Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eba0ee-bcb8-35ab-befd-4bfd810b77a7.roa
File:                     a7eba0ee-bcb8-35ab-befd-4bfd810b77a7.roa (raw, json)
Hash identifier:          kxBZF6/IVn27pYJh3eJ63i5XmROtoTGFhIX/5zzu6HE=
Subject key identifier:   73:AA:2E:5C:31:06:66:BC:81:D2:3B:CE:15:05:A5:A2:D2:28:99:89
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F78E83635BDE5FFB0D8BFF920
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eba0ee-bcb8-35ab-befd-4bfd810b77a7.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     396100
IP address blocks:        154.61.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:36:35:bd:e5:ff:b0:d8:bf:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=a49e60a1-cddc-4807-a2f7-ec90488ae09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:15:80:10:1a:94:ae:63:b0:be:60:b2:70:
                    21:8c:3d:e2:8e:26:fe:f9:b5:62:77:6b:59:ec:ca:
                    85:f7:f9:be:18:11:34:8a:93:2a:b4:8a:32:5d:80:
                    b8:57:d2:28:a4:fc:15:b7:95:4a:95:ab:39:f1:f4:
                    e8:44:93:f3:82:de:d9:ab:be:0f:83:73:1f:7e:32:
                    f6:1e:1f:ba:cc:91:06:5b:8c:9d:65:7b:53:62:0f:
                    9a:52:a3:c0:13:14:2e:73:76:0b:25:99:02:4a:26:
                    61:13:03:cb:8e:85:59:ce:8e:a0:83:45:ea:81:be:
                    d0:55:4e:bc:2f:e0:41:89:c2:43:65:38:c6:45:a0:
                    06:83:50:2c:f3:f6:dc:e6:e1:b4:5e:ef:06:b9:2e:
                    86:61:82:63:8d:84:84:74:d0:ae:aa:e8:55:a9:72:
                    d2:e4:d5:fe:80:3d:31:9a:d8:b4:9c:a5:42:a0:33:
                    bc:24:69:5c:05:5e:f7:db:4e:64:df:25:41:67:a0:
                    36:10:3f:f3:45:84:b0:b2:bc:89:5c:13:66:2d:64:
                    2e:52:03:0a:d3:d1:70:9e:c8:14:a1:9c:e8:53:59:
                    e1:7f:4e:20:7e:de:00:ac:8c:62:ae:f8:88:c9:0c:
                    90:8d:ff:30:39:c9:46:ff:96:1f:ca:0d:68:2f:96:
                    d1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AA:2E:5C:31:06:66:BC:81:D2:3B:CE:15:05:A5:A2:D2:28:99:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7eba0ee-bcb8-35ab-befd-4bfd810b77a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.61.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e1:c2:00:85:d1:2c:43:ca:c7:8e:39:e8:d8:3e:89:94:2f:
         0c:6a:0c:3b:03:4a:e5:c7:be:7a:0a:1b:df:34:b3:c5:bd:8c:
         24:ee:36:bd:bc:95:23:eb:ff:93:65:c0:fb:80:40:24:b0:66:
         68:d1:05:9e:61:90:98:56:0f:f8:20:31:b6:6a:5a:97:d4:73:
         05:d4:15:77:08:7d:e3:da:78:b4:97:60:76:55:99:d3:70:4b:
         9b:c8:25:17:4a:f1:fd:62:c1:b7:92:94:f8:38:72:27:27:28:
         e8:06:da:d3:dd:b3:cb:e9:2e:4c:23:b9:09:e2:81:98:d2:e0:
         c4:b4:e8:a6:77:d0:5b:ed:f4:03:f6:60:46:58:db:35:c9:8c:
         c3:68:3b:e6:75:a1:e7:76:46:a3:60:bf:0f:38:15:40:c4:99:
         69:26:4b:b1:62:1c:37:e1:76:d2:a2:43:79:ee:ab:13:25:65:
         7a:73:a2:74:17:16:71:76:bd:84:7f:4b:f5:91:68:c4:e7:e5:
         80:9d:37:20:58:c2:62:5a:f9:fc:e1:e5:14:e8:02:f8:54:73:
         8c:ab:c0:f7:6c:b3:04:55:d4:f9:11:27:ba:97:72:1d:c5:cd:
         38:3b:4e:f8:05:51:95:0a:a3:68:2e:78:47:3e:1a:ea:dc:cb:
         7c:08:33:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DY1veX/sNi/+SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk
YTQ5ZTYwYTEtY2RkYy00ODA3LWEyZjctZWM5MDQ4OGFlMDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPgVgBAalK5jsL5gsnAhjD3ijib++bVid2tZ
7MqF9/m+GBE0ipMqtIoyXYC4V9IopPwVt5VKlas58fToRJPzgt7Zq74Pg3MffjL2
Hh+6zJEGW4ydZXtTYg+aUqPAExQuc3YLJZkCSiZhEwPLjoVZzo6gg0Xqgb7QVU68
L+BBicJDZTjGRaAGg1As8/bc5uG0Xu8GuS6GYYJjjYSEdNCuquhVqXLS5NX+gD0x
mti0nKVCoDO8JGlcBV73205k3yVBZ6A2ED/zRYSwsryJXBNmLWQuUgMK09FwnsgU
oZzoU1nhf04gft4ArIxirviIyQyQjf8wOclG/5Yfyg1oL5bRYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOqLlwxBma8gdI7zhUFpaLSKJmJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTdlYmEwZWUtYmNiOC0z
NWFiLWJlZmQtNGJmZDgxMGI3N2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmj2qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPhwgCF0SxDyseOOejYPomULwxqDDsDSuXHvnoKG980s8W9jCTuNr28
lSPr/5NlwPuAQCSwZmjRBZ5hkJhWD/ggMbZqWpfUcwXUFXcIfePaeLSXYHZVmdNw
S5vIJRdK8f1iwbeSlPg4cicnKOgG2tPds8vpLkwjuQnigZjS4MS06KZ30Fvt9AP2
YEZY2zXJjMNoO+Z1oed2RqNgvw84FUDEmWkmS7FiHDfhdtKiQ3nuqxMlZXpzonQX
FnF2vYR/S/WRaMTn5YCdNyBYwmJa+fzh5RToAvhUc4yrwPdsswRV1PkRJ7qXch3F
zTg7TvgFUZUKo2gueEc+Gurcy3wIM8o=
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:54 2026 by rpki-client