Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae411455-1b7d-39f9-99b4-9fd2c3aa1c68.roa
File:                     ae411455-1b7d-39f9-99b4-9fd2c3aa1c68.roa (raw, json)
Hash identifier:          QtWLPH7w9iDmPE/FDsavsegIuFbgTWDtf/WbZQhRPUs=
Subject key identifier:   37:5E:70:51:A5:D0:0D:A8:A6:2B:E0:B7:E2:6B:CB:43:5D:84:F7:CB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E104F303DE35E0FBFF4AD3EC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae411455-1b7d-39f9-99b4-9fd2c3aa1c68.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     153531
IP address blocks:        154.58.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:30:3d:e3:5e:0f:bf:f4:ad:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=e150255d-c5a8-48e4-837e-eaf34c15bec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:1a:54:6a:5b:ac:7e:99:2b:4b:07:07:1d:
                    8b:01:db:56:97:6a:8f:5a:d3:c3:72:5c:e5:1d:f8:
                    48:31:66:17:c9:1c:05:df:b5:39:55:2e:12:e3:5f:
                    46:5d:f0:da:35:d5:7f:3a:ef:e6:76:3a:53:00:bb:
                    2b:99:f8:2f:c7:70:4c:d6:d5:f2:33:60:89:da:4b:
                    01:9b:63:da:28:93:a9:3b:8c:0e:5f:67:e5:16:d8:
                    c9:71:3c:ae:c8:b2:75:49:de:d0:d3:2e:e8:ee:a5:
                    05:1b:c7:8f:41:ce:84:19:bf:d9:61:48:85:86:ec:
                    df:f9:66:f1:26:93:78:27:5c:d5:24:f5:b3:f7:c7:
                    67:f3:65:db:9d:a0:a1:98:5e:1c:4c:1e:3b:d5:c5:
                    d3:9c:70:13:46:ad:b8:6d:09:c5:e5:1a:e6:56:c8:
                    be:f4:2b:44:9a:21:36:38:34:59:d1:f8:e4:21:68:
                    fc:60:35:39:30:c3:53:01:80:5c:3d:7e:59:f6:3d:
                    b5:ee:62:47:9e:71:57:b0:16:a2:34:3e:4a:8c:90:
                    53:55:7a:1f:74:51:32:b7:64:e0:aa:f5:eb:dd:15:
                    15:94:87:24:29:04:59:6e:b2:c2:1d:59:b6:ef:dc:
                    74:1e:c5:f4:a7:a6:c6:4c:fb:a9:8c:d4:f3:60:1e:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5E:70:51:A5:D0:0D:A8:A6:2B:E0:B7:E2:6B:CB:43:5D:84:F7:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ae411455-1b7d-39f9-99b4-9fd2c3aa1c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.58.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:06:8e:9f:9d:39:49:24:bb:a4:fd:53:d2:af:ee:11:d9:
         07:0e:6b:e0:8a:ee:72:78:ad:c3:70:3e:c5:6c:ef:4d:30:34:
         f6:18:c1:2e:1d:6f:42:f0:2c:52:d8:85:7d:b4:33:0b:03:08:
         2d:d0:dc:cb:8c:6c:6f:d4:4e:92:4a:0e:dd:f4:7c:e7:c4:68:
         8d:a9:ab:fa:d6:0e:7d:86:26:ae:4a:89:85:e2:fd:45:9d:cb:
         68:d2:17:51:11:df:af:1d:d0:e1:53:53:84:d9:7b:02:5c:7b:
         e6:8d:e2:13:fc:3d:03:16:a4:57:4c:73:fd:64:24:bd:6f:7d:
         03:91:ae:4c:71:fd:09:c6:47:b9:42:c9:34:bf:ed:d6:3e:be:
         32:f2:82:c2:be:af:c2:1d:cb:e1:b8:b4:d2:95:9c:0b:97:e3:
         dc:03:93:2e:14:2f:c0:3a:71:26:6a:53:7a:59:ac:fb:97:68:
         3a:57:28:f4:80:cf:58:e6:5e:ab:5b:34:33:2c:9d:9f:bc:1e:
         4f:f6:12:61:c2:87:f3:64:8b:c4:77:80:89:68:f3:9b:61:98:
         1c:05:e3:52:f4:65:ae:cc:18:99:a9:79:0f:3a:2f:bf:5d:dc:
         2e:79:24:60:1d:46:6b:e4:53:e9:f5:e9:ae:49:91:b9:df:05:
         15:c9:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:37:44 2026 by rpki-client