Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e5ec785-59eb-3cba-a077-f9635ab2e069.roa
File:                     3e5ec785-59eb-3cba-a077-f9635ab2e069.roa (raw, json)
Hash identifier:          tx6V8kqWjgr1RnuX77GTm8tdHOobNAQAzVgbHcQTTwU=
Subject key identifier:   8C:E1:BB:C8:7C:35:99:76:8D:15:D3:43:61:57:71:01:86:A7:AA:76
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F067298CFF51D81FD90172040
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e5ec785-59eb-3cba-a077-f9635ab2e069.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     140224
IP address blocks:        154.23.176.0/20 maxlen: 24
                          154.38.112.0/21 maxlen: 24
                          154.39.64.0/22 maxlen: 24
                          206.119.80.0/21 maxlen: 24
                          206.119.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:98:cf:f5:1d:81:fd:90:17:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b42a5aea-2be5-45fc-97f8-0349228fc3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:bf:cb:7c:be:dc:a5:97:81:72:52:23:4d:
                    68:34:a1:0f:46:12:45:9f:78:35:56:9c:9e:b1:31:
                    f6:6f:bb:67:3d:d4:3a:52:8f:e2:80:c7:b7:ec:a9:
                    5f:48:8a:61:5c:26:00:b5:f4:4d:f6:c7:46:30:16:
                    2e:dc:74:11:a3:c2:cf:e0:d6:8d:f0:d0:22:80:8b:
                    b4:bf:6e:84:a0:40:0f:67:9d:17:66:08:9a:42:53:
                    6d:b7:2f:e7:15:e6:18:1b:17:3f:4d:97:16:d6:58:
                    46:10:74:c0:b6:f3:8a:3f:65:88:c5:1c:b2:6f:34:
                    fb:da:eb:a3:6f:13:38:9f:c3:5e:72:50:4f:94:34:
                    b8:ba:9e:c7:9b:2a:ed:87:dd:59:db:39:01:b1:c2:
                    60:cb:9c:3b:c1:6f:57:7a:39:ff:37:75:58:a2:2e:
                    fc:91:28:3d:23:57:c4:b3:f1:fe:a7:3a:17:f7:71:
                    67:07:92:9e:35:6e:3a:b6:78:6a:b0:cf:c0:7d:5b:
                    07:f6:5f:ea:fa:70:97:af:0e:07:e3:a5:9e:02:0c:
                    58:8d:2b:27:91:4f:c1:d1:8f:d7:95:4b:11:a1:c8:
                    44:91:a8:e4:f3:f5:95:bb:99:25:28:ee:c6:e3:fd:
                    11:d7:08:9a:ff:ca:8e:90:02:14:32:6b:ec:7b:3f:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E1:BB:C8:7C:35:99:76:8D:15:D3:43:61:57:71:01:86:A7:AA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3e5ec785-59eb-3cba-a077-f9635ab2e069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.23.176.0/20
                  154.38.112.0/21
                  154.39.64.0/22
                  206.119.80.0-206.119.91.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:dd:ec:77:ac:9e:0a:f1:b5:b2:13:36:df:a8:24:26:f0:ee:
         76:33:b0:81:81:14:d1:27:d3:74:3c:15:28:3b:2d:8f:f0:4f:
         8c:49:2d:37:70:2e:0a:2c:97:ef:fd:cc:1e:81:90:8e:80:7d:
         cb:98:8a:23:05:5b:e4:b4:6b:40:a5:89:18:86:f0:b6:07:3c:
         69:83:74:bb:d8:ad:bd:14:d7:e2:e0:a8:01:06:25:3d:d8:2e:
         b5:15:e6:6c:96:b7:7f:37:a9:d9:49:44:0a:8f:64:8c:08:af:
         c7:a3:ed:51:33:7c:88:75:09:f7:b9:e5:c8:71:d5:c8:64:95:
         2d:cc:ea:72:17:ef:8a:74:1a:ce:9a:27:50:77:60:a1:85:77:
         20:02:88:d8:09:2c:d2:81:ee:42:42:4c:c8:d2:d6:da:23:25:
         7d:70:1a:b9:b0:9e:90:67:2f:4c:13:90:f5:30:28:93:fe:b8:
         c8:0c:2d:fa:19:6f:72:d2:6a:00:e9:49:26:48:91:04:9d:0c:
         bc:97:fb:b1:ce:2d:6b:ad:1e:56:53:ff:be:b2:cc:b6:43:e3:
         71:e7:ea:66:37:d1:7c:3f:de:81:53:42:bb:02:a4:f6:fe:4e:
         10:12:c5:e1:84:09:e4:52:0c:a2:19:27:96:38:e5:b4:dd:19:
         7d:7b:1c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:32:48 2026 by rpki-client