Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/701027ec-c46d-339f-8ff6-fbfc2ff16c83.roa
File:                     701027ec-c46d-339f-8ff6-fbfc2ff16c83.roa (raw, json)
Hash identifier:          4Q3mqIdq+mTP5rgyEMte4oJftLSeUGP669FL2ohc+TA=
Subject key identifier:   ED:2C:22:A6:8A:AD:57:71:5D:68:D0:8B:6D:92:58:DE:C4:5E:17:2E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D44FA6953C54128A3519A5200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/701027ec-c46d-339f-8ff6-fbfc2ff16c83.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     203217
IP address blocks:        154.43.166.0/24 maxlen: 24
                          154.43.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:69:53:c5:41:28:a3:51:9a:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=b525d34f-9bb4-4c04-8573-1db468ff6782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:55:08:d9:b3:88:c2:d8:4c:3b:8a:e8:76:
                    fb:c3:3d:27:d7:ee:3e:24:8f:59:f3:e0:5e:78:d8:
                    78:90:23:88:c6:54:96:a5:76:ea:4c:11:aa:e0:b5:
                    04:54:6d:e3:51:0f:63:11:c2:a4:b5:59:1d:49:53:
                    49:ac:49:c5:3b:f2:54:9f:40:4b:02:57:4e:57:64:
                    aa:29:50:bc:f9:d3:af:cf:76:76:9e:08:22:9f:8d:
                    b5:b9:8e:f4:99:12:d3:90:71:8f:ec:ba:63:40:c1:
                    8e:e6:58:1d:d9:4b:90:f2:c6:4b:9e:02:dd:44:ef:
                    5f:66:2b:8c:dc:5d:51:47:7b:c5:d9:62:52:6b:06:
                    8e:53:fa:40:f6:1d:cc:51:83:6d:54:c8:8d:3b:6b:
                    7a:03:f4:8a:8e:cc:19:36:ed:0c:da:b3:fa:53:3c:
                    6c:d2:fa:6e:06:a3:4a:f5:b7:00:11:d0:63:62:d9:
                    96:e1:70:2a:99:19:4e:97:19:2d:6c:df:f1:7b:3c:
                    01:9e:23:07:2c:70:1b:a4:13:e8:14:e3:e8:43:04:
                    2d:e3:1f:c1:d5:09:b1:c4:25:3b:43:0b:0b:76:e2:
                    74:f4:a7:09:47:95:2a:95:e2:34:94:06:1d:73:48:
                    47:92:9b:dd:b3:bb:9b:8c:bb:ff:8b:1f:c0:bd:ed:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2C:22:A6:8A:AD:57:71:5D:68:D0:8B:6D:92:58:DE:C4:5E:17:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/701027ec-c46d-339f-8ff6-fbfc2ff16c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.43.166.0/24
                  154.43.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:50:4b:72:af:9e:0f:1b:3f:2a:09:20:8b:e2:ba:d2:fd:78:
         81:b2:95:79:2d:98:86:ad:29:23:fb:d8:f3:07:5f:1b:13:8a:
         0d:7e:13:ca:c3:65:60:80:66:c6:84:d2:6e:d8:8d:19:67:d7:
         d2:00:89:bb:44:19:60:03:84:94:08:8a:a3:48:dd:9a:62:44:
         53:2b:fe:77:46:11:08:33:93:b5:bf:29:d8:c4:c5:8a:fa:97:
         9c:cc:ac:56:f7:7e:a9:6d:24:50:5f:1f:75:c4:f1:8f:51:84:
         80:ef:ef:18:31:8f:98:1d:fe:b3:7c:fa:a4:b0:d1:ed:40:11:
         5e:03:82:83:18:63:94:b4:2c:f2:dd:c0:a1:7f:ca:13:75:d2:
         76:c3:49:28:5e:18:f3:5b:a6:14:df:13:6d:d4:8b:45:26:c0:
         35:37:22:65:93:2f:e2:a0:fd:bd:87:71:d1:89:1c:2b:3c:40:
         ef:e8:3d:b7:18:e4:de:c4:da:21:81:38:39:06:6b:c3:a5:3b:
         ae:41:62:69:48:4d:b9:eb:0b:13:36:87:41:30:15:f3:a1:8e:
         05:b5:b3:c0:a4:b0:52:05:3f:d9:90:0a:4c:b2:1f:43:36:3f:
         e4:2e:55:fc:77:1e:a0:85:45:d8:0f:81:98:3a:6e:98:9c:3a:
         1b:92:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:58 2026 by rpki-client