIBRtzLrG9vf+6iyGIpFypx1X
Od2uL9msHLQkyRZtirTtWdETgMea89MgcuxdqhQH3pYwPM6MerxrK372+AQLlJq/
CoBPeC+mq+RsmThyeJE/LqMCLdTFjVPdBj6rwqHHeoCz7/Lpg9HqU7yQqVfYHR7g
kK1eO4LF6vMKlXc5n5eWEMu0L5b6mR8=
-----END CERTIFICATE-----
Generated at Wed May 13 11:02:14 2026 by rpki-client