Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa
File:                     b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa (raw, json)
Hash identifier:          Kdlu2sOP/RoUMUv/RTTD86M3bzgLaI5HvNSIqV199SU=
Subject key identifier:   C7:19:E6:33:87:F7:1B:99:64:DE:A2:1A:DD:CE:4A:AD:7F:9F:D4:B2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EB9AC5396153F31B199BA3A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     208972
IP address blocks:        149.86.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:53:96:15:3f:31:b1:99:ba:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=3d476849-8097-4653-be64-6b67ec85c144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:7f:54:50:f5:8d:ed:93:8e:ff:eb:d5:c0:
                    65:ea:7f:95:24:fd:64:4f:1a:78:7e:35:13:80:34:
                    8e:eb:95:ab:35:e2:b1:6b:9c:4e:90:14:58:95:ea:
                    b5:05:bb:76:d9:03:25:b9:1c:62:3b:46:1d:fd:a8:
                    ba:f1:74:0a:ac:9d:7b:b8:df:fe:bf:20:50:b8:ba:
                    ed:25:a4:c7:85:73:16:3e:47:79:04:59:0a:a5:7a:
                    89:1d:66:69:52:cd:2b:14:30:8d:23:4e:31:99:f7:
                    6f:7d:60:e0:16:f9:e1:63:61:7b:65:d7:e8:0e:f4:
                    94:2b:ad:85:be:5d:f8:88:b0:78:78:b9:8c:5d:e4:
                    5a:f2:c9:c1:5b:d9:cd:c7:cc:fd:24:a4:31:80:17:
                    12:b4:07:38:fe:e1:f6:20:6d:87:98:1a:79:bb:37:
                    fe:94:0d:6e:6d:b6:9c:93:8d:91:14:38:8f:86:bf:
                    49:7b:61:fe:22:a5:bf:0a:d2:27:c1:9a:ea:c4:81:
                    8d:62:f3:d2:7a:2d:f4:a6:0d:0a:6c:0b:1c:50:81:
                    90:df:49:bb:32:7c:de:3f:af:a8:30:85:9c:14:b3:
                    46:49:88:23:1c:ae:19:a6:27:65:15:a7:d7:5b:f0:
                    6e:62:60:2a:6f:27:5b:b5:22:11:2f:bc:f8:c4:e8:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:19:E6:33:87:F7:1B:99:64:DE:A2:1A:DD:CE:4A:AD:7F:9F:D4:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.86.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:2f:57:06:4a:fd:6b:3f:9d:50:e2:87:ac:a5:f9:0a:31:
         46:69:d8:53:ff:5b:f7:40:15:8f:78:f7:ca:c7:0a:41:e3:be:
         31:df:73:53:20:22:5a:a3:90:d9:99:32:05:28:a7:b5:ed:0b:
         32:98:99:8b:b1:d3:1a:26:34:2b:9d:af:77:9e:cb:0f:da:68:
         c2:85:f2:98:79:0d:9e:ff:30:d5:03:a3:30:f7:ab:0b:f7:37:
         ae:f4:fb:61:96:9b:8d:ec:d5:25:37:89:ca:fd:0e:e0:77:bc:
         87:ff:cd:3a:49:ef:26:78:c4:17:bc:69:13:85:b1:9d:ce:4f:
         cb:68:3c:a0:be:69:5f:63:5d:bf:96:ca:8f:38:9f:d2:c0:3e:
         ac:4c:5a:6f:85:03:18:85:a9:81:f6:87:91:e4:a2:e7:5f:36:
         5f:7b:0f:63:07:82:35:59:0e:0c:4b:53:c0:94:f2:74:85:f2:
         0f:bd:0c:48:28:31:d0:dd:c9:88:03:43:08:20:c7:7e:40:e7:
         62:06:b9:07:1b:13:fa:1d:02:2a:db:a8:2b:7b:61:d0:fd:14:
         19:64:db:a8:99:73:e9:44:e6:c8:f2:f7:21:07:4f:79:39:33:
         b1:a2:56:4e:1e:56:b2:9f:c9:c1:9b:a1:f6:78:21:d7:20:d9:
         e5:3d:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:13:45 2026 by rpki-client