Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11abb74e-afe5-3664-ba9c-4bf4cf1db55e.roa
File:                     11abb74e-afe5-3664-ba9c-4bf4cf1db55e.roa (raw, json)
Hash identifier:          dCHUmrK+lqcgkLrfjIwYQh42hWCJgEgdyQ5XKcxeujU=
Subject key identifier:   79:51:45:93:11:7E:0A:73:B3:32:B1:F8:4E:85:AD:8A:DB:B6:3E:12
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EC0A71037A9B111D9328F1C00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11abb74e-afe5-3664-ba9c-4bf4cf1db55e.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     274402
IP address blocks:        204.157.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:10:37:a9:b1:11:d9:32:8f:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=126aa6b1-32b3-44f1-a716-d47e38b52c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:5b:ce:87:0c:7a:41:cf:05:6d:b8:ab:57:
                    21:1a:fc:4e:10:0c:cc:36:81:5f:c2:a2:25:bc:f1:
                    64:58:33:b9:2d:25:10:ab:14:f2:e5:e1:b4:4b:7d:
                    f8:ab:24:7d:0e:9e:12:67:ad:38:2d:4c:c0:b4:d1:
                    76:97:6a:09:13:62:52:9a:a5:7a:c7:eb:40:fb:9b:
                    2b:8f:ff:81:73:6c:fe:d0:8a:b0:e4:33:66:ff:f2:
                    e9:97:03:b3:34:e2:dd:62:c3:06:45:f7:06:0f:df:
                    f7:d8:80:cf:ce:db:6f:dd:da:01:6f:a2:42:bb:06:
                    c7:13:cc:88:58:0e:a2:06:0d:26:22:23:c1:da:28:
                    cd:ce:4e:18:0c:50:ac:ca:e0:69:6c:ce:00:9a:6c:
                    4e:bd:46:93:1a:bd:ef:f3:01:4d:71:16:88:57:7c:
                    40:02:d8:6f:a7:b3:7c:7b:9b:9f:0a:0a:f9:71:6a:
                    5a:c7:21:9a:c5:73:6a:fb:b9:84:19:48:0d:79:11:
                    fb:e4:56:52:d7:0f:76:16:d1:12:85:5f:90:69:62:
                    26:53:ca:86:98:ae:c4:fa:fb:a0:b3:19:9a:55:b5:
                    94:fd:2c:28:35:33:5a:cd:a3:bb:30:f6:94:de:1a:
                    1d:79:75:62:eb:c5:e7:f2:e5:a7:d2:58:c8:3e:5b:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:51:45:93:11:7E:0A:73:B3:32:B1:F8:4E:85:AD:8A:DB:B6:3E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11abb74e-afe5-3664-ba9c-4bf4cf1db55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:bc:f7:0d:15:60:ae:0c:69:ac:df:0f:47:0f:32:d5:d3:5f:
         a7:14:8a:14:34:84:1a:b6:35:e1:82:3f:72:92:3b:11:b0:fd:
         05:18:fc:2d:45:d0:24:08:b7:03:98:6e:8c:15:44:e6:b0:2d:
         14:cc:07:26:81:18:8a:e4:c9:fc:df:6a:b6:75:56:90:53:e7:
         ad:4f:92:4d:33:16:1c:de:59:af:54:33:99:34:a8:5d:3e:51:
         4b:af:a4:cd:29:4b:86:5b:b0:ea:73:17:bc:8d:92:c0:24:59:
         d0:fd:cb:dc:91:e8:77:13:b4:9d:07:6e:4b:aa:ff:0b:6e:f6:
         13:9c:9a:ee:ae:4d:b6:1e:4c:43:ff:56:0e:a6:5f:80:e3:39:
         42:ce:1b:78:6c:b4:25:c5:c7:a2:96:51:bc:d4:a5:58:96:a6:
         f7:8f:ff:22:ee:44:2c:28:0e:7c:66:54:26:22:0b:44:a8:a8:
         20:28:82:f0:97:80:d8:aa:78:29:e3:07:c4:8f:51:de:9f:44:
         3d:49:f4:aa:e1:af:9b:ff:6c:02:c7:4a:2c:2e:f6:20:f4:ce:
         dd:65:fa:1b:4f:62:51:df:34:59:d4:3c:2a:ba:48:f5:b2:d8:
         5b:ed:98:67:da:83:21:95:ea:b9:f7:2d:27:c3:10:e1:76:2c:
         f8:4a:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:47:47 2026 by rpki-client