Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/79688b25-0b06-3070-aa7c-a158b1883fe6.roa
File:                     79688b25-0b06-3070-aa7c-a158b1883fe6.roa (raw, json)
Hash identifier:          Dc5bTyEeXsoWk4HA7OUNySIFQw0eC51eE+rxDfhvV9A=
Subject key identifier:   BA:1C:ED:B4:C2:87:DA:DB:29:7A:59:89:76:D1:F2:49:FF:F9:44:E7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E92C9E261C5512008508A7D68
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/79688b25-0b06-3070-aa7c-a158b1883fe6.roa
Signing time:             Tue 21 Jul 2026 14:43:18 +0000
ROA not before:           Tue 21 Jul 2026 14:43:18 +0000
ROA not after:            Mon 19 Oct 2026 14:43:18 +0000
asID:                     211484
IP address blocks:        154.6.60.0/23 maxlen: 24
                          154.6.193.0/24 maxlen: 24
                          154.6.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:c9:e2:61:c5:51:20:08:50:8a:7d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 21 14:43:18 2026 GMT
            Not After : Oct 19 14:43:18 2026 GMT
        Subject: CN=6bc22213-2ff6-4d79-be2d-60fd95b076ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:92:bd:bc:54:4c:7d:cf:d1:02:c2:89:5f:
                    7f:a2:1d:e5:1e:f3:3a:85:d5:f1:fa:fc:82:76:55:
                    dd:4f:dc:a2:fb:96:00:fa:ae:cb:18:35:28:24:c6:
                    81:4b:63:b9:e4:48:af:19:26:b4:b5:65:6e:2d:5b:
                    14:bc:aa:6f:81:bf:9c:c5:78:e3:e4:a6:1a:56:19:
                    9c:3d:de:cb:18:71:6d:b6:9c:0a:2b:48:98:d1:db:
                    7f:73:e1:ca:22:2e:60:db:57:cf:6b:9c:ba:03:ec:
                    dc:c4:52:b9:35:49:b1:96:96:c4:5e:6a:65:d2:6f:
                    6a:c6:00:3c:97:f2:63:f7:06:b0:89:c8:e4:51:57:
                    f7:db:6e:6e:0e:1e:4a:0c:0d:07:ef:48:65:fc:dd:
                    65:d3:21:0f:d7:f2:f8:bf:6e:cd:89:87:51:33:dd:
                    ad:33:3a:79:dd:86:64:d6:22:8c:43:45:e2:44:bb:
                    d3:61:fe:2b:6d:46:5d:a4:c0:c6:86:80:50:ab:ef:
                    7e:90:f8:fd:e7:57:e0:b8:0a:63:36:f8:7e:d7:21:
                    19:ec:d3:b0:ef:98:f8:1c:bb:33:16:90:2c:f5:23:
                    b0:01:1b:e8:56:b5:f3:77:ae:04:c2:d4:73:0b:1d:
                    9f:ce:89:24:6c:bd:a8:d6:bd:a3:34:4a:3c:14:61:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1C:ED:B4:C2:87:DA:DB:29:7A:59:89:76:D1:F2:49:FF:F9:44:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/79688b25-0b06-3070-aa7c-a158b1883fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.6.60.0/23
                  154.6.193.0-154.6.194.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:ce:eb:76:51:69:56:db:a9:56:79:d4:4a:9b:3e:c5:82:c6:
         58:b3:92:15:08:12:5a:32:30:73:cd:92:cf:f2:e2:53:06:d5:
         45:4b:5c:b6:74:0b:40:f2:cd:96:4d:11:91:86:ed:43:69:b3:
         89:e5:a6:b4:22:bb:18:30:fc:75:e3:85:dc:1e:71:19:06:d0:
         a3:64:d4:d8:fd:26:79:59:c7:3a:79:2f:7c:50:43:ee:06:87:
         37:2b:d9:13:61:e7:15:8a:96:16:75:35:d2:db:94:66:e4:77:
         df:f3:1e:17:b6:bc:95:be:08:9f:fa:91:e8:bf:93:da:af:57:
         e3:1e:d6:42:a4:52:1a:5c:22:bd:e1:dd:7c:97:1f:50:f5:57:
         b1:ae:ce:cb:2d:c0:35:93:d2:02:cc:26:f7:31:f6:f1:52:f6:
         e3:8c:0b:cb:0e:b8:7c:59:43:22:ee:23:0b:9e:4e:3c:65:51:
         42:61:07:ed:bd:d3:54:82:cd:28:64:0d:d7:09:c0:93:ac:a8:
         48:90:37:d4:2c:c2:70:d1:aa:5a:e9:4e:ab:7e:e5:16:62:88:
         41:8d:ab:42:17:99:11:58:02:65:3a:d1:c9:e3:82:4a:5a:dd:
         b9:e2:1b:cf:2d:56:95:dc:3b:d6:a3:f4:41:f8:26:e4:b5:7a:
         b6:a7:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:41 2026 by rpki-client