Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d488451b-22a0-3232-80d2-e577b2dc7aed.roa
File:                     d488451b-22a0-3232-80d2-e577b2dc7aed.roa (raw, json)
Hash identifier:          BcOOHiLkm0m1vyQSm8WirpI0BSYfKhDLJVrLTRsEPWM=
Subject key identifier:   10:4E:8B:E4:7D:0B:72:39:75:16:D8:EE:11:18:18:4C:35:AE:1F:81
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D9CEAB23D584B75DC47D53640
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d488451b-22a0-3232-80d2-e577b2dc7aed.roa
Signing time:             Fri 24 Apr 2026 13:00:31 +0000
ROA not before:           Fri 24 Apr 2026 13:00:31 +0000
ROA not after:            Thu 23 Jul 2026 13:00:31 +0000
asID:                     271792
IP address blocks:        204.157.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9c:ea:b2:3d:58:4b:75:dc:47:d5:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 24 13:00:31 2026 GMT
            Not After : Jul 23 13:00:31 2026 GMT
        Subject: CN=c85f13a4-e6df-40a6-9fc3-59e5c9b72cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:20:a1:58:84:0a:5e:b9:41:4c:8b:89:cc:df:
                    3d:b5:05:3b:28:05:a2:63:54:78:cd:af:b2:20:2e:
                    90:22:d6:cc:5a:2a:50:c3:29:cd:ca:9a:f2:98:c5:
                    a1:36:06:cb:8b:01:c0:d1:59:ad:bf:45:a6:e8:c8:
                    2a:05:50:9c:2e:d3:b8:b3:87:8e:58:c4:ba:fb:86:
                    3b:fb:1f:c0:6b:bf:bf:6a:c3:ab:43:60:6f:3e:06:
                    0a:8d:83:fa:88:6e:2b:e7:0b:cb:8c:36:8d:2f:03:
                    72:7d:13:6d:f1:9c:d1:8f:6a:35:77:92:05:3e:a3:
                    74:d1:32:b3:47:0f:36:d2:61:7f:c8:0b:7a:fb:f9:
                    5b:26:2a:3a:54:30:d6:fc:d2:e7:56:84:82:8d:43:
                    9f:88:58:5d:12:7c:fc:70:c6:4f:09:31:cc:4b:19:
                    b9:5f:74:7e:6e:f1:58:50:25:b4:ee:1f:c6:98:3b:
                    c8:c7:8c:f9:08:70:fa:ef:92:72:50:9c:a2:46:78:
                    ec:01:9e:9e:4b:29:f5:e9:d9:d5:ee:1b:30:49:90:
                    f0:e7:06:a0:5a:4d:e5:72:9a:83:16:4e:4b:d1:a6:
                    8d:00:6e:28:b0:75:2f:15:56:73:85:95:32:91:73:
                    a9:52:20:e9:5b:56:24:62:63:21:75:76:bd:74:37:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4E:8B:E4:7D:0B:72:39:75:16:D8:EE:11:18:18:4C:35:AE:1F:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d488451b-22a0-3232-80d2-e577b2dc7aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0d:a7:23:6e:76:81:24:45:8a:61:01:9f:9f:c8:8c:d4:29:
         a3:aa:4f:52:a7:b0:17:fa:8e:a0:31:a8:55:a5:3c:d3:a3:ca:
         05:68:27:91:56:81:3f:f9:ec:a0:4b:c4:3a:26:35:ed:5e:c6:
         d4:50:72:75:eb:4f:e0:65:bc:eb:61:40:de:57:44:ee:eb:d6:
         34:04:db:f9:ff:3e:47:03:27:9f:35:f0:04:f9:91:20:64:ed:
         97:f2:da:75:5a:3c:a5:cc:ba:84:c1:42:23:5f:f9:f3:2b:de:
         74:57:a1:43:da:03:eb:9b:a3:25:f7:8f:7b:70:5d:fd:f6:7c:
         88:1f:ed:be:3f:7e:6d:ae:97:a4:15:49:15:49:0d:8a:bd:31:
         23:4d:73:c7:5a:b8:45:bc:9a:19:4a:0a:f3:5f:9d:32:e5:60:
         3f:e6:c7:48:ff:59:f6:d1:a8:e1:c0:d6:d3:54:85:ae:07:44:
         0c:06:fd:68:a2:0d:af:87:51:d4:d9:ee:42:f5:1d:b9:a8:70:
         b0:d3:ad:8e:1b:cd:2a:76:c3:34:fd:37:6b:ad:6f:cd:dc:5d:
         32:dc:e2:3d:ca:0b:6e:93:d8:23:84:54:71:3a:1b:1a:99:77:
         f8:79:ef:2c:26:d0:bc:c5:cf:c1:fa:58:2d:ff:2e:3f:16:b6:
         6e:39:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:12:16 2026 by rpki-client