Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4f3e2619-9544-3989-9ed7-73f866e11bd6.roa
File:                     4f3e2619-9544-3989-9ed7-73f866e11bd6.roa (raw, json)
Hash identifier:          s5w0yE8VVdGmoBykYssfb/4tNzxKF2QxxdD7PV/T1XA=
Subject key identifier:   0A:87:96:1E:3E:46:34:AA:CD:69:62:C6:48:BC:2E:CF:CE:95:6E:7A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B5B391B52BBD83AB372451B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4f3e2619-9544-3989-9ed7-73f866e11bd6.roa
Signing time:             Mon 29 Sep 2025 14:41:19 +0000
ROA not before:           Mon 29 Sep 2025 14:41:19 +0000
ROA not after:            Sun 28 Dec 2025 15:41:19 +0000
asID:                     203268
IP address blocks:        154.56.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:39:1b:52:bb:d8:3a:b3:72:45:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 29 14:41:19 2025 GMT
            Not After : Dec 28 15:41:19 2025 GMT
        Subject: CN=7f118f58-601f-41bb-8f3a-2ae1f7df74ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:57:cc:7a:0c:ba:ba:8b:e0:2e:e2:2c:d9:8f:
                    92:74:cf:25:d9:46:cb:9c:26:9b:3f:97:0c:cf:a6:
                    08:5d:37:f3:35:ba:c0:53:72:c4:17:ae:a5:49:6e:
                    c8:21:a6:ca:a0:78:e3:0a:ae:dd:4a:d3:29:2d:23:
                    7d:67:e4:3b:fb:b9:ee:b7:2f:5e:cd:fc:b4:4d:09:
                    b8:b5:66:bd:ac:c0:29:8f:fe:40:eb:86:db:d8:02:
                    3a:20:be:ef:3a:91:73:2f:98:79:95:ea:6c:2c:c8:
                    1e:92:c1:3c:a9:1b:2e:32:1e:b9:06:ee:2e:b4:ea:
                    0a:ee:50:36:f5:d0:8c:c5:d0:da:0f:07:77:78:d9:
                    a6:23:6c:62:61:4c:97:8a:5e:18:98:5b:2c:f3:c3:
                    de:bb:f6:7d:b3:cf:b7:1a:b6:48:28:83:5f:c1:b4:
                    24:97:31:85:e8:56:37:7d:a8:39:f2:40:c4:d7:3f:
                    99:f4:62:56:01:de:83:5a:66:da:7c:10:94:ca:47:
                    a8:9b:5e:d4:7d:4e:bb:6e:9c:9c:c7:6a:0d:ab:12:
                    b7:f1:71:0e:7d:3b:ce:4f:7b:78:0d:d4:d8:86:a3:
                    6e:e6:4e:db:f0:c1:80:84:79:47:6c:9d:75:20:e5:
                    43:f9:8d:a6:cb:c5:0a:05:4f:1f:bb:2d:d1:7d:3e:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:87:96:1E:3E:46:34:AA:CD:69:62:C6:48:BC:2E:CF:CE:95:6E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4f3e2619-9544-3989-9ed7-73f866e11bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.56.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8d:19:0c:f3:3d:fb:81:4e:e5:44:5d:35:8b:95:7d:51:17:
         cb:c9:2b:f4:81:81:73:10:8d:1f:f2:45:6e:ef:10:13:72:89:
         21:e1:95:30:ef:79:ff:7f:6d:95:16:65:03:1a:e2:1c:9c:6a:
         7d:70:6a:28:6d:8d:69:5c:0d:af:a0:40:27:9c:4a:08:81:bf:
         8d:ef:59:16:96:5f:67:bf:b9:7f:b1:60:52:91:af:3b:c9:37:
         ee:e5:1b:d1:de:d3:fa:7c:0f:2a:c7:74:bf:70:2b:b5:d2:b4:
         8d:b2:4d:c3:88:86:55:cb:72:9c:fb:eb:40:1a:b9:85:23:b5:
         2f:f1:b2:9f:f6:1c:b7:0d:97:48:9c:de:04:6b:a5:26:da:c4:
         88:18:61:87:28:1a:71:9e:ba:4f:30:62:55:f1:ee:19:96:de:
         38:dd:1a:d9:e2:94:10:50:1b:69:17:22:44:e0:59:a8:7c:dd:
         f5:4d:de:d1:62:4a:ab:32:39:3d:cd:00:89:20:ce:e1:5d:93:
         bf:4b:c9:75:a6:b8:72:cf:49:ad:a7:53:9e:1f:70:51:40:e5:
         58:f1:34:d1:c6:b5:19:d2:86:2f:61:f0:b7:9b:35:ae:42:71:
         55:86:9c:99:79:86:fe:7b:41:52:06:68:c6:0a:92:59:83:33:
         63:a0:87:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:10:52 2025 by rpki-client