Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa
File:                     1392b7e6-1885-350f-b7e5-6101dd3690e6.roa (raw, json)
Hash identifier:          eMCtJF605XIWFHhkCM1anJkM9mBqKZfIQRX4zV/wWBI=
Subject key identifier:   19:B7:66:B7:F3:E9:C0:7D:B1:09:C1:0B:BA:34:8B:4E:C6:B9:FC:09
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA2DFCFDBC3ABAC35591F7F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     138890
IP address blocks:        154.21.105.0/24 maxlen: 24
                          154.47.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:cf:db:c3:ab:ac:35:59:1f:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=4a1d115b-67d7-48e3-9577-ec993f81a93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:08:da:b7:2d:e0:e4:71:9a:c8:7d:a9:9b:
                    00:50:12:b3:19:18:87:24:cc:e9:32:b3:de:3f:c2:
                    ee:0f:21:2e:ea:25:02:0c:3a:53:76:b3:22:fc:4e:
                    ae:77:7f:af:6e:c4:05:8c:b0:dc:ba:f1:76:a2:df:
                    a3:e3:98:51:0b:20:3c:ac:d3:b9:1f:f7:8f:94:9f:
                    73:31:51:44:4d:44:ce:bd:6f:01:5e:f3:4e:43:88:
                    d9:5e:6c:c3:6d:4d:3a:43:f4:65:5b:b0:98:0b:87:
                    87:6c:6a:5b:14:b2:cd:08:67:ea:74:47:f0:46:a4:
                    b2:99:a5:62:59:3f:7c:3c:e2:3e:d0:a1:5d:fb:7c:
                    35:76:a8:d9:f2:82:ee:19:cc:b8:36:57:79:74:73:
                    03:a4:5f:22:9c:81:55:f5:bc:38:a9:65:64:37:f7:
                    8c:0c:34:6f:2e:8a:c8:e8:a5:a1:04:b1:74:2f:c9:
                    2e:e8:ed:6a:90:34:46:ef:1d:32:5e:1a:9b:a4:8f:
                    c9:61:44:dd:f4:8d:01:41:d5:4d:db:bc:79:a5:8d:
                    e6:6e:9e:88:f7:a7:29:7b:d1:c2:5d:43:79:ad:eb:
                    18:e0:8e:19:80:2b:d2:ee:d8:36:ef:70:84:14:1e:
                    7e:15:b3:8f:7d:20:25:27:cd:77:a1:3c:86:dc:b7:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B7:66:B7:F3:E9:C0:7D:B1:09:C1:0B:BA:34:8B:4E:C6:B9:FC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.21.105.0/24
                  154.47.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a0:57:1c:36:5f:44:6e:17:77:5c:fe:2f:10:8d:03:96:8c:
         3b:61:74:5f:d9:66:c6:50:3a:a2:6e:bb:17:46:60:b4:6a:ba:
         86:b7:6c:8d:ce:06:93:04:70:fb:b4:b0:1a:50:2e:66:58:fe:
         ce:eb:d6:5c:a3:d6:64:9a:cd:28:7b:3a:60:87:64:8c:25:a2:
         f9:b2:af:26:5e:69:c9:4e:25:15:8a:bb:b0:04:13:0a:2c:42:
         a4:aa:75:5f:2a:19:85:b6:9f:95:55:5a:ed:64:44:c5:48:ca:
         78:9c:66:61:c6:80:e5:db:d6:3b:99:63:68:1f:b3:7e:ea:2d:
         db:5a:18:41:77:00:a8:94:73:73:33:ac:64:46:80:5c:23:20:
         3d:57:88:5c:f8:0e:77:03:dd:d3:84:55:1c:db:cc:54:7a:33:
         1d:61:72:d8:5d:e1:15:0c:a3:56:b9:d5:dd:39:fc:10:ac:4b:
         db:21:78:24:3d:6b:51:3c:c2:e9:15:d8:d6:49:f7:02:44:47:
         fd:08:2b:fa:07:4b:9d:2e:76:0b:1c:ed:a1:10:bf:53:2c:52:
         b4:ae:63:a5:b0:71:94:e2:4c:d0:cf:05:d7:7a:f9:0c:a9:6a:
         98:2f:33:8d:a3:8a:43:a3:15:ec:ce:d2:3f:2f:8e:b8:3e:bd:
         58:01:33:b4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6i38/bw6usNVkff4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
NGExZDExNWItNjdkNy00OGUzLTk1NzctZWM5OTNmODFhOTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS0I2rct4ORxmsh9qZsAUBKzGRiHJMzpMrPe
P8LuDyEu6iUCDDpTdrMi/E6ud3+vbsQFjLDcuvF2ot+j45hRCyA8rNO5H/ePlJ9z
MVFETUTOvW8BXvNOQ4jZXmzDbU06Q/RlW7CYC4eHbGpbFLLNCGfqdEfwRqSymaVi
WT98POI+0KFd+3w1dqjZ8oLuGcy4Nld5dHMDpF8inIFV9bw4qWVkN/eMDDRvLorI
6KWhBLF0L8ku6O1qkDRG7x0yXhqbpI/JYUTd9I0BQdVN27x5pY3mbp6I96cpe9HC
XUN5resY4I4ZgCvS7tg273CEFB5+FbOPfSAlJ813oTyG3Lf2JQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBm3Zrfz6cB9sQnBC7o0i07GufwJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTM5MmI3ZTYtMTg4NS0z
NTBmLWI3ZTUtNjEwMWRkMzY5MGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmhVpAwQA
mi+ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGOgVxw2X0RuF3dc/i8QjQOWjDthdF/ZZsZQOqJuuxdGYLRq
uoa3bI3OBpMEcPu0sBpQLmZY/s7r1lyj1mSazSh7OmCHZIwlovmyryZeaclOJRWK
u7AEEwosQqSqdV8qGYW2n5VVWu1kRMVIynicZmHGgOXb1juZY2gfs37qLdtaGEF3
AKiUc3MzrGRGgFwjID1XiFz4DncD3dOEVRzbzFR6Mx1hcthd4RUMo1a51d05/BCs
S9sheCQ9a1E8wukV2NZJ9wJER/0IK/oHS50udgsc7aEQv1MsUrSuY6WwcZTiTNDP
Bdd6+QypapgvM42jikOjFezO0j8vjrg+vVgBM7Q=
-----END CERTIFICATE-----
Generated at Tue Jul 28 00:20:39 2026 by rpki-client