Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/deb492f8-45c6-3f22-b4ab-09ff2cfa079c.roa
File:                     deb492f8-45c6-3f22-b4ab-09ff2cfa079c.roa (raw, json)
Hash identifier:          GiNZmNgU1qID6hGrkC2iRZ6eXcUYS0ghCnZYcHJqM5E=
Subject key identifier:   EE:65:9F:B6:69:A6:83:4C:F9:15:A3:8E:2C:B7:C1:1B:26:37:61:27
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E90327CD7714F548C70029400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/deb492f8-45c6-3f22-b4ab-09ff2cfa079c.roa
Signing time:             Mon 20 Jul 2026 16:26:38 +0000
ROA not before:           Mon 20 Jul 2026 16:26:38 +0000
ROA not after:            Sun 18 Oct 2026 16:26:38 +0000
asID:                     274308
IP address blocks:        149.78.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:32:7c:d7:71:4f:54:8c:70:02:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 20 16:26:38 2026 GMT
            Not After : Oct 18 16:26:38 2026 GMT
        Subject: CN=ad1b44f3-f0a2-4f4c-948c-1c3477a36111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:06:8d:64:f2:78:b5:40:d9:cc:55:a2:16:
                    57:68:8f:35:39:74:b7:ec:a1:99:75:3d:99:cd:9f:
                    54:fc:c1:bb:cb:5e:ee:48:62:9e:b9:89:7d:2c:a9:
                    52:9d:a6:d6:de:d3:75:b0:39:2e:e0:7f:e9:4f:b5:
                    f9:1b:98:6e:00:c5:5b:80:5e:7d:30:9a:7e:b6:4c:
                    f4:e0:72:84:70:39:50:32:f8:7a:db:7b:7b:c9:64:
                    71:73:0f:bb:af:bf:a9:e3:20:34:f3:6d:bd:95:85:
                    6f:f1:c3:55:9a:f0:a4:a2:42:8c:f7:22:c0:59:b8:
                    12:37:71:14:d7:81:76:14:b5:f5:27:7b:48:f7:64:
                    25:cb:bc:a9:4b:1e:cd:b7:90:3c:1d:ea:69:14:90:
                    a9:55:64:5a:ca:94:eb:f2:ac:85:dd:d3:af:01:a0:
                    de:93:23:a4:8f:8c:a9:eb:96:3d:98:0b:b7:fa:e3:
                    ec:18:9e:8f:ef:9d:bd:c5:5c:ed:d8:2c:25:b9:e4:
                    bf:5e:93:b2:cd:49:91:be:a5:36:a9:f1:5e:0d:4e:
                    75:a4:41:4e:e0:81:08:76:8a:0e:f9:f4:d4:13:d5:
                    05:d9:de:2f:d2:03:68:93:d5:53:b7:42:bb:72:93:
                    dc:98:ab:75:0c:62:4b:17:97:a3:6c:be:9e:e0:5a:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:9F:B6:69:A6:83:4C:F9:15:A3:8E:2C:B7:C1:1B:26:37:61:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/deb492f8-45c6-3f22-b4ab-09ff2cfa079c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.78.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:c1:fd:f1:bf:cd:07:e4:61:8f:9b:ad:bd:54:9a:bf:00:44:
         93:09:dc:b4:69:83:82:ea:1c:52:e8:37:ea:db:f8:5b:bd:d8:
         dc:fb:3e:87:6a:2a:64:98:76:1e:64:46:5a:c1:9e:a2:15:0a:
         df:61:c2:2a:5a:c1:1a:3e:dc:de:71:dc:3d:37:49:99:6c:1f:
         81:39:38:4c:8c:18:ae:2a:5d:02:2e:c6:e5:37:1a:40:65:69:
         0d:cb:d2:47:f8:5e:f1:2e:2d:4a:39:4a:54:15:b9:da:dd:28:
         c3:8f:dd:69:c2:76:e3:77:78:7d:b4:3e:af:d7:8a:c8:10:df:
         57:69:71:09:eb:19:54:4f:17:a9:a0:80:84:15:1d:f0:5e:11:
         92:87:e9:6a:62:2d:a3:37:a4:47:b9:80:df:b4:8b:3b:84:63:
         ce:40:fc:e6:43:81:1b:ea:9e:c9:4a:c3:6e:75:9a:b5:9b:e1:
         af:40:1a:49:d3:e2:cd:6c:d8:68:3c:60:1f:29:44:7c:30:59:
         1b:1e:bd:44:9d:e3:f1:8e:be:5e:b4:d9:ee:9c:2f:84:86:2e:
         cc:06:35:f3:d7:87:8b:85:20:b0:76:e2:eb:39:4f:42:f7:be:
         5c:f7:7c:3b:ab:cd:82:b5:73:62:5c:64:a1:3f:4b:dc:b0:d6:
         4e:e2:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:55 2026 by rpki-client