Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2affd19e-e716-3a4c-bfae-caffe22223ed.roa
File:                     2affd19e-e716-3a4c-bfae-caffe22223ed.roa (raw, json)
Hash identifier:          JLUrREcSysRyf/O8xD1MsHFy8zHnR1iUgAgq5xttxHk=
Subject key identifier:   31:C7:CB:D5:1D:72:6A:58:0A:1B:79:32:95:AA:B3:F2:DA:CD:31:DC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA787CB638560AF2B9FF7F4F8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2affd19e-e716-3a4c-bfae-caffe22223ed.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        154.53.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:cb:63:85:60:af:2b:9f:f7:f4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1ba058fa-49ed-4834-b4dc-2aafeb18a803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:bc:da:41:4a:03:34:9e:b1:0e:d8:97:43:
                    cb:27:03:a9:94:51:b5:3e:2e:c1:50:d4:57:d8:a8:
                    cc:16:17:0e:bb:1b:23:9b:3b:a0:a7:2d:03:48:a3:
                    41:52:1a:6d:ca:78:76:aa:00:33:54:0a:67:29:62:
                    78:da:02:82:d5:43:9c:c2:87:17:c3:b2:29:49:99:
                    64:e1:0d:10:ee:e7:d2:54:c2:d8:d7:7a:5f:22:ad:
                    35:79:3e:6e:1c:9e:83:c7:90:b8:c0:97:71:e8:78:
                    8f:62:57:89:16:a1:77:8c:d8:12:7c:c6:87:6c:2c:
                    f4:5c:15:3e:dd:2e:49:74:73:27:c5:4a:97:9f:0f:
                    fe:2e:09:98:9c:aa:c2:ef:42:23:05:8c:8f:67:92:
                    10:c1:2f:6c:e5:38:a5:37:7b:b5:59:b5:93:9a:ac:
                    c7:d4:06:27:cc:21:7d:fb:3a:b6:04:25:60:f1:cb:
                    65:f7:74:81:10:c1:a6:47:17:7b:84:ad:09:42:64:
                    f8:69:3a:23:1c:63:4b:5e:82:05:b3:48:23:a7:88:
                    b6:8d:87:84:45:eb:34:74:ee:02:7d:d3:de:12:81:
                    fa:91:f4:f5:5a:c2:f7:a6:e9:a4:58:59:8a:31:03:
                    ea:bd:5e:db:33:e8:9e:39:4a:48:e6:c9:bb:af:16:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C7:CB:D5:1D:72:6A:58:0A:1B:79:32:95:AA:B3:F2:DA:CD:31:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2affd19e-e716-3a4c-bfae-caffe22223ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.53.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:11:fa:66:ee:0d:20:b3:a6:85:ae:98:d0:f4:b6:3c:9d:3a:
         de:bc:4f:ad:da:4e:7e:86:2f:4d:d8:c8:9f:59:84:7c:23:ea:
         63:80:6a:1b:39:22:e4:63:fb:bc:8e:2e:86:05:01:f7:fc:80:
         69:a6:0a:19:e3:63:24:0a:74:20:c9:a0:24:19:ef:26:1d:52:
         12:5c:f5:a1:fd:9c:fd:1d:f6:4c:10:c2:29:27:33:58:d6:22:
         11:7e:dc:72:f2:36:60:c8:0f:af:f0:d0:c2:50:01:fd:8d:72:
         11:8f:fe:ac:e7:f6:fc:a6:1d:54:cd:ff:a1:dd:ba:93:f9:32:
         15:fc:94:79:e3:28:da:ec:96:79:c2:0b:cf:56:a5:3f:7c:69:
         1c:a6:87:03:58:5e:87:ff:7a:68:2b:5b:9e:9b:98:8f:89:c3:
         89:ab:51:9d:d8:d5:bb:87:ed:77:9c:e8:23:e4:a1:a9:23:7c:
         b7:44:ad:fc:d9:39:1e:3e:ae:d7:62:6e:2d:f1:73:c8:05:d1:
         4b:92:02:a6:37:a6:48:19:b8:15:f7:54:b4:26:48:3a:4e:e6:
         4f:89:0d:95:a0:b0:6b:c9:32:94:33:66:f4:9f:b3:4d:55:41:
         c6:64:ae:f2:0f:9a:91:1b:e4:15:4f:3e:ad:ba:ce:29:b1:fe:
         c9:92:62:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh8tjhWCvK5/39PgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWJhMDU4ZmEtNDllZC00ODM0LWI0ZGMtMmFhZmViMThhODAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfq82kFKAzSesQ7Yl0PLJwOplFG1Pi7BUNRX
2KjMFhcOuxsjmzugpy0DSKNBUhptynh2qgAzVApnKWJ42gKC1UOcwocXw7IpSZlk
4Q0Q7ufSVMLY13pfIq01eT5uHJ6Dx5C4wJdx6HiPYleJFqF3jNgSfMaHbCz0XBU+
3S5JdHMnxUqXnw/+LgmYnKrC70IjBYyPZ5IQwS9s5TilN3u1WbWTmqzH1AYnzCF9
+zq2BCVg8ctl93SBEMGmRxd7hK0JQmT4aTojHGNLXoIFs0gjp4i2jYeERes0dO4C
fdPeEoH6kfT1WsL3pumkWFmKMQPqvV7bM+ieOUpI5sm7rxY7DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHHy9UdcmpYCht5MpWqs/LazTHcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmFmZmQxOWUtZTcxNi0z
YTRjLWJmYWUtY2FmZmUyMjIyM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmjXIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUR+mbuDSCzpoWumND0tjydOt68T63aTn6GL03YyJ9ZhHwj6mOAahs5
IuRj+7yOLoYFAff8gGmmChnjYyQKdCDJoCQZ7yYdUhJc9aH9nP0d9kwQwiknM1jW
IhF+3HLyNmDID6/w0MJQAf2NchGP/qzn9vymHVTN/6HdupP5MhX8lHnjKNrslnnC
C89WpT98aRymhwNYXof/emgrW56bmI+Jw4mrUZ3Y1buH7Xec6CPkoakjfLdErfzZ
OR4+rtdibi3xc8gF0UuSAqY3pkgZuBX3VLQmSDpO5k+JDZWgsGvJMpQzZvSfs01V
QcZkrvIPmpEb5BVPPq26zimx/smSYow=
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:27:42 2026 by rpki-client