Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f01b5650-0228-3a8b-a024-0da74338c23d.roa
File:                     f01b5650-0228-3a8b-a024-0da74338c23d.roa (raw, json)
Hash identifier:          8RGgJUih0Io5v0RSRl45492Rn5iVSGBGlNWtwpr2ckI=
Subject key identifier:   E9:7A:E9:9B:DA:04:24:C1:27:AF:5E:66:3E:8B:9B:21:5C:49:07:99
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EDC91DAB386D60080021CCCC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f01b5650-0228-3a8b-a024-0da74338c23d.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     60501
IP address blocks:        149.86.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:da:b3:86:d6:00:80:02:1c:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=61374354-293c-4115-a56c-3419ec96d98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:da:1a:b5:be:f7:68:26:34:07:e0:fc:1b:
                    a7:5c:50:82:16:f3:d8:86:31:42:7e:0a:c5:a9:10:
                    0e:95:96:b3:ef:8d:7d:05:52:75:65:36:27:42:a6:
                    e2:b1:79:7c:93:8b:eb:41:a6:2a:22:c3:40:e6:1a:
                    9e:d1:7f:f4:87:69:17:7e:c9:ac:9f:e3:f4:00:0c:
                    d2:b5:09:3d:47:1c:94:f5:65:88:4f:51:8e:b8:50:
                    b6:6f:6e:38:8f:c0:59:04:40:f4:fa:7a:60:f4:3f:
                    71:83:48:03:b1:67:19:2e:3a:81:94:3b:2d:63:28:
                    0d:5b:ff:46:cd:84:e2:86:21:7b:3f:b8:24:cd:e6:
                    a2:99:7e:35:71:96:f9:6b:19:5d:d6:ac:73:03:35:
                    03:c8:22:b6:74:7e:80:d1:ba:d4:07:77:a1:60:ad:
                    68:d6:01:e6:b2:96:9b:5a:5a:dd:18:aa:53:26:8a:
                    9d:53:bd:b8:b6:a0:61:b8:3e:5d:3d:72:5f:ff:84:
                    a6:b0:fd:41:24:12:62:b1:d3:0f:28:92:9c:89:3d:
                    e5:8f:22:82:51:d7:dc:a3:d5:fd:dc:10:0b:be:ca:
                    af:3d:4e:38:d0:ad:1e:34:22:0d:a7:b9:02:36:87:
                    cf:dd:7e:9b:f9:2a:6e:d0:5a:e6:16:1a:bc:af:56:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7A:E9:9B:DA:04:24:C1:27:AF:5E:66:3E:8B:9B:21:5C:49:07:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f01b5650-0228-3a8b-a024-0da74338c23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.86.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:41:cc:81:ee:83:d2:2d:2f:31:ac:8b:2d:3f:84:1d:62:68:
         33:3a:49:3d:18:1f:c5:15:a0:a6:81:93:72:f5:dc:f7:54:85:
         d0:94:67:ca:89:c3:8f:ba:c4:55:b4:21:9a:a4:41:3c:c2:9e:
         22:4c:69:c3:4f:ac:64:f8:d0:5d:33:0f:a9:67:fe:21:4b:a7:
         17:95:5d:cc:95:7b:92:86:8c:09:46:e0:e6:39:e3:42:08:36:
         83:8c:a9:fe:28:59:1e:6e:f1:0a:de:eb:80:78:d7:56:2d:36:
         38:cd:3f:3f:dd:5d:a0:e0:b4:0c:ed:48:eb:2f:b4:5e:01:a7:
         17:63:33:f1:15:fe:74:b4:e3:8e:7b:31:1b:05:8c:7c:08:fe:
         ed:9a:89:e5:33:db:8b:46:38:83:eb:b2:33:b0:4e:91:1a:c6:
         80:e2:bd:80:82:07:61:10:78:a7:f6:06:5d:ab:1d:67:42:38:
         77:65:0b:b7:e5:0a:39:e6:b5:0d:89:0d:2a:5c:b2:2b:bd:47:
         cc:d5:f9:7c:41:50:4c:b1:88:d4:bc:a8:f3:ac:38:b5:41:bb:
         04:86:f4:f9:57:26:a0:fb:85:9a:b2:14:06:97:02:40:e4:6e:
         05:a6:4a:94:32:d1:68:9d:92:d4:24:fc:0e:13:2b:b0:97:da:
         7a:cc:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:33:49 2026 by rpki-client