Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4dda0ae1-52d8-359e-8a1f-19dbbac7e048.roa
File:                     4dda0ae1-52d8-359e-8a1f-19dbbac7e048.roa (raw, json)
Hash identifier:          QJycKsmv3PkwR48stX5bZcE8j9xenXbuUvZXvcm20zg=
Subject key identifier:   8D:7B:2E:25:53:B7:CD:DA:04:83:ED:55:85:CC:3E:AD:DB:AC:A4:FE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E0435D63DB4D058BF3D3A7F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4dda0ae1-52d8-359e-8a1f-19dbbac7e048.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     267846
IP address blocks:        154.41.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d6:3d:b4:d0:58:bf:3d:3a:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=61d6f5a3-88fb-4fcc-9ed6-ae248e368b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:6c:43:60:80:33:3f:17:d4:9d:3a:69:dd:
                    3f:e9:bc:a1:a4:57:25:18:b8:99:21:5a:09:9b:c4:
                    db:5e:8c:76:d1:d0:6b:a8:a4:38:6e:84:f8:4a:6a:
                    3a:4e:cc:2c:76:68:0b:aa:15:cf:94:5e:02:16:d0:
                    15:a5:07:ff:17:0d:ca:47:8c:40:b9:54:1e:87:2b:
                    fe:df:0f:72:d1:19:96:07:c9:3c:1f:d0:71:36:72:
                    90:16:d7:39:93:e3:23:5f:75:10:a9:88:02:74:25:
                    be:64:d3:af:6a:bc:34:34:f4:47:41:65:12:3c:56:
                    d2:3b:60:9a:0b:b9:66:d1:43:a2:a2:98:9e:05:f1:
                    ba:9d:42:6c:e5:69:57:1b:18:d4:1a:84:60:1e:02:
                    76:30:20:a4:f9:b8:67:73:50:d9:38:70:53:c4:f3:
                    50:51:12:d8:58:e3:72:e9:00:d3:13:59:af:81:84:
                    66:8e:66:82:67:94:63:7d:cc:17:e9:8d:4c:2b:98:
                    b7:98:02:af:2e:69:e1:7a:a7:aa:b0:13:8b:f8:c4:
                    cf:ab:1d:68:e2:fe:6b:48:e5:2d:a4:af:46:27:a2:
                    ee:80:4c:57:bf:30:cf:fb:ba:94:34:31:e6:6e:d6:
                    59:85:c5:a5:d9:81:79:4c:b3:dd:58:21:18:36:5c:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7B:2E:25:53:B7:CD:DA:04:83:ED:55:85:CC:3E:AD:DB:AC:A4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4dda0ae1-52d8-359e-8a1f-19dbbac7e048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.41.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:01:5c:07:a7:ae:0e:1d:6f:72:81:99:41:55:15:4b:f6:13:
         14:9e:fa:72:2d:f1:89:c9:2f:23:b4:a8:ec:b2:df:74:49:04:
         d3:c5:53:79:16:d0:ca:a0:32:24:89:2c:82:cb:b2:21:95:c4:
         44:80:f0:cd:92:43:2e:0c:d8:57:a7:49:ab:53:09:dc:5c:72:
         18:65:4b:81:f2:f9:4e:b1:74:f9:7a:e2:36:38:f3:45:75:6e:
         1e:1a:12:78:fc:57:ef:2a:fa:3b:ec:4e:dc:29:0a:4a:31:c5:
         67:55:44:10:3f:70:01:46:ef:66:36:0e:88:17:f1:db:dc:6d:
         18:a2:80:1e:d0:25:bf:22:7f:d1:fe:37:7b:7a:b7:98:06:fd:
         c8:ba:14:4f:27:03:cc:0b:cd:b6:cb:35:18:7a:07:87:0a:83:
         0f:ba:83:ff:94:16:bf:0e:ee:56:18:d1:1c:d4:95:b4:6d:08:
         46:21:1e:2a:28:1f:38:6a:29:c0:7a:6e:46:5c:f0:a9:d4:2d:
         bb:e1:56:42:4f:61:b6:35:67:0c:ef:c5:00:c0:ff:11:6f:bc:
         f2:7a:6b:91:0d:44:a5:0c:38:9d:42:c6:81:1f:bc:d2:2e:ea:
         26:02:07:73:f2:9c:00:1d:01:18:e8:98:ed:d3:50:0c:89:62:
         27:3e:39:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:35:43 2026 by rpki-client