Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1140cb5-3246-36a9-a21d-ed1d33c86421.roa
File:                     d1140cb5-3246-36a9-a21d-ed1d33c86421.roa (raw, json)
Hash identifier:          eUXkxmcLUZJ2RQEsPD7BGsuahLMzjIwi8DFF8QPDZss=
Subject key identifier:   3C:F1:8E:87:33:D1:E7:86:28:76:F3:15:98:86:30:2D:6F:7E:01:00
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA787CA47802CF447DB894A80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1140cb5-3246-36a9-a21d-ed1d33c86421.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     273296
IP address blocks:        154.27.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ca:47:80:2c:f4:47:db:89:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e3548ddd-1145-40d0-803d-3d945fc6eb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:a6:fa:e9:e9:ba:2f:51:8a:31:e8:d3:42:
                    3a:4f:c4:cb:b6:28:d8:e2:c0:1a:53:e6:74:8b:e6:
                    29:48:f6:21:8b:76:43:e8:8a:50:41:ea:50:e9:ba:
                    4f:4f:06:19:d0:8d:94:2d:19:cc:8c:af:b3:af:e6:
                    94:a4:74:53:37:9b:f5:11:b4:f9:1d:b8:0e:f0:ed:
                    78:16:62:18:0e:d4:40:11:e7:b7:84:c5:d8:1f:db:
                    de:f4:07:ae:a6:4f:56:d1:68:3d:ed:a0:92:2a:a3:
                    b7:4d:72:5a:3b:f6:4a:0b:cf:14:56:6f:89:0f:3e:
                    bd:ec:ee:a2:67:b1:a5:ab:e7:7a:4a:69:19:d3:21:
                    12:2a:20:6a:18:52:e2:74:60:f4:4f:2b:a9:78:8c:
                    b9:e5:8a:e2:de:18:1d:f5:f1:5a:8d:8c:93:2c:01:
                    07:e6:72:9e:7d:d3:a0:1d:a8:6c:5d:4b:a5:88:7a:
                    a5:c4:ca:96:f7:33:6b:69:3a:26:35:cd:bc:2f:85:
                    92:0b:89:e8:29:a7:6e:f1:69:6b:bd:11:b9:f7:8a:
                    db:27:f6:c4:58:b1:25:44:51:16:7b:93:16:62:d8:
                    63:cf:c4:77:fc:14:e1:9d:17:44:86:26:e3:b7:d7:
                    fa:8c:02:29:14:69:ac:d5:28:26:3a:56:71:cf:c4:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F1:8E:87:33:D1:E7:86:28:76:F3:15:98:86:30:2D:6F:7E:01:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1140cb5-3246-36a9-a21d-ed1d33c86421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.27.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:96:55:c2:29:5a:3e:5c:61:77:71:93:9f:13:55:85:4b:36:
         14:c0:56:a3:2c:aa:de:5e:68:95:6e:e3:01:42:b5:7c:ce:89:
         51:f1:71:38:5d:68:a4:57:5d:f2:18:9b:dc:94:ac:40:68:eb:
         a0:ce:d0:f1:7c:68:fc:38:2e:37:43:cf:23:80:6d:e9:16:d1:
         ab:14:9d:2d:f9:92:30:1a:23:3e:ad:dc:7a:25:f4:9c:3f:dc:
         17:21:84:e7:f7:f4:79:a5:4d:44:ba:ae:0c:fc:b7:02:96:ca:
         45:3e:e4:90:a0:9f:04:c1:f2:4b:f0:b6:e3:53:bb:06:63:9b:
         54:a2:cf:89:6d:66:08:54:7d:d7:5b:ec:2f:a0:0c:6b:01:4b:
         da:7b:0d:13:82:e5:10:23:d3:9e:82:cc:25:26:f5:4e:e7:dc:
         2d:77:90:7f:17:3a:75:ff:82:c2:8b:3b:70:f3:d1:a8:a2:e6:
         81:fc:5e:04:ea:c4:f9:eb:e9:c4:39:7f:56:c2:41:a1:2b:66:
         ff:72:95:c1:7d:da:4f:41:f5:7f:e0:e4:7b:c3:71:c6:ac:e8:
         c2:e5:12:50:d2:ea:76:a3:ac:16:d6:f6:b0:60:05:61:cc:c7:
         a5:79:c6:d1:b2:c7:eb:a0:1f:ef:a3:0f:17:95:9e:31:6b:e4:
         63:e9:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:12:12 2026 by rpki-client