Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb89faed-a397-38ec-a3f6-17926b5d1efc.roa
File:                     bb89faed-a397-38ec-a3f6-17926b5d1efc.roa (raw, json)
Hash identifier:          z9dDMHHDhbWnLdHBiLJ6GUm4hI64zG57YBAwzQNeUAw=
Subject key identifier:   2C:8D:E2:83:8F:54:A6:61:22:28:46:A5:9A:FC:B0:91:52:6F:34:C6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DF375E46D7D6ADF88EE3C4480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb89faed-a397-38ec-a3f6-17926b5d1efc.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     34214
IP address blocks:        154.49.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e4:6d:7d:6a:df:88:ee:3c:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=2938b7b8-0845-443f-b483-7269e4bcd3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:6e:16:11:f8:88:f1:c3:cf:8f:62:5e:cd:
                    16:dc:66:4e:a1:69:61:61:00:e7:2c:41:f1:d6:11:
                    13:8a:b9:3b:bb:75:0d:c6:37:66:ab:19:59:e8:34:
                    7a:f8:6c:d9:b8:5d:4f:ac:b3:56:63:0d:44:f1:f2:
                    56:5c:e5:ff:54:1b:b5:a5:e7:63:8c:bf:dd:74:62:
                    9a:0d:6a:12:2f:44:4d:f0:92:83:9d:9e:33:f9:d8:
                    72:99:33:82:21:7a:fa:8c:41:82:da:94:08:0a:e1:
                    25:60:86:ed:df:51:8c:e4:64:43:eb:6c:69:80:2a:
                    dd:2e:89:fa:56:f4:1b:9e:a7:d2:6b:96:2d:69:45:
                    9d:cb:60:5c:7b:76:d8:2c:06:25:48:c6:20:3e:9a:
                    27:6d:cc:4b:73:77:91:68:58:5b:c8:f5:9f:73:e2:
                    c9:dc:2e:a6:1f:38:d9:33:66:61:cf:7a:f9:64:30:
                    b2:a7:d1:c8:08:26:77:3d:df:ca:41:f5:15:77:8d:
                    f9:00:d4:2d:42:f6:40:83:61:5e:5f:c0:b1:b3:c7:
                    88:0c:e3:48:07:20:3f:ab:28:9f:cd:2c:1f:ba:02:
                    21:d5:d6:e1:66:54:de:34:56:e9:1c:55:9d:59:b2:
                    da:fa:59:08:18:a3:d3:b7:9e:71:e9:9f:86:9b:6e:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:E2:83:8F:54:A6:61:22:28:46:A5:9A:FC:B0:91:52:6F:34:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb89faed-a397-38ec-a3f6-17926b5d1efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.49.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:6e:5b:26:7c:31:4a:fa:49:2a:93:a1:55:58:6f:c6:af:
         dd:e7:01:83:bd:3f:6e:3f:0e:e2:c1:f1:ff:ad:60:18:16:55:
         f1:6f:41:e0:27:de:cf:0b:4a:80:10:38:35:de:3d:01:b7:2d:
         d7:ae:85:ba:c2:bc:4e:d8:cb:5f:d0:84:d2:a2:9e:e9:4e:c5:
         4a:9b:32:af:5c:d3:ca:97:d9:a0:d9:59:fa:35:d7:32:07:04:
         02:ac:cb:59:cd:40:6c:96:6c:c0:d5:3b:9c:ce:08:0f:59:1c:
         0b:a4:43:59:42:06:a3:9a:d1:35:92:6b:6e:48:51:97:27:05:
         9b:aa:ef:34:03:e5:cb:0c:ac:31:38:17:4b:b4:46:64:20:34:
         ff:a4:e3:7f:19:fa:26:e7:04:a2:e7:c2:ae:4e:83:fd:3d:01:
         cf:6b:0c:37:0d:56:c7:58:13:13:59:2f:dd:8f:bd:d1:6c:97:
         a5:f1:ea:0b:f4:04:61:31:f0:55:f0:25:7a:ac:f3:7f:8a:ed:
         c0:02:b9:cd:de:cc:55:64:f1:a6:62:9c:90:ab:35:e0:85:d5:
         e4:f6:be:84:93:4a:94:09:b2:e0:5e:ed:5f:f4:3a:60:71:0e:
         ae:4d:e2:fb:ac:d4:f8:fb:4d:16:73:db:a2:cd:e7:1d:9e:34:
         05:3c:05:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:37:25 2026 by rpki-client