Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a23a7a42-16bd-3df7-88f1-260d21a46e30.roa
File:                     a23a7a42-16bd-3df7-88f1-260d21a46e30.roa (raw, json)
Hash identifier:          7wBw1Xivd9371bIhyJC1NX0G84Te5cSfvTXI842r+Ko=
Subject key identifier:   52:61:95:80:D1:E3:86:52:D9:25:45:1B:F9:43:81:8C:01:F8:0E:10
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F46A7D843A9C1CC6FB9821500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a23a7a42-16bd-3df7-88f1-260d21a46e30.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     22869
IP address blocks:        204.157.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:d8:43:a9:c1:cc:6f:b9:82:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=7e9b6ff6-4e94-47d8-a018-f269ff56579e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:a0:2c:91:4d:de:77:8a:90:52:1b:2c:11:
                    a1:20:f1:cd:f5:30:23:e8:69:d6:56:7f:85:a9:33:
                    2b:0e:bb:26:b7:ad:b3:c0:0f:64:16:7b:18:87:5d:
                    cd:54:ff:2f:a4:36:83:64:d6:f0:85:96:82:83:1c:
                    aa:e1:f2:59:ba:8a:bf:3a:a1:9c:44:66:1d:28:78:
                    a3:fb:c2:9f:95:1c:f8:ab:b3:56:dd:13:45:66:ca:
                    15:97:51:c0:be:ca:6f:0e:08:f8:a1:21:aa:93:53:
                    67:d7:e8:2c:f5:ba:cc:db:14:bb:30:58:5f:05:0f:
                    fb:b0:e7:fc:6f:12:07:1c:d6:bc:9e:71:ef:ea:68:
                    82:ad:79:50:9b:23:32:f0:7c:70:04:79:9b:89:8a:
                    f4:a7:a5:15:05:83:25:80:8e:66:93:0b:2b:c5:55:
                    32:ef:76:09:cb:e9:2d:a5:1f:f6:d3:7b:66:c5:0b:
                    cd:b2:9b:fe:37:97:c7:74:8c:00:c3:07:62:1a:15:
                    11:ab:3f:71:41:53:51:63:78:6d:52:c7:22:96:ec:
                    dd:46:55:f7:04:59:be:33:44:31:8c:28:3b:68:78:
                    68:8f:bd:a4:52:ef:6f:03:12:4c:0a:38:63:8b:d8:
                    03:65:33:a8:d1:b3:ec:56:85:5c:ec:66:1c:9b:80:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:61:95:80:D1:E3:86:52:D9:25:45:1B:F9:43:81:8C:01:F8:0E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a23a7a42-16bd-3df7-88f1-260d21a46e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:93:d1:8b:f5:fb:31:c2:f1:d8:bb:eb:1e:28:ab:af:c0:
         cc:a2:9e:67:c1:11:3f:1e:76:51:69:a2:cb:5a:d9:f1:58:d6:
         01:08:90:35:10:48:cb:55:42:ce:4c:c5:a8:79:c3:eb:ab:45:
         e1:8d:6d:9c:8f:d4:44:1f:9b:49:09:da:bc:d2:f9:00:90:65:
         b5:21:04:58:5b:c4:18:e0:5f:b1:5e:59:73:22:27:fc:f2:d4:
         8b:c4:2c:96:1d:3f:6b:91:9c:11:8b:5c:1f:99:28:90:4d:b1:
         fa:28:3d:74:df:d9:59:f3:f0:f2:0c:26:17:1b:90:b5:ef:11:
         30:6c:eb:fc:ac:c2:f5:be:e2:99:55:c7:60:ea:d1:6b:1e:dc:
         0d:d5:64:fa:cc:08:48:51:d9:70:2f:a9:54:0b:27:42:6c:df:
         31:8f:17:0e:d6:32:02:bc:9d:32:8c:4f:f9:66:a8:c3:05:c2:
         f0:c9:88:40:1d:7f:7b:2a:a0:02:80:a2:18:73:e8:d7:82:8f:
         8a:f9:55:5d:57:38:d8:cd:99:56:6e:35:4e:6f:95:bb:db:f7:
         45:4a:82:e7:1f:7f:73:29:63:44:b7:97:2a:be:2e:1f:a2:4b:
         fe:80:92:a1:67:29:00:5a:9d:51:79:2d:c6:ea:f1:65:4b:fb:
         d6:d4:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:22:43 2026 by rpki-client