Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d98d6ce8-d1fe-3e4a-a07a-f9be9fbb95dd.roa
File:                     d98d6ce8-d1fe-3e4a-a07a-f9be9fbb95dd.roa (raw, json)
Hash identifier:          MmQYXNFJTwiqGc4Q8Jche2uhy1/QdoD6SXM2tMkX+e0=
Subject key identifier:   7C:45:FC:F4:7E:8B:A0:27:EB:71:3F:4B:C7:ED:43:52:5A:21:19:0B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D9AE8A820549C966DCBA9CA00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d98d6ce8-d1fe-3e4a-a07a-f9be9fbb95dd.roa
Signing time:             Thu 23 Apr 2026 19:44:50 +0000
ROA not before:           Thu 23 Apr 2026 19:44:50 +0000
ROA not after:            Wed 22 Jul 2026 19:44:50 +0000
asID:                     0
IP address blocks:        154.46.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:e8:a8:20:54:9c:96:6d:cb:a9:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 23 19:44:50 2026 GMT
            Not After : Jul 22 19:44:50 2026 GMT
        Subject: CN=745a8446-20f0-4885-a1f0-12908970136b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:df:3c:5a:b5:e5:0b:70:56:49:1e:ee:f8:
                    67:1a:4c:df:bc:d8:c8:84:16:97:1b:94:8a:d7:35:
                    a4:46:06:88:9b:79:18:cd:28:01:91:46:7d:d1:b8:
                    3d:1b:b4:3f:f4:3c:d8:6f:ba:39:e0:c0:a9:d4:65:
                    2d:cb:21:ba:75:56:20:ed:01:ca:5a:50:b6:0d:b5:
                    0f:38:a8:77:99:38:3b:bb:ec:4c:59:04:9b:af:52:
                    94:13:af:88:6e:41:e8:f3:80:ee:57:06:46:91:fc:
                    e9:20:5c:b7:c6:0b:a9:32:50:5b:ba:42:fd:ed:29:
                    be:b9:6f:59:ec:09:63:40:5d:13:0b:e3:bd:ba:36:
                    78:85:68:1e:b2:8b:59:b7:44:4f:a0:99:35:cc:43:
                    aa:b2:e4:aa:d5:35:eb:e4:29:89:c5:63:89:6d:4f:
                    a9:41:7e:24:a3:41:68:bc:ab:4f:f3:22:72:23:01:
                    ea:e7:b3:49:e6:e2:eb:db:71:27:99:ab:f3:69:f4:
                    58:5a:9a:a3:28:df:e2:2f:c2:e3:62:3d:e2:4e:7b:
                    26:f9:e5:e5:6b:4d:e3:c4:ee:62:c9:ee:11:6f:1a:
                    13:27:4b:54:d8:00:77:46:27:cd:6a:fc:6d:64:9b:
                    b4:e7:a3:9b:42:f4:d2:05:47:06:58:f6:1e:28:dd:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:45:FC:F4:7E:8B:A0:27:EB:71:3F:4B:C7:ED:43:52:5A:21:19:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d98d6ce8-d1fe-3e4a-a07a-f9be9fbb95dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.46.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e2:7e:42:1b:c4:1f:67:58:4d:49:3b:5d:5b:43:52:4c:02:
         80:e3:eb:f5:8f:0a:43:6e:39:cb:6d:f1:ca:d4:e3:5e:f7:39:
         0e:ad:51:76:c2:8a:30:ee:90:20:b7:91:f5:af:e9:22:2b:dd:
         6d:36:82:73:52:36:55:86:d3:cf:a4:c5:b6:5b:c0:52:2b:8c:
         69:33:19:7b:6e:1f:41:5d:e2:f0:37:5b:71:0d:bf:07:c0:ad:
         9c:13:49:59:d6:21:ee:02:35:90:e5:74:bd:c9:97:60:bb:9b:
         b5:38:f4:14:0b:00:dd:3e:ce:93:d6:49:be:4c:c3:fd:bc:d8:
         15:88:75:60:bb:6d:bc:0b:fc:71:39:3a:70:bf:e6:d7:dd:04:
         8e:ac:21:27:d0:34:0e:24:ee:75:7d:4d:99:a5:bf:cd:e4:45:
         cc:ba:c1:08:65:4f:e8:a5:f3:4f:10:20:8a:55:0e:96:ac:45:
         b8:cc:fa:b8:74:27:7c:5e:5e:78:af:f2:04:83:df:37:d5:be:
         0e:c0:6a:79:0f:ea:d7:f3:06:ee:25:5d:11:7d:c7:9f:e5:d1:
         79:6f:54:bb:c8:48:9c:2d:c8:d8:a9:c3:99:2e:1a:19:93:f3:
         1d:2d:77:19:8e:32:d4:67:8c:f7:1a:23:a5:3f:8c:d9:f3:5d:
         44:03:73:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2a6KggVJyWbcupygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQyMzE5NDQ1MFoXDTI2MDcyMjE5NDQ1MFowLzEtMCsGA1UEAxMk
NzQ1YTg0NDYtMjBmMC00ODg1LWExZjAtMTI5MDg5NzAxMzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmDfPFq15QtwVkke7vhnGkzfvNjIhBaXG5SK
1zWkRgaIm3kYzSgBkUZ90bg9G7Q/9DzYb7o54MCp1GUtyyG6dVYg7QHKWlC2DbUP
OKh3mTg7u+xMWQSbr1KUE6+IbkHo84DuVwZGkfzpIFy3xgupMlBbukL97Sm+uW9Z
7AljQF0TC+O9ujZ4hWgesotZt0RPoJk1zEOqsuSq1TXr5CmJxWOJbU+pQX4ko0Fo
vKtP8yJyIwHq57NJ5uLr23EnmavzafRYWpqjKN/iL8LjYj3iTnsm+eXla03jxO5i
ye4RbxoTJ0tU2AB3RifNavxtZJu056ObQvTSBUcGWPYeKN18eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxF/PR+i6An63E/S8ftQ1JaIRkLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDk4ZDZjZTgtZDFmZS0z
ZTRhLWEwN2EtZjliZTlmYmI5NWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmi6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKbifkIbxB9nWE1JO11bQ1JMAoDj6/WPCkNuOctt8crU4173OQ6tUXbC
ijDukCC3kfWv6SIr3W02gnNSNlWG08+kxbZbwFIrjGkzGXtuH0Fd4vA3W3ENvwfA
rZwTSVnWIe4CNZDldL3Jl2C7m7U49BQLAN0+zpPWSb5Mw/282BWIdWC7bbwL/HE5
OnC/5tfdBI6sISfQNA4k7nV9TZmlv83kRcy6wQhlT+il808QIIpVDpasRbjM+rh0
J3xeXniv8gSD3zfVvg7AankP6tfzBu4lXRF9x5/l0XlvVLvISJwtyNipw5kuGhmT
8x0tdxmOMtRnjPcaI6U/jNnzXUQDc4s=
-----END CERTIFICATE-----
Generated at Tue Apr 28 21:11:43 2026 by rpki-client