Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eb000a1-729c-36fc-8cfc-b789f683fb4e.roa
File:                     8eb000a1-729c-36fc-8cfc-b789f683fb4e.roa (raw, json)
Hash identifier:          fNhSiRCZZNPpE+1lQGUzq4O/ansSUKAGobQuJy3Q6ko=
Subject key identifier:   FD:68:0C:2E:25:96:74:08:F3:12:44:29:2A:F6:39:C9:06:03:71:56
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F71ED8362A3C59CCB47AB2600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eb000a1-729c-36fc-8cfc-b789f683fb4e.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     272066
IP address blocks:        149.107.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:83:62:a3:c5:9c:cb:47:ab:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=f00f2e67-cce2-4964-836d-8d4010a575be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3c:08:68:69:4d:05:cf:99:78:60:cb:f0:6d:
                    f8:90:63:f2:d2:e7:10:17:99:54:0a:ca:79:cb:4a:
                    aa:b7:71:89:45:8e:b3:8b:86:0a:f6:f3:e9:49:21:
                    8c:27:7b:c4:13:2a:68:4e:0c:8d:08:f8:c8:e7:4a:
                    1c:60:bd:5e:df:be:5f:d5:1f:9f:9d:d4:9f:2e:67:
                    45:a0:83:cc:e8:c4:34:15:b6:5b:bd:05:f8:09:ad:
                    4a:3b:16:6e:d7:cb:18:e2:3e:eb:72:65:7c:5b:15:
                    01:89:ad:1d:e5:0c:8f:11:34:a2:0b:2f:0f:24:ad:
                    f2:b2:23:15:0a:1b:fd:3e:30:54:f7:f4:82:a3:29:
                    cb:55:dd:fc:22:3b:f2:bc:72:c1:0f:68:8e:a4:7d:
                    89:ed:48:d2:e3:a0:cb:4c:70:9b:7f:97:67:47:90:
                    f5:cd:23:aa:8b:d2:0c:0c:e2:39:d2:94:af:72:66:
                    99:47:ce:e9:88:99:80:ce:df:1a:56:df:5e:7e:45:
                    6f:b7:54:97:6c:4a:d3:1a:dd:9c:e4:72:ab:9d:a3:
                    fb:a9:3a:0a:61:04:7a:97:28:5d:de:4a:e8:9c:3d:
                    10:8a:b8:d2:de:3d:6b:af:b9:ff:5b:49:11:c0:b5:
                    3e:84:b2:b7:cd:7b:60:cd:04:e1:df:72:e3:d1:d5:
                    a8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:68:0C:2E:25:96:74:08:F3:12:44:29:2A:F6:39:C9:06:03:71:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eb000a1-729c-36fc-8cfc-b789f683fb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.107.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:43:53:19:00:bf:80:ec:77:85:5a:3e:f4:40:2f:a9:97:fb:
         8a:c0:98:e7:3e:a9:1b:71:76:f2:34:9a:0e:09:02:78:8f:67:
         d7:cb:70:9a:24:7b:f1:d5:72:52:fe:8a:e0:69:ac:72:bc:b3:
         d0:fc:08:07:b5:5a:95:61:aa:91:ec:83:de:9a:77:d5:cb:8b:
         6d:f0:33:36:20:e5:f3:eb:0b:34:11:5f:aa:e6:c8:d5:e4:9b:
         a1:f1:88:98:1b:58:81:f1:55:2d:38:43:dd:d1:4a:1d:30:39:
         17:9a:42:67:18:1b:d2:68:6a:be:10:13:88:bc:cc:d6:69:90:
         ed:97:31:2f:b2:82:64:e5:06:a1:a9:96:85:17:f6:f3:d0:b4:
         1c:01:4e:db:5e:ff:af:f3:f6:39:0b:99:de:4c:24:c7:36:fe:
         57:c1:eb:b3:34:4d:d4:6f:d2:65:5b:7f:95:fd:d5:ed:b8:f0:
         05:dc:16:87:0a:7d:31:9b:92:e4:aa:8b:8d:2f:cc:25:bc:87:
         8b:ae:c4:76:ec:02:88:60:78:40:b7:ce:f1:ba:f1:52:35:22:
         cd:2d:b0:12:2d:3f:2b:66:5f:95:07:cf:08:a0:48:40:c4:3e:
         a8:01:82:af:46:09:9f:21:f0:8b:04:c6:ab:70:2a:06:bf:59:
         1a:a7:5a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:24 2026 by rpki-client