Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d4b6512-2087-3038-a178-02a39b6ae9a4.roa
File:                     6d4b6512-2087-3038-a178-02a39b6ae9a4.roa (raw, json)
Hash identifier:          BMQqNr6sMFatDv33cZ/vm4CDBxmSc0YOGY5F98qKQlk=
Subject key identifier:   87:83:AC:15:C0:66:AD:8C:63:3D:50:7E:75:20:F4:5B:F4:B5:79:5E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DCAFB1CAB13B70CFA8FC96500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d4b6512-2087-3038-a178-02a39b6ae9a4.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     3170
IP address blocks:        154.51.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1c:ab:13:b7:0c:fa:8f:c9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=5c676259-8ecb-4475-b716-3918660500de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:1b:26:5f:7a:76:8f:f7:c1:fb:49:c0:3a:
                    a1:88:91:02:19:8b:38:89:33:83:2b:a0:4c:ec:2f:
                    a5:a2:2e:2a:e4:4f:4f:20:67:49:a9:69:ad:1f:1e:
                    9f:ec:79:3c:48:6b:44:19:26:bf:0f:18:20:82:4f:
                    54:c1:32:87:4b:f8:a4:c1:ca:be:7c:ae:f9:ca:99:
                    5d:4f:59:90:7a:93:42:2e:11:3c:19:d6:b9:e1:89:
                    11:cf:93:58:1e:c2:fb:32:61:53:62:7c:bf:b4:40:
                    5c:da:9c:6e:f3:ea:5a:cc:0f:ae:ed:8f:cf:ab:2e:
                    af:42:c7:26:26:a5:1a:99:5f:a5:3d:98:a1:28:3d:
                    04:5d:e4:13:49:d3:30:ce:df:d3:a1:06:9f:1e:53:
                    31:0d:44:35:f0:82:18:63:9f:6e:10:9a:fc:5f:eb:
                    5d:31:0a:02:a4:19:ff:63:e8:bb:88:df:ef:1a:2a:
                    87:2c:be:58:f1:2e:bc:72:4d:cf:bf:90:d3:fa:40:
                    b7:50:2f:6a:dd:93:5a:03:dc:35:4f:91:0b:c1:ab:
                    7d:d2:d0:91:c6:cc:a6:f3:12:4f:40:eb:83:d4:03:
                    3b:cf:19:9c:93:ec:a1:fe:7c:3f:da:6f:5b:46:95:
                    6c:22:f2:48:3a:e1:f8:63:3d:75:2d:cc:03:6d:35:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:AC:15:C0:66:AD:8C:63:3D:50:7E:75:20:F4:5B:F4:B5:79:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d4b6512-2087-3038-a178-02a39b6ae9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.51.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:13:a1:25:92:81:c4:4c:f9:bd:89:95:45:e1:7b:99:9d:
         89:0a:2c:c8:e0:80:d0:cf:89:59:42:85:b4:a1:9d:ea:b4:17:
         e5:6f:f4:ed:a7:69:74:ea:5f:6f:54:a0:eb:01:87:29:3b:b8:
         e3:07:cd:38:ac:2f:09:56:18:ca:96:9c:65:97:d5:89:d9:4c:
         fe:65:00:6f:1d:1f:3c:6c:e7:83:c4:e6:73:19:22:9e:d9:81:
         52:5f:11:5e:59:e5:b6:f7:1d:df:9a:4d:0b:33:80:d3:79:d1:
         13:8e:29:d3:5e:f1:54:37:16:3f:b2:1f:ea:a5:22:87:25:d7:
         35:5e:db:75:3f:e1:38:93:3c:0b:01:9a:e0:77:ae:68:fd:b2:
         c5:eb:53:9b:13:e6:49:50:62:a7:6d:28:20:78:3f:57:97:90:
         58:f1:fb:59:c0:b3:ba:91:b8:21:06:48:33:f6:6d:fc:37:c7:
         81:8c:2b:88:24:0c:bd:07:e9:4f:65:88:92:ac:11:d0:f9:7c:
         27:53:aa:a6:7b:7e:83:78:51:4c:4a:2f:d8:ec:3b:e6:1a:8c:
         fa:78:3e:7f:5f:c6:41:6a:56:6d:04:68:10:70:2b:24:59:22:
         57:55:e9:ea:ae:9a:0f:b5:2c:b7:b0:10:c6:94:ed:90:c7:47:
         f9:b5:26:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:12:32 2026 by rpki-client