Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/892c6ae8-6520-3eee-976b-66cad0c84d6a.roa
File:                     892c6ae8-6520-3eee-976b-66cad0c84d6a.roa (raw, json)
Hash identifier:          r87VWUxEvkIP1xqcf6lqM00ZRw2QZHdSn8iMJ8vetfU=
Subject key identifier:   2E:09:0B:D3:9D:37:C6:8C:C4:1A:5B:BF:BE:32:F4:4A:E0:90:A6:F0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E69B148D9F4F5F07B6A444E00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/892c6ae8-6520-3eee-976b-66cad0c84d6a.roa
Signing time:             Mon 06 Jul 2026 21:25:36 +0000
ROA not before:           Mon 06 Jul 2026 21:25:36 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     8796
IP address blocks:        154.23.176.0/20 maxlen: 24
                          154.39.66.0/23 maxlen: 23
                          154.39.79.0/24 maxlen: 24
                          154.39.80.0/23 maxlen: 24
                          154.39.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:b1:48:d9:f4:f5:f0:7b:6a:44:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  6 21:25:36 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=7af9c19c-bc17-48a0-b508-cf2ca8ab2a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:0b:b0:95:f0:7d:b6:f7:d3:5f:1d:e7:a5:
                    1f:14:83:e1:ed:60:09:c0:e0:1d:1d:57:ee:98:33:
                    0b:2f:57:bc:45:ec:0c:45:75:de:48:48:79:b2:19:
                    af:1f:4e:38:2c:1f:13:f1:08:0c:94:40:9a:d4:bf:
                    08:b6:f3:f2:f6:54:8e:19:a1:1c:4d:3b:3f:73:a1:
                    bb:48:7e:41:cd:cf:82:27:39:55:60:b4:6c:d1:d1:
                    6e:4f:a6:83:40:46:47:e2:39:ec:1d:2a:f6:b4:25:
                    28:3b:ab:f5:8a:1f:86:f6:05:16:4e:17:3b:cb:66:
                    f5:aa:a6:be:e6:38:02:c7:99:30:ef:ee:a6:13:07:
                    05:ad:60:83:27:9b:4f:29:fe:3b:fe:f2:da:a5:90:
                    e2:f6:f5:7c:8a:5b:56:e1:91:a3:e2:28:f0:46:f1:
                    29:ae:3b:8e:28:c6:19:34:23:ac:3e:a3:d8:6b:14:
                    8d:d6:7b:9a:08:aa:77:ea:37:8b:1b:28:b4:c4:06:
                    b9:0c:13:1e:cb:a2:0a:8e:17:68:dc:dd:fc:c5:3a:
                    02:a9:72:66:d8:50:cb:5f:05:6a:0e:93:bf:03:82:
                    a7:22:89:81:bc:94:00:e5:69:c9:ab:1c:9c:a6:39:
                    86:2c:0d:6e:50:f6:6d:66:12:dd:bf:92:f8:e3:0b:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:0B:D3:9D:37:C6:8C:C4:1A:5B:BF:BE:32:F4:4A:E0:90:A6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/892c6ae8-6520-3eee-976b-66cad0c84d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.23.176.0/20
                  154.39.66.0/23
                  154.39.79.0-154.39.82.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:08:7f:93:6d:4c:df:6d:b1:96:a4:e3:5e:a6:af:3a:2f:
         d2:05:0b:22:2c:38:2c:c5:84:8a:dc:02:aa:34:cf:8f:22:79:
         bf:ae:c2:ce:d9:b3:eb:54:92:9a:9f:64:8e:5a:d4:8b:32:77:
         55:ec:ba:56:d7:07:0e:af:e6:39:c9:b4:d1:bb:41:ea:26:34:
         d7:18:48:e2:44:ce:71:7f:b0:d5:40:da:06:a4:3f:2e:f1:94:
         d6:6b:29:18:aa:50:51:4c:41:dd:ab:65:69:14:b4:38:fb:70:
         62:a4:3c:6a:32:59:1d:ac:f7:ed:9a:3d:4d:38:25:dd:68:ca:
         f7:1c:73:3c:cd:d7:4f:a9:df:a0:0f:fc:8f:07:a5:f2:26:75:
         5c:8c:74:f0:69:86:08:aa:50:e8:72:3d:41:5c:e1:b8:1f:3f:
         5f:45:14:0c:01:ea:f6:56:99:06:4f:e4:c3:0f:b3:3b:3a:ed:
         a2:88:a1:89:55:6f:43:cf:f6:ec:8c:1b:cc:f5:77:e8:2e:47:
         73:24:b2:a9:52:2d:9b:e3:65:12:47:98:0e:55:57:33:69:c8:
         b8:d5:22:31:c4:9c:2b:0e:17:53:c4:f7:eb:de:39:11:8f:c4:
         e1:dc:2e:1c:1e:57:36:22:16:dd:59:ff:44:6a:f3:3c:d2:54:
         52:fa:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:08:44 2026 by rpki-client