Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0248e606-0272-3818-8d85-57d3bbe809af.roa
File:                     0248e606-0272-3818-8d85-57d3bbe809af.roa (raw, json)
Hash identifier:          sGfUeNAxq7s4R/2MjroAsCgEWSm6WqwnqMRv6FK5NPo=
Subject key identifier:   13:51:19:C6:90:E2:9E:3D:6A:88:28:1A:97:0C:A8:F8:4C:B6:88:F4
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DE9B0C1C5BBB4C3C32A6C5A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0248e606-0272-3818-8d85-57d3bbe809af.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     0
IP address blocks:        149.7.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:c1:c5:bb:b4:c3:c3:2a:6c:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=bec4befe-1c27-44c5-ae1f-614c5ebfc1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b0:58:93:90:f2:1f:bb:ab:42:c8:08:5d:45:
                    33:b5:fd:05:d0:68:f4:09:8d:5d:8e:a3:0d:cb:50:
                    a8:b0:1c:86:e4:83:7b:6e:a2:0c:b0:43:f6:4e:f5:
                    3a:13:6f:9d:34:c1:f4:63:18:91:7d:45:d9:85:de:
                    b1:b0:b0:c9:7f:6e:e4:5c:c2:62:9a:ae:e2:6d:f9:
                    92:4f:19:ae:fe:af:15:7f:55:b9:d0:28:60:c5:ea:
                    e5:2a:44:82:fc:cb:79:b1:1d:9a:93:7c:ef:3e:43:
                    6b:63:0b:7f:0d:59:9c:51:1f:2d:d4:a9:dd:a3:e3:
                    d4:8f:68:58:2a:c9:70:3c:da:6d:5c:d4:ff:61:eb:
                    2a:d9:88:6e:26:b4:d2:9a:76:d4:f7:d8:38:54:6f:
                    47:d5:c8:c2:92:05:f1:cf:36:ca:cb:fe:f3:eb:c6:
                    7d:72:04:0b:c2:20:db:7c:32:57:73:12:9b:2c:0d:
                    bd:06:4c:db:18:a1:ed:7b:b8:97:3e:58:0e:1f:ef:
                    8c:dc:3f:cd:b4:69:15:fb:e5:6c:88:7e:43:a2:33:
                    35:79:c6:f9:8c:90:e2:b9:08:8e:f8:e9:96:d0:9f:
                    0c:78:a9:f7:d3:44:16:54:49:a1:70:1d:25:9b:78:
                    dd:84:43:4b:d5:47:66:61:1b:0c:d8:3b:a3:ae:0d:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:19:C6:90:E2:9E:3D:6A:88:28:1A:97:0C:A8:F8:4C:B6:88:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0248e606-0272-3818-8d85-57d3bbe809af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.7.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c2:6a:d3:b4:72:d0:90:c8:1d:06:27:0b:e9:42:63:c8:4f:
         11:91:84:d3:1c:31:b9:4f:f2:83:09:e2:57:18:26:74:2b:b6:
         7f:3b:44:b2:db:21:7d:c9:84:fd:d6:8e:09:0b:b4:6d:fb:d5:
         ca:d2:9d:de:ce:45:51:9b:54:e1:ee:d3:ee:cb:2e:22:ee:82:
         de:34:d4:17:f2:17:f4:49:94:63:b8:39:54:e1:9c:a6:cb:02:
         22:da:9a:8b:6f:8b:2d:a0:42:7d:14:b6:0b:9a:9e:24:07:ea:
         4a:5f:70:1d:3c:ea:e3:96:5b:08:97:03:31:1d:59:05:f0:69:
         a2:20:bc:28:ed:e0:ef:60:13:2f:47:5c:2b:25:5a:c6:ec:74:
         61:d6:52:f4:78:ee:c7:89:c1:a1:b8:8f:6b:15:7a:11:41:b4:
         24:1d:2e:37:9e:0a:74:56:30:b9:78:81:98:ef:fd:97:e1:4c:
         0f:27:c1:74:f3:2f:f3:92:c7:e3:4c:92:47:7f:f3:12:f4:9a:
         d3:a6:65:63:5f:f9:be:f2:78:e3:a7:be:6e:23:71:d7:ae:75:
         bf:44:23:87:73:6d:ce:b0:d5:17:57:06:20:1b:43:52:f2:92:
         09:68:73:8d:bd:5a:6c:f1:cf:0f:ca:57:70:57:44:6e:77:b8:
         ab:79:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:39:26 2026 by rpki-client