Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e91888a1-f875-3c69-805d-6d89b435e829.roa
File:                     e91888a1-f875-3c69-805d-6d89b435e829.roa (raw, json)
Hash identifier:          ibykFqBr4wB2LkWGaIzQEK8etl1uZREFuK85berlHtw=
Subject key identifier:   F9:C1:4F:6A:46:70:99:7F:68:6B:D8:CA:43:2A:77:5B:66:D2:E0:B3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4974961BB7E737F953655B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e91888a1-f875-3c69-805d-6d89b435e829.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        149.12.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:96:1b:b7:e7:37:f9:53:65:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=43b1b191-724b-408f-967c-6352ddc0c0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:6f:31:c0:95:70:cb:d6:39:a5:0d:67:dd:
                    25:28:9e:a6:56:78:15:0a:8e:18:82:8e:58:80:05:
                    b1:27:6c:d5:ab:64:9b:76:61:ac:cd:a3:65:7c:07:
                    d6:02:40:ae:93:3c:79:33:62:6e:9a:ae:b7:d4:61:
                    36:1d:04:76:2d:c5:ac:37:f4:95:a2:5d:b8:89:63:
                    2e:dc:8f:1c:8e:d5:16:12:e5:21:78:79:9f:74:26:
                    3a:ef:bf:d4:6b:8b:ff:1d:9e:8f:4b:56:2f:12:33:
                    c0:87:f1:80:d5:86:86:f8:40:94:f5:7b:1b:83:57:
                    aa:56:f3:b4:c1:be:0a:c2:79:20:86:18:c3:de:89:
                    42:b1:ad:d9:2d:59:c0:e2:51:3a:c0:b9:1d:c1:ad:
                    33:36:97:2c:b0:8a:a7:c4:c1:ae:a4:15:2c:d5:68:
                    72:c5:18:60:a8:25:23:6f:03:2a:20:49:b0:1f:9a:
                    ac:94:94:7b:89:fa:b9:c2:02:d3:79:1a:61:b2:c5:
                    be:2b:fa:a5:5f:95:6c:07:6d:54:71:0d:a3:64:63:
                    ff:c7:a1:50:aa:fe:5c:f9:2b:fb:53:a1:96:82:45:
                    21:19:dc:49:d0:68:44:a6:7b:a1:1b:b7:fa:47:25:
                    6e:b1:d8:08:59:4e:ca:87:59:77:7b:6d:a0:f9:ff:
                    bf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C1:4F:6A:46:70:99:7F:68:6B:D8:CA:43:2A:77:5B:66:D2:E0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e91888a1-f875-3c69-805d-6d89b435e829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.12.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:a2:f5:57:6a:a0:4a:3f:c7:72:9d:79:dd:62:4b:a9:1f:
         a5:70:ac:22:d5:99:f5:63:3b:fe:1f:ed:98:a9:ab:4a:91:6b:
         c5:e8:57:9b:9f:63:fb:dd:0f:de:a8:99:5b:75:f2:f0:87:cd:
         d9:10:d4:50:02:9c:d5:6a:9b:bd:11:f6:b6:23:0c:0c:60:17:
         ba:23:c7:66:1a:80:69:ea:60:21:cf:99:7c:5b:bd:ea:af:51:
         e9:fe:ba:2a:72:1a:38:9d:79:ce:dc:b6:46:16:39:4f:79:d1:
         b6:35:b2:5b:ac:cf:d3:fd:fd:93:2d:88:2f:98:c5:e7:83:b8:
         08:40:bb:9b:1f:bf:2e:72:98:88:c8:98:86:d8:f5:72:0b:79:
         79:35:21:14:59:ac:76:13:19:f6:52:82:61:cf:63:91:59:f6:
         a7:e3:33:10:e7:97:5f:ac:45:e7:29:8f:ae:2f:e1:02:c9:ed:
         ee:27:b8:84:de:d8:69:64:97:ec:34:94:e0:d0:83:1e:fc:0b:
         c8:ca:f9:6c:2d:81:1c:13:a8:de:0c:95:e5:d7:9b:77:94:3d:
         18:56:1f:95:4d:4b:b0:f4:85:c3:c8:67:b8:29:11:4a:97:94:
         58:9a:33:a9:18:20:0b:2e:6f:99:fc:08:c6:15:26:ba:fd:fa:
         9e:9c:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:15:33 2026 by rpki-client