Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d0f135-126c-345c-a4d7-9a12a92d5439.roa
File:                     24d0f135-126c-345c-a4d7-9a12a92d5439.roa (raw, json)
Hash identifier:          jeAajA7o1QKlmoxOmWBx+EPZgZDQtTXEFKDfhCcpLTg=
Subject key identifier:   3A:82:9E:EC:46:EA:C8:24:71:21:5F:76:FB:F6:15:82:52:67:E1:E8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EB9AC50792BF2CA4650B7ED80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d0f135-126c-345c-a4d7-9a12a92d5439.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     208972
IP address blocks:        149.34.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:50:79:2b:f2:ca:46:50:b7:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=5bf19d8d-a6e2-434d-839a-54344061ebb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:5b:b9:28:b2:45:ba:70:5d:71:dc:a9:2a:
                    6e:b3:53:20:a6:42:98:a9:68:d3:94:ad:56:0c:ff:
                    28:ad:4e:cc:35:c1:f7:47:85:90:3b:f8:b1:67:31:
                    bc:ba:2c:ea:c2:2d:1f:43:d4:04:ba:7c:e7:8e:af:
                    d0:c8:fc:2f:84:ca:3a:fe:30:ec:56:6e:3c:90:96:
                    54:3b:40:c0:02:00:f3:ba:bd:0c:d5:3f:09:9c:0b:
                    9b:25:d2:d6:0d:fd:2a:71:62:62:90:98:fe:9d:f8:
                    6a:71:3d:38:7d:1a:b8:a5:42:a5:f8:c3:2b:68:2f:
                    64:92:0f:ca:14:c7:18:11:45:b6:ff:9a:af:91:5f:
                    ea:16:7f:ed:0a:73:50:d1:7b:91:b3:af:a1:36:16:
                    cc:6a:91:99:42:cc:0f:44:55:31:d0:85:2d:6d:88:
                    5b:8a:57:55:0c:99:63:bf:85:01:84:7f:3b:e2:70:
                    c0:75:0a:42:62:62:3d:b3:c0:1d:69:a2:88:d7:cb:
                    a1:b8:ee:a6:22:d6:b7:28:d1:6a:87:92:d5:d7:2d:
                    92:c4:e3:ff:04:62:23:77:7f:3b:1c:4f:c3:3f:71:
                    16:1b:c2:44:9a:92:a6:c6:93:9d:41:0e:e2:cb:45:
                    1f:dd:c0:46:09:cb:92:ca:1d:12:df:51:93:0f:2f:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:82:9E:EC:46:EA:C8:24:71:21:5F:76:FB:F6:15:82:52:67:E1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d0f135-126c-345c-a4d7-9a12a92d5439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.34.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:33:2d:6b:e7:5d:66:73:0b:5a:5e:e6:44:2e:92:e9:bc:
         26:61:7f:de:a2:33:c0:c0:84:1a:69:c8:0e:a2:f8:49:96:fa:
         03:fa:75:ac:f5:77:f1:fe:b2:17:a6:3f:c7:fa:e8:66:1c:1e:
         fb:51:0a:fe:1a:56:51:29:13:1b:0c:e5:fc:95:0a:a9:0f:03:
         7f:b5:c7:9a:6c:d8:c9:e8:da:56:72:4b:a7:d5:ba:d9:ce:3b:
         d8:5e:cd:56:00:a6:92:07:22:35:93:1c:8c:33:92:f2:5f:f7:
         3f:3e:70:7e:01:ef:d6:a1:e5:0b:13:79:31:e2:b2:81:39:12:
         b6:4a:d0:4c:4d:71:b6:74:cf:1c:f8:f8:a0:ca:6f:fb:2c:76:
         89:19:3a:92:d0:19:5e:44:1c:10:62:92:e1:c7:a1:80:3d:16:
         af:e0:38:4e:58:e4:10:ee:77:1d:9a:e0:11:55:99:5c:4a:23:
         69:07:da:7a:4b:19:06:83:9e:b5:4e:6f:7d:e2:38:e9:ff:dd:
         3f:ac:b4:21:c6:06:f9:e8:ec:9c:17:4f:87:b9:a2:6c:be:3c:
         2d:3b:11:2e:1a:bf:fd:1c:c3:8a:3b:d1:31:7a:8e:9f:3e:65:
         a7:0f:df:c2:21:d5:ae:0b:e5:d5:e2:4a:72:c0:2d:bb:42:45:
         5e:cd:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:44:00 2026 by rpki-client