Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9e265023-4254-3548-946f-151f4ab0db1f.roa
File:                     9e265023-4254-3548-946f-151f4ab0db1f.roa (raw, json)
Hash identifier:          UCG1gjMh5oxmKlKVx7LlWHvnMwhKyZbG6WCmDy4qTAM=
Subject key identifier:   9D:8B:15:F5:7A:3E:93:20:B7:B2:B7:BC:6D:6C:8E:A4:1B:02:49:84
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F119CDCB4AE56557CF6355580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9e265023-4254-3548-946f-151f4ab0db1f.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     62163
IP address blocks:        154.47.66.0/24 maxlen: 24
                          154.47.82.0/24 maxlen: 24
                          154.47.84.0/24 maxlen: 24
                          154.47.86.0/24 maxlen: 24
                          154.47.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:dc:b4:ae:56:55:7c:f6:35:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=ae9895d9-060a-434a-a4c0-6e8a7f6d2d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ad:af:a8:ee:84:dc:1e:30:5a:c4:ff:31:c1:
                    39:47:ad:12:5b:66:1d:06:2a:15:ea:c0:7e:2b:45:
                    03:b6:36:83:46:70:43:5d:08:3a:fd:7c:5e:7e:09:
                    f5:a6:ca:16:73:f6:91:f6:69:a6:3c:e0:e7:4d:8f:
                    b3:3f:8b:42:5f:58:b7:d7:ee:10:d5:d5:c0:f3:38:
                    a3:ee:40:58:1c:f3:5c:d9:5d:38:71:e1:6a:7e:50:
                    2a:6c:0c:ba:9f:c0:38:e0:bc:f6:98:32:89:4f:b4:
                    bf:5a:1d:4a:a1:aa:2f:82:13:90:88:67:b0:b0:26:
                    b1:08:b1:1d:2f:ae:6f:d3:96:23:49:97:dc:88:38:
                    2f:70:15:a4:98:be:6c:8b:bb:19:ec:66:70:59:c3:
                    d2:b6:ab:8f:06:25:40:b5:d5:59:97:2c:74:d0:87:
                    ce:ee:9b:be:8c:8f:78:4c:e4:54:44:9e:45:bb:80:
                    d7:54:7b:fe:5c:24:4d:94:44:95:2b:89:0c:62:b0:
                    5f:1a:73:44:fe:00:48:58:fd:3e:5a:39:84:75:95:
                    77:95:c0:f0:31:35:9a:38:2e:52:4a:76:c8:62:eb:
                    4f:06:4c:a4:4d:c4:df:ce:a2:02:4f:43:6a:03:24:
                    94:b3:0c:b0:25:65:4d:91:eb:a9:63:00:5d:80:aa:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8B:15:F5:7A:3E:93:20:B7:B2:B7:BC:6D:6C:8E:A4:1B:02:49:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9e265023-4254-3548-946f-151f4ab0db1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.47.66.0/24
                  154.47.82.0/24
                  154.47.84.0/24
                  154.47.86.0/24
                  154.47.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:78:8d:07:db:3d:d7:dc:f5:3c:33:dd:05:c4:57:e7:d4:dc:
         3d:53:ea:24:a0:d2:90:e4:e9:61:71:20:d1:10:77:93:40:cd:
         54:36:2d:6d:f4:48:c4:3c:6e:8f:fd:c8:fe:49:ad:3c:86:6b:
         d6:73:96:60:d3:7f:5c:5c:75:06:d3:90:a0:3a:88:f0:10:75:
         b1:f1:73:a9:82:d7:68:71:22:dc:0e:97:4e:17:b0:64:03:7b:
         ae:27:aa:ec:d5:38:44:a8:09:33:f5:b1:0c:f5:fd:e3:5d:04:
         d6:38:af:ab:85:d1:a7:a4:19:9b:e7:f7:d1:96:5e:d6:c8:c1:
         08:21:46:d7:16:6b:84:5f:66:c1:2c:30:31:c4:29:ef:57:84:
         17:fd:74:66:ab:cd:bb:0a:11:60:d1:bf:45:20:a4:78:01:b0:
         4f:8e:82:73:d7:c3:37:74:69:e3:e2:6c:b4:86:5c:cb:ea:53:
         78:ef:cf:48:95:66:c0:fc:bc:57:00:8f:91:a4:dc:c4:b2:9a:
         51:e5:c4:63:f3:9a:1e:73:50:21:f8:a4:6a:8c:c9:e6:1d:0d:
         26:44:6e:fd:55:49:02:e8:aa:32:39:e9:07:db:f4:ac:7e:ac:
         61:e2:5a:f5:3a:87:8b:32:88:59:b2:d0:af:93:bb:a2:91:93:
         7f:13:66:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:34:47 2026 by rpki-client