Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2b3687f-7bbd-3ffb-8e18-1a1502ce3a67.roa
File:                     c2b3687f-7bbd-3ffb-8e18-1a1502ce3a67.roa (raw, json)
Hash identifier:          tueMg/OuDE44FbDhjM9AQwQnInNwgn3iIiCf3JiHvY4=
Subject key identifier:   26:21:8C:79:0C:75:A1:F5:F0:9C:4A:AA:F1:F4:46:56:BC:05:CB:B6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B5DF7A71403E75AA5C518C800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2b3687f-7bbd-3ffb-8e18-1a1502ce3a67.roa
Signing time:             Tue 30 Sep 2025 14:16:52 +0000
ROA not before:           Tue 30 Sep 2025 14:16:52 +0000
ROA not after:            Mon 29 Dec 2025 15:16:52 +0000
asID:                     41894
IP address blocks:        149.5.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:f7:a7:14:03:e7:5a:a5:c5:18:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 30 14:16:52 2025 GMT
            Not After : Dec 29 15:16:52 2025 GMT
        Subject: CN=491c26da-b4b6-4e90-8562-2efa282dad82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:9c:51:18:8f:c3:c1:cb:69:97:74:56:ea:
                    e5:a3:ef:9e:25:77:cf:a3:f3:c1:a1:33:7e:ce:72:
                    a0:ec:4d:95:8e:0b:fb:98:cb:a5:e4:5f:eb:7b:d1:
                    97:b3:9b:30:be:fd:81:0c:3a:97:94:d5:48:79:5b:
                    a3:8b:4e:43:12:2c:94:79:43:c5:73:c4:ec:f1:05:
                    4a:2d:9c:a1:2a:60:02:0c:44:ef:f5:b2:37:39:a2:
                    25:64:00:20:77:29:1c:f4:e3:6f:d7:cb:d9:b4:b3:
                    a3:c9:11:bc:90:02:a7:95:b2:10:1f:48:8b:b0:52:
                    0f:54:37:18:53:7c:53:1e:32:df:b5:11:ff:9b:db:
                    65:89:d0:15:da:dd:b1:4a:ac:7d:6f:21:02:3f:e9:
                    5d:f4:ea:48:e3:db:e8:74:05:38:0f:b3:99:5c:ae:
                    cc:66:1e:47:03:3e:35:d3:b0:ee:6b:32:90:c0:46:
                    8a:58:3d:ed:72:87:d0:a6:17:aa:fb:af:b9:34:1d:
                    c7:66:cb:5b:cd:d5:1c:8b:6d:97:a0:11:65:31:fb:
                    59:90:5a:d7:8c:15:ea:49:78:4d:c7:2a:65:46:e0:
                    6c:4d:9b:35:c1:3e:06:39:25:3a:62:69:52:ef:e5:
                    01:4c:d2:8b:dc:b0:2f:3c:b9:f6:99:2d:2e:e0:81:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:8C:79:0C:75:A1:F5:F0:9C:4A:AA:F1:F4:46:56:BC:05:CB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2b3687f-7bbd-3ffb-8e18-1a1502ce3a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.5.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:e0:db:07:00:c7:85:5b:c8:e1:89:1e:53:7e:1d:fb:48:
         df:92:76:a5:28:93:3b:1b:f6:25:61:cc:d8:67:1b:ec:a0:c4:
         74:f2:5a:c1:c2:d8:86:34:38:6e:ad:02:0a:bc:d3:7b:01:7d:
         bf:cd:ea:64:6e:d5:c0:09:1f:db:d7:3d:0f:d1:d0:bc:94:8c:
         3e:17:bb:36:a6:8d:b8:a4:dd:97:18:f5:6c:ba:c1:11:68:d8:
         be:12:a7:f3:d3:1b:69:2a:aa:d5:f7:6a:ff:f1:5d:d8:c2:7b:
         a9:73:b5:16:83:32:51:41:2e:14:33:1a:de:3f:a3:2e:19:6c:
         1e:cb:12:4d:f0:05:75:a3:88:2f:13:30:4f:06:1d:80:cc:2f:
         dd:7f:bf:af:bc:90:54:29:11:fb:76:7f:22:6d:df:dc:e0:82:
         89:e1:7a:b2:b0:c8:43:3e:b7:12:9a:cd:be:b9:9d:d2:ce:e2:
         ad:da:99:28:41:17:67:1a:a4:5e:49:b7:20:85:5f:b8:73:c2:
         4b:01:df:ec:90:10:fb:4c:c0:48:93:75:a5:b8:ee:a9:31:6c:
         0f:09:da:8c:7e:69:db:ce:38:ea:44:ea:9c:4d:21:d0:de:b1:
         f9:59:62:60:93:1a:ee:0b:0e:ff:b2:47:dd:07:90:91:be:f1:
         a3:7a:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:06:03 2025 by rpki-client