Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/280b37f0-0c82-30f1-a8da-21582cca94c0.roa
File:                     280b37f0-0c82-30f1-a8da-21582cca94c0.roa (raw, json)
Hash identifier:          dAzBk7zftZWpO8dRC2OAJ3uayZMmQ6UzkLCiusU+MDo=
Subject key identifier:   FA:B9:A7:2A:30:3F:44:BB:52:BD:5D:E5:0C:5C:D8:66:B5:27:78:C8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E2D9F42D35DFD206040F35880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/280b37f0-0c82-30f1-a8da-21582cca94c0.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     272030
IP address blocks:        149.46.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:42:d3:5d:fd:20:60:40:f3:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=b86012d5-1c17-4802-9fb0-7e6f81c8f11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:88:ae:e4:e0:8b:c1:26:b8:fa:ec:2f:ce:
                    8d:79:1a:7b:30:e8:30:9d:fb:be:a0:c5:80:47:c5:
                    a4:35:64:b1:87:c3:6e:77:3d:3b:29:9a:33:1b:20:
                    3b:ab:a6:17:72:93:af:7f:95:a2:b0:94:7a:59:dc:
                    24:85:81:32:a0:dc:fe:28:1f:a2:92:18:94:07:9a:
                    f7:e4:7f:c5:0b:9b:e7:df:1a:b2:cc:3d:06:7b:be:
                    db:a2:15:b8:50:77:9c:30:fb:d8:49:0c:1d:46:4a:
                    89:24:c8:2c:19:96:66:0a:38:0f:85:41:c3:66:e7:
                    d5:45:9b:bf:87:01:15:ae:2b:e4:64:f2:24:a3:31:
                    ec:73:d1:d7:bd:24:a6:96:b3:0e:d8:d8:7b:aa:f4:
                    53:6c:65:b3:43:89:3f:24:b0:ea:e8:e7:a8:e0:1c:
                    20:27:f8:c7:0d:b0:f5:cc:0a:d1:f3:f3:d3:85:c0:
                    34:4b:4a:83:dd:b7:b4:96:71:47:57:11:7c:51:6d:
                    7f:4d:eb:6c:ec:ba:2b:c7:79:72:92:0d:b7:8d:23:
                    5c:a7:48:4d:6a:ea:76:3a:5a:f4:d3:42:f6:fd:28:
                    f1:dc:92:65:bc:9c:fc:95:79:b2:40:f4:49:7c:31:
                    02:c0:02:14:82:df:4e:9a:43:4b:a1:48:30:55:f8:
                    77:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:A7:2A:30:3F:44:BB:52:BD:5D:E5:0C:5C:D8:66:B5:27:78:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/280b37f0-0c82-30f1-a8da-21582cca94c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.46.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f5:ec:03:21:68:49:3b:c3:ee:33:b2:f2:00:10:3f:43:7b:
         91:7f:1b:f7:f3:23:f7:1c:cc:96:5a:42:8b:b3:50:1d:56:11:
         57:0a:f0:c7:27:12:7a:9c:b9:9b:02:cf:c4:c8:6e:c3:9f:a7:
         f2:31:01:e1:a5:04:1b:2f:06:ff:6b:7b:c0:5a:25:37:de:37:
         1b:ae:75:de:ad:6b:90:bf:d3:a6:11:16:4c:c4:1f:1d:4e:ba:
         50:f7:a5:bf:9c:1d:dd:38:66:7e:21:69:8b:31:26:8e:d8:ba:
         cb:19:6c:28:4a:a8:74:cb:e6:f4:40:0a:9c:3b:5b:07:cc:79:
         a8:d3:6f:b1:d3:41:d5:ae:05:b5:3c:3b:2b:82:15:66:2c:71:
         4e:31:85:05:86:96:1d:60:2d:fa:e7:31:5e:5e:e7:2e:fd:a3:
         c4:e0:0d:ee:21:0a:1f:b3:ea:9e:6b:5f:fe:7a:90:32:f3:1a:
         7f:85:1a:f8:bf:21:9d:60:41:36:34:de:a1:87:ae:9f:bf:fa:
         4d:26:14:7e:c8:dc:99:a5:35:f4:61:d8:94:f9:58:10:07:ae:
         c2:89:7d:1c:34:b0:f0:bb:51:53:26:a1:6f:b5:91:f2:67:8a:
         e5:88:1f:7b:32:2b:ae:d1:8e:24:4c:15:22:aa:4a:e7:58:17:
         60:90:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 16:36:00 2026 by rpki-client