Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/280b37f0-0c82-30f1-a8da-21582cca94c0.roa
File:                     280b37f0-0c82-30f1-a8da-21582cca94c0.roa (raw, json)
Hash identifier:          MVhME6l7tq9qYE3Uj65ffwU2B+/LrF2wCTn8yWePPAU=
Subject key identifier:   D3:ED:04:3B:64:99:E7:BF:E6:51:C2:75:3B:4A:0C:E1:60:AB:D5:43
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D4D5A9C19E54D8E8DEC5C9D00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/280b37f0-0c82-30f1-a8da-21582cca94c0.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     272030
IP address blocks:        149.46.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:9c:19:e5:4d:8e:8d:ec:5c:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=d8aed344-2b16-418a-a379-60dccdec5e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:f2:04:96:8f:b2:7f:0d:d8:3c:11:be:0d:
                    e5:89:d0:72:99:37:48:c3:48:20:c5:26:6d:5c:52:
                    dd:d7:26:f7:b9:34:bf:73:d5:a1:5b:3c:93:e4:ed:
                    a7:73:e7:ae:83:d5:1b:7f:d6:61:32:9f:bb:ec:79:
                    29:a9:91:1f:f3:7b:8e:e7:c5:b3:07:32:56:46:ba:
                    63:44:d2:d0:47:2d:5a:12:7a:61:21:fa:12:3e:e6:
                    30:4e:51:ba:2b:82:f0:bc:c8:d5:d6:ce:55:ad:87:
                    f1:d9:57:85:96:d2:17:a4:e5:78:55:26:ce:ad:f1:
                    b4:db:25:16:25:83:53:53:3c:36:0e:8f:bb:19:37:
                    f8:0d:4a:06:56:22:46:c2:6d:cc:bd:73:ed:37:bd:
                    6d:13:93:5c:2e:5b:74:4b:b6:73:45:ec:17:22:0b:
                    d7:09:0e:f8:0a:4b:48:ba:3d:3e:5e:04:3c:f2:fc:
                    2d:d8:7b:73:c1:b3:65:85:f9:0e:6b:b5:81:f5:67:
                    ce:97:be:84:58:4b:e5:7b:b0:67:d5:75:55:95:ab:
                    d4:a3:3a:31:6e:66:74:d3:de:7c:0b:56:b7:05:7f:
                    80:cb:0c:46:8d:5c:ab:e4:4c:ce:73:af:51:2b:e8:
                    15:29:78:f1:3a:c3:5c:ee:e2:dd:f6:92:7d:0b:cb:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:04:3B:64:99:E7:BF:E6:51:C2:75:3B:4A:0C:E1:60:AB:D5:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/280b37f0-0c82-30f1-a8da-21582cca94c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.46.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:34:f2:76:b3:79:8f:e5:15:25:7d:8a:de:5a:e5:51:04:6d:
         b9:86:48:e1:47:2b:2e:bd:d7:36:9e:71:d5:44:c9:66:ef:6e:
         f1:f8:2a:13:67:1e:42:89:f6:1f:b0:64:35:70:19:97:87:f8:
         50:ae:d1:ec:38:fe:84:e8:80:09:05:92:fd:18:03:e0:6b:5e:
         20:eb:4f:d0:bf:bd:b3:30:54:a6:37:23:fb:7b:96:38:95:ed:
         2b:a1:c8:4f:5c:13:0d:4e:75:0c:ee:c7:4a:2e:5d:12:c3:54:
         e2:f7:74:e5:9f:8f:f8:a1:d2:c7:40:da:3f:6b:54:b4:eb:83:
         cc:e2:fa:82:75:f8:dc:2c:4d:cf:63:8f:3e:45:e1:24:db:ff:
         ca:82:05:c0:6c:0a:7a:65:56:fd:ba:bb:21:9e:2b:6d:b9:3b:
         c5:e3:56:a9:0b:af:2b:82:e1:86:69:ff:a5:9d:68:c0:72:13:
         1d:64:55:ef:e3:93:dd:99:f8:01:38:42:5b:94:e3:f9:2c:b3:
         2a:a4:38:e9:fb:19:5f:dd:45:d6:39:ff:1b:ad:f0:d6:65:05:
         17:87:73:cd:db:1e:a5:0b:78:49:00:92:bc:7c:a3:dd:b0:f5:
         ce:4a:5c:7f:b3:58:25:bc:1e:cb:de:3e:d9:88:9f:f2:45:7a:
         c2:f3:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:15:24 2026 by rpki-client