Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f86bcb0-7516-33e3-afa5-0a5d172f52ea.roa
File:                     1f86bcb0-7516-33e3-afa5-0a5d172f52ea.roa (raw, json)
Hash identifier:          5Nb2vgd/KaeiAAfVvjEZplmDFsS59YVa/LU58b7FqnU=
Subject key identifier:   77:C2:6E:B3:1E:0C:82:36:C3:FE:09:08:B4:C5:A4:02:36:49:C0:51
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1467AEF509341D01855D906B
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f86bcb0-7516-33e3-afa5-0a5d172f52ea.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     215831
IP address blocks:        154.46.170.0/23 maxlen: 23
                          154.46.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:ae:f5:09:34:1d:01:85:5d:90:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=579ed4e7-662b-4c6f-a6ca-843861b421de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:73:a7:90:46:b4:de:b3:fd:ba:d4:7a:1e:
                    fd:f3:0a:10:33:20:3d:88:3f:23:4c:27:bd:9e:9a:
                    c5:04:f2:77:d6:5e:fc:4a:b2:83:a1:22:4d:f9:8e:
                    bc:02:68:1c:b8:71:86:d6:24:58:1a:a4:96:2b:a4:
                    82:01:2a:6c:73:a1:08:6d:32:d3:b4:56:4d:80:bb:
                    3f:78:fc:74:bd:ce:ba:8a:aa:7f:2e:1c:b7:71:ad:
                    81:93:1e:f1:97:8d:48:82:30:80:e1:f1:b7:ba:17:
                    6b:58:37:07:1f:cc:93:69:b6:73:af:ae:c8:77:21:
                    4d:2f:60:f9:79:40:8f:79:d0:f5:01:d9:77:e6:dc:
                    fc:87:52:ad:fe:6b:ec:f5:bb:c4:5f:f7:af:ec:06:
                    1b:aa:8b:70:af:86:f0:3c:45:62:39:02:df:28:ae:
                    fb:45:f4:62:09:bf:e8:63:7f:88:14:7a:46:b2:dc:
                    a5:8b:f9:56:3e:a7:f1:b9:ce:31:88:3e:e8:eb:a4:
                    98:a4:08:f1:4a:3d:eb:59:f4:c6:db:2d:12:f1:e9:
                    ab:19:56:34:0c:fd:2d:6a:a1:7a:fa:99:b0:6f:76:
                    2a:4e:42:5c:49:f4:d9:d5:9a:4e:10:49:c6:28:cd:
                    48:fb:fc:46:ba:c2:7e:fc:82:97:34:8c:bb:4b:9b:
                    a6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C2:6E:B3:1E:0C:82:36:C3:FE:09:08:B4:C5:A4:02:36:49:C0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f86bcb0-7516-33e3-afa5-0a5d172f52ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.46.170.0-154.46.172.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ef:ac:e9:b3:45:4b:ae:f4:ef:ce:73:d6:67:24:a0:0d:03:
         55:cc:a9:28:9d:bd:94:a5:a4:23:2b:b6:1c:a1:87:4c:48:c6:
         e7:a3:ac:c6:4d:e5:00:ac:b7:d2:1d:40:a0:33:36:d8:a9:e0:
         dd:dc:3f:64:41:12:b8:6a:88:b2:e3:bd:48:df:e9:fc:1d:d1:
         48:9e:82:e9:0c:f0:c7:a3:11:d1:4e:c4:fb:4f:27:fb:95:79:
         32:a5:a7:89:03:af:d5:7b:b6:a9:10:67:3b:7c:08:f3:8a:a4:
         85:98:68:09:f4:63:05:b9:c4:3f:0c:98:2f:be:86:93:df:22:
         a0:28:59:c1:db:9c:9d:84:65:53:60:da:ac:3e:a5:c1:45:c1:
         f0:19:53:a2:16:5c:f5:01:70:e2:7c:d0:e9:8f:78:20:56:14:
         3c:7e:f2:16:0e:4f:41:19:eb:e4:fa:16:9a:2f:78:08:40:2c:
         76:f5:5a:32:96:b6:bb:ee:a8:08:3f:f7:2a:fa:83:b4:3f:9b:
         36:79:01:37:0e:f5:91:64:3c:d0:ce:94:d1:b7:f6:0b:0d:73:
         9f:3e:cd:9c:63:cd:00:28:dc:80:1a:b8:8b:08:5a:05:90:14:
         e7:0f:cb:01:57:be:f1:0d:25:c2:c8:79:ec:a5:27:88:47:3d:
         db:01:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:18 2026 by rpki-client