Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/54a62362-8715-3a48-8d28-30e354286410.roa
File:                     54a62362-8715-3a48-8d28-30e354286410.roa (raw, json)
Hash identifier:          dQfEaoOXsMZ4qWgNMK3dmh8YyATCKxymdhfd4ZIRV3I=
Subject key identifier:   E9:C3:E4:4A:D2:BE:99:4D:83:C7:CA:79:1C:1F:17:0C:78:3F:89:F9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E4CD59569F24B985D43815200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/54a62362-8715-3a48-8d28-30e354286410.roa
Signing time:             Fri 26 Jun 2026 13:20:17 +0000
ROA not before:           Fri 26 Jun 2026 13:20:17 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     263801
IP address blocks:        149.46.8.0/21 maxlen: 24
                          149.78.32.0/19 maxlen: 24
                          149.107.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:d5:95:69:f2:4b:98:5d:43:81:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 26 13:20:17 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ef0bd3e4-b4bf-4ea2-9764-ec84b4dea849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:41:6a:0c:aa:d2:22:48:f1:ff:cb:c3:ba:
                    15:ec:00:bb:26:1c:77:4a:12:3b:ad:d5:3a:98:bd:
                    dd:96:95:04:06:32:dc:45:3d:ae:77:fc:fa:d9:a8:
                    dd:6e:8b:46:a4:2f:f7:d5:26:4e:48:cc:ab:26:16:
                    d1:65:0a:3d:2a:8a:8d:19:55:7a:af:94:04:a9:d1:
                    1f:e1:a8:5b:93:73:d4:2e:06:61:24:05:18:c0:e2:
                    fd:3d:99:6d:90:d7:17:46:d1:c3:6f:2c:14:6f:81:
                    bc:13:89:0d:81:9e:79:e1:f1:05:d3:a5:32:bc:ee:
                    da:89:8d:11:3e:8d:95:0c:93:42:53:51:c9:2a:19:
                    85:6e:76:e4:a4:f2:3b:3d:7f:20:cc:57:a0:64:f1:
                    b9:80:d0:e7:9a:8a:b1:91:40:d3:c0:d0:a4:81:40:
                    bd:97:84:37:d4:6b:25:5b:99:c8:4f:b9:b6:57:5a:
                    b1:3a:2d:d4:d6:35:0d:51:a2:01:25:31:5c:57:6f:
                    ce:47:c0:e4:06:a5:59:cd:8b:d0:c6:fe:f3:1d:78:
                    fc:7b:e8:6f:58:01:39:dc:03:bb:37:98:3f:53:e5:
                    48:05:85:d2:6d:f0:51:3c:ba:08:fe:1d:3b:da:ae:
                    63:7c:b6:37:ed:1a:b7:d3:9b:2b:1b:f4:ba:c9:b4:
                    06:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C3:E4:4A:D2:BE:99:4D:83:C7:CA:79:1C:1F:17:0C:78:3F:89:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/54a62362-8715-3a48-8d28-30e354286410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.46.8.0/21
                  149.78.32.0/19
                  149.107.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:39:4e:f0:f5:86:68:81:f7:0a:6e:8e:6d:d1:64:b4:31:55:
         ea:07:32:fe:28:ef:d1:c5:24:b9:e7:df:60:71:cd:4e:b5:a1:
         80:b9:37:2c:f9:45:d7:85:5e:81:81:e9:ac:81:8f:72:eb:41:
         09:b6:d1:dd:2d:85:5a:cf:30:1a:c8:fb:4c:01:a4:2c:4f:7d:
         8c:10:41:95:76:3c:f0:e1:aa:2f:c3:37:12:7b:77:03:1e:98:
         c0:c0:81:27:4c:af:a2:90:18:3f:59:df:68:cd:0f:68:84:e2:
         1c:7b:2a:a8:c6:92:8c:c7:5b:28:28:c3:37:a7:a8:01:74:9f:
         ab:4b:2d:0f:cd:bf:b1:14:d8:9b:73:bd:cf:bd:46:df:3f:4c:
         b6:64:22:90:22:b5:8e:a9:48:a2:75:f5:16:57:54:70:72:c7:
         91:67:a6:a2:09:36:18:26:3c:6e:65:ac:1e:41:5a:1c:2d:09:
         6b:e4:ae:61:44:8b:29:47:69:d3:18:34:92:71:92:08:7b:3f:
         8f:9b:54:a4:a7:e1:56:92:8b:d5:5b:93:ae:f3:fe:de:38:38:
         79:2d:f6:ec:aa:f8:c1:f6:8f:ff:d4:91:38:58:ad:6a:3d:d8:
         f8:a5:01:7e:61:7b:3b:72:1d:82:29:17:17:7f:f4:79:79:a2:
         e0:dc:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:42 2026 by rpki-client