Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ffa32f6-25f8-3574-8b95-a66462e4fbdb.roa
File:                     0ffa32f6-25f8-3574-8b95-a66462e4fbdb.roa (raw, json)
Hash identifier:          HUI8eLgdNBlTXJPNviqekohsxsy7Jz3agbrrjPKtXJM=
Subject key identifier:   8C:AF:CB:4D:7E:3D:23:FF:E5:95:1F:D4:AE:18:9F:E1:54:4D:2A:CB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5BADCBA98500CD7AC7348F40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ffa32f6-25f8-3574-8b95-a66462e4fbdb.roa
Signing time:             Thu 01 Oct 2026 13:44:11 +0000
ROA not before:           Thu 01 Oct 2026 13:44:11 +0000
ROA not after:            Wed 30 Dec 2026 14:44:11 +0000
asID:                     210743
IP address blocks:        154.54.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:ad:cb:a9:85:00:cd:7a:c7:34:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  1 13:44:11 2026 GMT
            Not After : Dec 30 14:44:11 2026 GMT
        Subject: CN=2c638598-7023-4e31-a387-8c7e38375636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:74:6c:77:88:d5:2e:af:d0:11:2a:07:77:
                    15:45:c1:b2:4c:a8:36:51:bd:2f:70:c0:3c:8a:1f:
                    f2:8f:ee:73:b9:d9:c4:e5:58:8f:d3:c3:fd:5e:fb:
                    f8:70:3b:7d:de:91:e1:5f:c2:0b:dc:e4:76:eb:1c:
                    6c:1b:e5:96:d6:84:92:13:98:24:67:3c:b4:f5:da:
                    81:48:43:b7:98:45:b0:6b:85:69:d2:51:9d:39:95:
                    73:43:1d:2c:e0:cd:bd:ec:39:82:1b:d7:83:ea:8d:
                    f4:60:52:7d:fc:f6:fd:9e:8f:12:52:8a:57:f3:ee:
                    bc:9c:06:17:bc:9d:d3:4a:fb:ad:95:ce:88:57:69:
                    10:b0:40:71:1b:c7:6e:f6:04:e1:d0:2d:12:ee:c6:
                    e4:9a:59:8c:d7:8c:09:7d:61:87:7d:81:01:c9:61:
                    74:24:30:f9:0e:35:26:cc:54:0d:25:9d:71:fa:b2:
                    30:c3:3a:d9:00:b4:2d:7e:3e:76:af:15:ef:07:fa:
                    60:74:12:61:f3:02:44:12:a3:af:32:9c:49:5b:60:
                    74:a9:b9:79:8d:9c:87:14:ff:d3:fb:0a:15:53:48:
                    af:87:22:8b:47:62:d9:65:d1:14:c8:e8:ae:d4:22:
                    a8:3e:6a:34:d2:62:0b:b4:df:97:b0:14:5d:11:c8:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AF:CB:4D:7E:3D:23:FF:E5:95:1F:D4:AE:18:9F:E1:54:4D:2A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ffa32f6-25f8-3574-8b95-a66462e4fbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.54.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c2:9a:1e:66:0f:16:9e:a6:48:59:a8:cd:9d:c5:e2:b4:17:
         20:20:d5:c1:d4:f3:31:c0:c6:4e:43:12:02:b7:a7:2f:e8:5a:
         0c:35:7f:1a:f0:a0:d4:b2:2f:aa:cf:64:78:03:a5:93:0c:87:
         84:cc:70:57:ac:14:c1:31:35:7c:d2:20:3b:aa:bc:58:48:33:
         74:16:bf:2c:1e:0f:e6:c5:0b:df:90:7e:21:90:f2:d9:69:72:
         1d:04:0a:4b:b5:da:59:35:8f:60:2c:0d:f0:5a:a2:27:9a:f2:
         39:89:43:dd:41:54:0f:26:3b:1b:a1:51:51:a2:54:19:70:76:
         74:d6:68:5e:4c:7a:23:b0:d4:d9:24:36:5a:d3:d7:26:25:cd:
         12:2b:33:59:86:37:c8:7e:12:c1:d7:42:a0:a0:0f:ec:5b:50:
         7a:9e:2b:dc:db:a5:13:4b:1a:9c:8c:63:2c:81:50:06:27:ba:
         b6:8e:c4:7b:b3:48:98:97:f5:84:8c:ae:29:a9:24:6d:df:79:
         66:5b:f4:4f:9b:e2:0a:2b:ea:f5:5f:72:d3:bf:81:aa:6f:e8:
         81:b3:73:2f:77:49:0b:82:f3:41:61:5e:87:f4:48:88:83:19:
         3c:da:fd:0d:3a:49:58:5d:01:c9:25:07:bf:97:9d:d4:58:d0:
         ee:80:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:51:44 2026 by rpki-client