Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47982f3d-cad0-37a8-bed7-83043c6a7e4f.roa
File:                     47982f3d-cad0-37a8-bed7-83043c6a7e4f.roa (raw, json)
Hash identifier:          kdQAbloPPQMcPnWCWkn5klkREN8l7VCGdlIEfbMzNUU=
Subject key identifier:   43:6D:0D:FE:72:88:18:98:32:74:6B:62:AE:B1:EB:B9:2F:4C:F4:32
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F7FECD55B46681E328D471400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47982f3d-cad0-37a8-bed7-83043c6a7e4f.roa
Signing time:             Wed 14 Oct 2026 13:20:18 +0000
ROA not before:           Wed 14 Oct 2026 13:20:18 +0000
ROA not after:            Tue 12 Jan 2027 14:20:18 +0000
asID:                     41354
IP address blocks:        149.5.100.0/23 maxlen: 23
                          149.5.104.0/22 maxlen: 22
                          149.5.120.0/22 maxlen: 22
                          149.36.16.0/20 maxlen: 21
                          149.40.96.0/19 maxlen: 19
                          149.71.228.0/22 maxlen: 22
                          149.86.64.0/19 maxlen: 19
                          149.107.64.0/18 maxlen: 19
                          154.61.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:ec:d5:5b:46:68:1e:32:8d:47:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 14 13:20:18 2026 GMT
            Not After : Jan 12 14:20:18 2027 GMT
        Subject: CN=450a22b6-8d56-4e8c-b5df-579cfd64abbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bb:e5:ed:43:c6:f1:52:bd:87:d4:f0:ca:04:
                    84:c4:f6:e3:6f:99:f5:f5:73:7f:68:fd:7f:f2:45:
                    49:22:fb:05:e6:4f:49:bc:8f:b2:e4:c2:19:eb:2c:
                    20:e3:57:1c:8e:46:6b:a0:a5:36:3c:5c:b0:ea:84:
                    64:29:e0:42:bf:53:06:63:fb:09:b6:f8:17:44:6a:
                    03:76:99:e1:a6:e2:85:ed:ee:c2:bf:39:e4:08:93:
                    09:06:d4:56:98:93:69:07:bd:65:1a:8d:69:a0:57:
                    53:33:cf:22:54:50:79:8b:ec:63:39:b5:2a:41:9d:
                    f8:45:83:e6:d2:1f:fd:fc:56:fd:ec:d5:c5:06:22:
                    fe:34:20:ce:45:49:38:49:44:b3:af:15:74:8f:1c:
                    44:c1:27:f5:be:ae:de:70:34:9b:a8:45:29:a7:ed:
                    31:94:53:c2:0f:49:47:c8:0a:5b:42:8e:e4:e6:71:
                    5c:07:73:bc:29:73:14:ed:d8:24:75:b8:26:46:53:
                    46:86:2d:ec:1e:99:36:00:ad:d2:64:c9:f3:0a:7f:
                    cd:4d:be:a2:44:23:51:d8:b0:c9:74:8c:82:9e:2f:
                    06:9d:21:bb:90:49:07:ef:56:7e:04:36:54:0d:2e:
                    86:e2:8f:2b:fe:01:f9:0a:8a:bf:9f:2b:fe:30:3f:
                    06:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:0D:FE:72:88:18:98:32:74:6B:62:AE:B1:EB:B9:2F:4C:F4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47982f3d-cad0-37a8-bed7-83043c6a7e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.5.100.0/23
                  149.5.104.0/22
                  149.5.120.0/22
                  149.36.16.0/20
                  149.40.96.0/19
                  149.71.228.0/22
                  149.86.64.0/19
                  149.107.64.0/18
                  154.61.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:b5:a6:cf:ad:49:c4:32:fb:f6:8c:ed:de:bc:10:f1:a8:
         cb:2c:8f:6c:03:cb:52:9e:bc:ca:55:ee:61:82:ad:ec:4f:a0:
         25:22:2c:26:18:a7:2c:ed:4a:f5:e2:9e:87:9c:22:29:e1:24:
         e1:0d:62:52:3f:df:aa:cc:5b:6a:8e:66:48:6c:b8:9c:99:0d:
         ee:a4:4f:4a:4c:93:f3:7a:72:6b:ae:09:3e:4c:0d:aa:9c:94:
         58:d0:42:44:4f:ee:f7:a9:6f:7f:44:a2:d4:81:2b:d0:53:63:
         96:a9:3f:b0:3c:19:fd:59:3a:91:7a:a7:73:08:fa:cf:9d:e0:
         b0:3a:ca:43:22:85:17:05:f4:9f:79:86:fc:cf:ca:76:3b:94:
         da:46:d6:43:43:5a:dc:27:ef:72:25:f6:f0:76:0a:db:39:39:
         ac:aa:4c:60:64:6b:16:0b:bd:f0:24:a3:1b:61:47:b3:b9:bf:
         bd:a7:c5:a4:cc:83:d5:20:53:b1:54:e9:34:71:72:c0:db:7c:
         82:9c:0f:11:fc:6b:9d:53:89:ec:eb:83:35:6e:6a:45:36:f2:
         f7:e4:6e:85:c9:3c:77:2d:1c:27:54:2b:68:e9:fa:73:46:d7:
         bc:b1:59:ee:a8:f1:42:7c:3f:58:f1:7d:97:9f:22:ce:94:34:
         ab:51:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:08 2026 by rpki-client