Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3276ec62-da7a-38fd-9203-65e412cb5537.roa
File:                     3276ec62-da7a-38fd-9203-65e412cb5537.roa (raw, json)
Hash identifier:          fwIvTDJIfQtof50PD78M65nOxBPfnZPc+O9GlEV1ywk=
Subject key identifier:   26:DE:42:40:30:F4:44:FD:DB:53:10:C8:86:79:8A:B0:CB:0E:9D:02
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EC20C7F9799B34D0DDAD7DF00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3276ec62-da7a-38fd-9203-65e412cb5537.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     200171
IP address blocks:        154.62.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7f:97:99:b3:4d:0d:da:d7:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=adc1aa90-1377-4661-bc76-e516be102af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:1d:e2:48:f4:51:92:6e:94:f5:a3:eb:89:
                    0f:ee:7c:8b:ee:bf:91:54:ab:c8:6a:8f:ec:79:72:
                    87:6a:06:7f:13:bc:60:01:ed:07:da:cd:d9:af:51:
                    42:cc:d2:2f:6f:b0:3e:b1:83:e9:09:f6:fe:9b:4a:
                    33:2f:fc:1e:fd:b4:77:6b:9b:33:a8:c4:d5:95:85:
                    fe:bf:64:29:9d:31:bb:b6:c2:fd:1e:1c:f1:40:e2:
                    0f:71:2a:3b:2d:68:9c:1c:d1:bb:66:40:e6:24:c9:
                    b4:67:ec:2b:74:b3:bc:62:bd:b1:fa:38:bf:2f:50:
                    9d:a8:d2:c5:88:e8:b1:d2:9a:d8:31:f7:00:76:86:
                    86:56:c3:88:e8:41:88:d1:43:99:d9:be:b2:03:5c:
                    3e:94:92:4f:8e:af:d2:97:aa:4b:83:ed:7e:d8:07:
                    0b:52:b4:8f:06:ed:6a:73:37:11:f6:31:53:6f:d3:
                    38:83:01:fa:9e:78:c9:5e:95:60:cd:31:50:c9:91:
                    1b:9f:b1:72:26:82:31:d8:08:1b:19:f1:37:66:ca:
                    e4:fc:22:3b:98:b8:0c:8e:c3:c7:21:55:e1:88:6b:
                    53:ff:cb:fa:fc:33:77:d4:da:61:44:b9:3c:52:c0:
                    a4:cc:5e:1f:d6:5e:5c:c0:ed:61:39:30:c5:cc:eb:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DE:42:40:30:F4:44:FD:DB:53:10:C8:86:79:8A:B0:CB:0E:9D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3276ec62-da7a-38fd-9203-65e412cb5537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.62.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:18:1d:97:0b:b5:51:a3:ef:b8:6d:98:86:8e:47:72:16:4d:
         27:08:a6:36:7e:49:1a:4b:c1:6a:0d:af:f0:6c:67:46:ff:4e:
         e6:69:3a:b8:b0:fa:e2:73:70:ac:89:b9:9e:ba:81:db:16:bc:
         e6:5c:c4:9a:ff:54:d8:71:18:36:2c:3a:cc:52:ad:52:55:31:
         94:26:ed:65:3b:ff:5d:dd:1a:97:41:75:de:4a:de:ff:bb:4e:
         17:61:2e:97:98:e6:24:3e:eb:12:4e:f0:9c:98:2e:22:e5:ae:
         f7:47:5d:7e:dc:e8:8b:a7:3c:b7:16:64:2b:bc:fa:2e:ab:0f:
         02:b5:f6:71:b8:fc:82:09:db:3e:70:3e:82:27:88:3d:3d:36:
         91:81:99:65:16:37:19:ce:99:92:6c:5f:34:5c:0a:66:55:d8:
         21:4f:f0:a5:f4:61:42:69:47:ff:c8:a1:29:bf:86:a9:bd:b5:
         59:54:06:64:dc:d4:9a:f4:10:4d:dc:71:b1:9d:32:5c:39:95:
         d9:32:b8:d8:74:8f:e3:07:ab:1c:32:72:18:c5:be:e1:f9:78:
         7c:25:01:91:ee:78:58:04:ac:77:9a:9f:78:8e:76:d1:c3:a0:
         f4:3c:37:fb:89:78:d5:2f:16:6d:1b:a0:a2:6f:b5:5a:73:d4:
         25:74:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:11:48 2026 by rpki-client