Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/892e7dfb-f4d2-3207-875b-4e6ead4fe49d.roa
File:                     892e7dfb-f4d2-3207-875b-4e6ead4fe49d.roa (raw, json)
Hash identifier:          ett6tnn5Y5mK0/wprg/VEii8tKzvwJ/kdjWQYZaVbH4=
Subject key identifier:   8D:43:72:BD:66:5E:05:5D:0C:39:54:39:76:CE:5B:54:31:42:23:9F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F71F4CA126FACA8A38DAC65E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/892e7dfb-f4d2-3207-875b-4e6ead4fe49d.roa
Signing time:             Fri 09 Oct 2026 13:15:01 +0000
ROA not before:           Fri 09 Oct 2026 13:15:01 +0000
ROA not after:            Mon 04 Jan 2027 15:16:27 +0000
asID:                     151698
IP address blocks:        154.49.96.0/24 maxlen: 24
                          154.49.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:f4:ca:12:6f:ac:a8:a3:8d:ac:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  9 13:15:01 2026 GMT
            Not After : Jan  4 15:16:27 2027 GMT
        Subject: CN=920a708c-77ea-4273-8055-9b1e5b563127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:31:6b:66:86:34:12:2f:02:9b:62:87:2f:
                    37:7a:9b:e6:ef:ee:12:17:2b:6e:bd:e1:7f:f7:8c:
                    e3:44:dc:88:cc:65:0a:95:85:95:fc:1c:a7:f9:2d:
                    0c:3d:de:b3:ef:1a:10:33:cd:72:4d:3b:76:00:b2:
                    33:b0:3d:2a:f4:ad:d4:c8:10:09:78:6a:55:06:6b:
                    f2:10:8f:d2:f7:75:01:33:cd:a3:7f:21:10:0f:e4:
                    fd:dd:10:2d:a9:ee:f6:35:47:33:58:7e:17:c3:47:
                    c2:20:10:11:46:49:c6:c1:e5:bf:bb:12:78:44:ce:
                    cb:90:4c:e5:14:28:20:17:77:54:f4:69:11:e4:f2:
                    f0:2e:68:2a:22:55:98:11:40:5d:e5:ee:3b:9e:ee:
                    97:b2:b9:e1:e8:c3:ed:da:44:d3:80:e0:1b:30:bb:
                    17:6d:ce:ec:c3:a8:69:c0:0e:7c:96:73:36:7d:8f:
                    2b:fb:1f:70:ef:87:3d:12:15:84:49:04:b3:38:e7:
                    10:c9:da:b6:aa:36:08:84:b9:33:e9:f2:ba:3b:2b:
                    5d:7a:6e:5b:e7:11:1c:15:97:f8:4e:7e:21:97:30:
                    c2:85:b7:22:d4:35:8f:bd:2e:9d:d9:8b:eb:26:1f:
                    45:8c:35:5d:7a:09:d8:1a:eb:73:68:c7:72:05:25:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:72:BD:66:5E:05:5D:0C:39:54:39:76:CE:5B:54:31:42:23:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/892e7dfb-f4d2-3207-875b-4e6ead4fe49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.49.96.0/24
                  154.49.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:68:c9:5f:71:a3:8a:94:da:84:3c:cd:eb:54:7e:23:80:99:
         07:58:87:8c:5e:0d:1e:19:77:18:c8:17:2d:32:cb:97:17:88:
         77:ba:4d:81:97:b8:d9:e9:85:9c:08:20:b5:87:b1:a6:3e:ac:
         b3:e9:5b:ce:9a:b4:45:c2:69:30:09:21:91:4a:a4:5c:a7:ee:
         12:b1:01:f0:71:c9:23:cb:77:3a:74:0a:a1:df:57:1b:a3:77:
         40:0f:b2:ab:ce:2f:80:63:ff:ed:7b:c6:55:f5:e9:7e:43:52:
         c9:68:f0:47:b8:56:62:28:9b:ab:8f:0b:cf:77:11:5c:c7:8b:
         bc:a9:8a:fb:c3:9b:67:83:e4:1d:d5:c9:c9:d0:ac:a3:73:cf:
         38:95:e8:01:0b:07:0e:62:69:0e:9e:ed:8b:25:24:72:ff:e4:
         25:1c:02:08:c9:42:b2:a2:04:a3:93:01:11:4e:e4:3f:78:32:
         03:e7:93:6b:dd:68:0c:7e:65:0f:4b:f9:2c:1c:1d:50:1d:60:
         20:c1:56:f2:3a:a3:8f:e3:c7:7b:3a:15:29:d6:e6:41:78:21:
         07:94:f9:63:80:03:a0:84:af:fe:73:27:88:67:55:aa:55:4a:
         a4:08:6a:60:fd:cf:35:2e:fc:50:0c:2a:70:f9:60:24:5f:26:
         80:9d:df:d7
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9x9MoSb6yoo42sZeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAwOTEzMTUwMVoXDTI3MDEwNDE1MTYyN1owLzEtMCsGA1UEAxMk
OTIwYTcwOGMtNzdlYS00MjczLTgwNTUtOWIxZTViNTYzMTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwoxa2aGNBIvAptihy83epvm7+4SFytuveF/
94zjRNyIzGUKlYWV/Byn+S0MPd6z7xoQM81yTTt2ALIzsD0q9K3UyBAJeGpVBmvy
EI/S93UBM82jfyEQD+T93RAtqe72NUczWH4Xw0fCIBARRknGweW/uxJ4RM7LkEzl
FCggF3dU9GkR5PLwLmgqIlWYEUBd5e47nu6Xsrnh6MPt2kTTgOAbMLsXbc7sw6hp
wA58lnM2fY8r+x9w74c9EhWESQSzOOcQydq2qjYIhLkz6fK6Oytdem5b5xEcFZf4
Tn4hlzDChbci1DWPvS6d2YvrJh9FjDVdegnYGutzaMdyBSU4QwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFI1Dcr1mXgVdDDlUOXbOW1QxQiOfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODkyZTdkZmItZjRkMi0z
MjA3LTg3NWItNGU2ZWFkNGZlNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmjFgAwQA
mjFmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHxoyV9xo4qU2oQ8zetUfiOAmQdYh4xeDR4ZdxjIFy0yy5cX
iHe6TYGXuNnphZwIILWHsaY+rLPpW86atEXCaTAJIZFKpFyn7hKxAfBxySPLdzp0
CqHfVxujd0APsqvOL4Bj/+17xlX16X5DUslo8Ee4VmIom6uPC893EVzHi7ypivvD
m2eD5B3VycnQrKNzzziV6AELBw5iaQ6e7YslJHL/5CUcAgjJQrKiBKOTARFO5D94
MgPnk2vdaAx+ZQ9L+SwcHVAdYCDBVvI6o4/jx3s6FSnW5kF4IQeU+WOAA6CEr/5z
J4hnVapVSqQIamD9zzUu/FAMKnD5YCRfJoCd39c=
-----END CERTIFICATE-----
Generated at Sun Oct 25 02:10:46 2026 by rpki-client