Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/120408d4-4c08-3780-b4ef-8e2518b51fa2.roa
File:                     120408d4-4c08-3780-b4ef-8e2518b51fa2.roa (raw, json)
Hash identifier:          wcgMuh0KQneazKLgM6OqRzHSVYpMf2BNIiZ4Q7Kod64=
Subject key identifier:   C5:6D:4D:CA:80:2A:FD:3B:F1:32:63:5D:67:20:A0:9B:67:ED:4F:20
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F910512EADC33EA494B969F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/120408d4-4c08-3780-b4ef-8e2518b51fa2.roa
Signing time:             Tue 20 Oct 2026 16:17:53 +0000
ROA not before:           Tue 20 Oct 2026 16:17:53 +0000
ROA not after:            Mon 18 Jan 2027 17:17:53 +0000
asID:                     263327
IP address blocks:        204.157.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:91:05:12:ea:dc:33:ea:49:4b:96:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 20 16:17:53 2026 GMT
            Not After : Jan 18 17:17:53 2027 GMT
        Subject: CN=d757965d-1c95-4925-abea-cc77bb345773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:22:c2:d8:28:3c:b5:f7:dd:60:67:69:12:
                    2f:70:5b:ea:7b:96:e8:f0:ed:3d:57:54:b1:4a:c6:
                    49:d9:d9:af:64:6b:66:bb:f0:5e:11:89:64:18:3b:
                    52:6a:fc:02:05:4c:3d:20:6c:f4:78:8c:37:0c:34:
                    f7:09:0d:6b:46:79:4c:4b:0c:b6:d1:f5:e6:a0:74:
                    68:28:0f:81:fc:c2:08:e0:b5:1b:b7:c7:97:0f:66:
                    a8:a1:ff:9d:b6:a6:d2:6e:bc:86:86:df:8f:48:8b:
                    e8:a3:63:e1:0b:fa:53:e1:eb:4b:ea:86:4e:6f:be:
                    f1:e3:8b:d4:37:ec:c4:f5:00:17:9c:d1:b2:f0:0d:
                    a9:a6:05:f9:73:a2:ba:e9:fd:0f:ef:49:48:59:29:
                    24:8a:ed:8a:ad:80:e2:a3:9c:92:a0:d5:ac:b7:6f:
                    ad:fa:4e:e5:35:ed:89:3a:1e:f5:1b:e1:01:11:f7:
                    23:05:fa:73:fa:c1:8d:c5:94:39:09:a8:80:da:39:
                    eb:68:c3:e8:e2:18:5c:c0:4b:b6:7e:2f:27:19:09:
                    f5:16:81:d9:36:cc:5b:42:87:23:db:31:eb:c6:77:
                    e7:7a:9c:16:cb:74:04:fb:83:e8:7c:b9:e4:e8:78:
                    61:b3:7a:90:82:12:5a:03:5e:49:6e:8a:43:02:0b:
                    04:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:4D:CA:80:2A:FD:3B:F1:32:63:5D:67:20:A0:9B:67:ED:4F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/120408d4-4c08-3780-b4ef-8e2518b51fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:54:93:f3:bb:96:ee:94:ef:0a:b7:d9:18:2e:44:97:be:
         80:94:df:75:7d:5d:d5:f9:35:aa:dd:46:c9:a5:b4:9e:dc:9b:
         4b:37:1b:df:1d:6e:0a:22:67:43:c2:02:a6:7f:78:0f:38:8c:
         cf:ab:13:95:94:2c:49:2f:fc:84:e6:46:b5:fb:fc:f3:34:ed:
         c2:33:c1:f2:60:04:ab:53:58:71:bb:dc:f1:6f:59:d2:25:e3:
         38:b1:2c:67:58:91:05:e8:7e:7a:6f:d3:e9:49:8b:e0:92:bf:
         70:92:b2:9c:e1:ae:9d:b1:40:72:be:b2:1d:38:0f:c4:8f:c2:
         b6:be:42:e2:b9:91:66:bd:c4:f3:7b:16:94:9c:d7:06:c1:86:
         bb:3a:f5:ff:e9:63:27:a6:8a:4a:ef:a8:b7:9a:b5:ab:9b:ef:
         fe:cd:00:c2:a4:0b:de:47:b4:3b:e7:18:97:ce:e4:63:30:c4:
         1b:56:e6:4b:4e:b9:56:cd:66:b2:12:3f:2b:9c:33:d4:a7:02:
         44:a1:90:a9:b0:81:be:df:5e:48:08:e0:de:75:95:29:76:5c:
         4b:1d:f7:50:4d:64:01:b0:f9:ab:bd:fd:84:02:e0:64:27:c2:
         49:99:ef:f8:b0:c8:21:4c:97:93:ff:56:93:8c:f2:e4:cc:38:
         dc:5f:4c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:35 2026 by rpki-client