Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d92abb7-123c-3d74-bcd4-4db8c4f2c0a6.roa
File:                     3d92abb7-123c-3d74-bcd4-4db8c4f2c0a6.roa (raw, json)
Hash identifier:          cS6jQa37d7GACys43tspF4sbRqHQpHifrrqD7BwNKfA=
Subject key identifier:   26:40:EB:CF:2F:82:AD:93:A9:3C:55:35:94:8C:AB:61:6C:01:B6:1B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E0700A3E642C08F459B23C8B0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d92abb7-123c-3d74-bcd4-4db8c4f2c0a6.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     138096
IP address blocks:        204.157.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a3:e6:42:c0:8f:45:9b:23:c8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=b48cf8d6-5d67-4a4d-9b31-153b8b69f1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:06:1e:8a:df:52:14:bf:a1:1d:ef:6e:de:
                    9b:a5:61:06:82:d9:a0:f1:b6:60:c7:d0:4b:0f:03:
                    41:d1:be:b4:a8:87:1e:95:e9:ca:cf:8b:a0:8d:0f:
                    0b:bb:96:5a:d2:c6:7b:8b:74:13:58:f8:df:58:72:
                    7c:9b:2c:da:c0:f8:5f:0a:57:db:ed:ef:e0:4b:39:
                    95:76:30:0e:3e:33:a5:df:98:b0:c6:fa:11:84:c2:
                    b9:1c:3f:28:7e:89:e4:0f:59:29:3e:f4:8a:ed:dd:
                    ac:e8:c4:dc:83:52:a5:3d:db:5d:a1:de:c4:84:f1:
                    9b:96:56:6a:04:82:90:e1:2c:1e:6a:0a:66:6e:13:
                    8a:bf:ed:d3:e3:d7:e7:f6:5a:b2:10:9d:0d:d2:f8:
                    3d:13:85:46:9f:c7:a3:41:9b:bb:16:d5:29:5e:29:
                    d6:e5:90:8d:aa:94:dd:bd:ff:a1:98:b4:10:5f:f0:
                    ca:2c:1a:b7:96:b3:0a:cc:32:f5:0c:08:43:b2:79:
                    15:f1:89:b0:fa:cf:88:b2:58:b6:ea:66:94:b4:34:
                    7d:30:b3:6a:47:d7:3c:99:77:11:67:94:df:e0:41:
                    45:c9:19:51:1c:ce:29:81:e7:4c:76:26:b1:e3:a7:
                    05:0d:de:b1:e4:13:88:d3:f0:17:54:90:b8:db:f7:
                    f6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:EB:CF:2F:82:AD:93:A9:3C:55:35:94:8C:AB:61:6C:01:B6:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d92abb7-123c-3d74-bcd4-4db8c4f2c0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:e0:bd:5d:69:b4:46:a6:7a:74:2e:31:e2:bf:7d:b7:53:
         67:f0:b6:d5:03:e9:81:7b:51:a6:31:9d:65:67:d8:b5:cf:99:
         48:38:fe:21:ba:2a:2b:91:e6:ec:9b:c3:0b:00:69:f3:73:e1:
         aa:2d:e6:eb:c8:ea:d3:ea:cd:01:a9:02:79:29:e5:11:a3:ad:
         56:cc:9f:9b:8d:ff:57:ea:45:44:74:ec:58:e9:e2:1a:75:2d:
         81:82:8e:69:09:3e:f1:73:df:3e:49:18:e3:21:44:17:91:99:
         b7:97:8d:25:8f:8a:f9:a6:5c:e4:26:d5:1f:32:1a:99:e2:28:
         89:66:1a:12:cc:f8:c2:cc:30:63:c9:58:31:c1:36:4c:94:a4:
         96:e7:f6:c9:29:f2:10:6b:86:16:e9:aa:43:1f:fb:5b:5f:f0:
         2c:e5:13:fe:65:3c:7e:97:7b:be:99:a1:f7:fb:1c:71:30:94:
         57:3a:1e:bb:ed:02:8a:d1:dd:e7:ef:ad:1b:92:de:a0:de:8f:
         58:44:df:4b:93:af:dc:92:a4:c1:23:3f:d8:d1:a6:e7:94:eb:
         c0:54:75:1f:b8:ff:45:e9:46:45:66:28:68:e7:23:d6:4b:60:
         2a:40:f3:93:a1:f9:8b:13:f5:66:c8:fb:89:1a:97:01:2b:e0:
         50:42:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:35:42 2026 by rpki-client