Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8e88935-406e-3c70-b119-b61461bd5645.roa
File:                     e8e88935-406e-3c70-b119-b61461bd5645.roa (raw, json)
Hash identifier:          QSYwyWdd34a/dvZpUdUqoig1kuIYMBZAgiKrLN45JcI=
Subject key identifier:   8D:43:C3:F0:7C:E1:86:26:12:DE:FA:A1:38:68:39:2C:AA:B8:92:F6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E1B7995A55E0900E27811AB40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8e88935-406e-3c70-b119-b61461bd5645.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     151690
IP address blocks:        154.22.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:95:a5:5e:09:00:e2:78:11:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=b0a10558-49fd-4cf6-9a5e-21f7059b3a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:59:af:da:fc:ef:b7:ac:03:f4:56:bf:86:
                    8c:2a:5d:8f:8a:26:7a:6b:4f:08:78:2e:9c:f7:ce:
                    91:5c:5c:13:fe:1b:31:d3:d4:a6:52:99:7e:27:26:
                    9d:01:d3:e6:f4:be:a9:f3:89:20:f6:79:20:8b:a9:
                    06:98:d1:59:31:83:5a:f4:42:ab:b7:c2:02:da:c4:
                    d9:ce:66:b4:84:03:bc:95:06:48:5c:b0:eb:89:8d:
                    b8:b5:d4:20:1c:57:7d:97:eb:29:e7:3a:b1:ec:17:
                    07:02:e1:93:b1:de:26:5f:7d:3e:ee:0f:0b:6c:33:
                    50:ff:57:38:bb:9d:02:22:dc:33:8a:a9:25:66:9a:
                    ef:07:71:d6:48:a0:8f:b4:28:eb:c3:e2:3c:62:7d:
                    e2:91:ff:c2:ed:5b:ed:e2:1d:9a:7e:22:f5:aa:c2:
                    6a:26:cd:97:f9:4d:fe:de:18:a1:77:db:3f:c2:2b:
                    27:a8:09:5e:be:3f:4a:d4:e4:b7:43:d3:20:62:b9:
                    5b:fb:44:04:04:8a:d1:e7:a8:6d:bc:05:2c:68:8a:
                    fb:ce:1c:ba:11:44:1b:35:a6:e4:c7:be:a7:c6:ac:
                    c7:68:9f:fb:3e:85:c5:08:4b:b6:a1:7b:61:71:22:
                    fe:f5:36:32:a7:67:60:e6:dc:60:73:8d:29:f4:41:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:C3:F0:7C:E1:86:26:12:DE:FA:A1:38:68:39:2C:AA:B8:92:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8e88935-406e-3c70-b119-b61461bd5645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.22.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:ca:9a:10:9d:7e:84:17:d1:aa:da:66:20:a1:48:67:8e:
         ff:c5:fa:be:4c:d5:93:d7:b5:bb:4a:fa:3e:7a:54:09:5b:fa:
         e8:47:8c:3a:46:9a:a8:29:af:71:c9:65:9c:82:16:0a:eb:89:
         1f:ac:92:73:f6:46:90:2c:a8:a2:af:ad:9b:8c:75:1c:83:e9:
         cb:6d:b4:fb:49:54:7e:e1:4e:fc:16:ff:41:80:18:74:80:82:
         08:91:d0:8b:5c:1c:69:d6:c7:a6:b2:2d:ed:e3:b2:30:1a:e0:
         b8:5a:b6:75:89:19:5d:64:49:b3:ce:56:bb:af:3d:8f:7b:c7:
         51:b4:9b:c6:dc:aa:64:ac:14:62:f9:70:da:9e:91:99:d3:44:
         70:b4:c4:11:aa:49:ba:79:48:6e:b1:32:50:26:e7:b8:63:7c:
         a7:98:31:16:50:86:2b:af:62:0d:de:72:23:00:2d:4a:4e:6e:
         bd:b0:3c:39:e3:11:c2:d4:6d:ac:2b:32:73:57:bb:c6:87:e4:
         03:32:77:85:0b:64:81:bb:48:2d:77:e1:fe:60:18:fa:cb:47:
         84:e9:6f:27:f1:67:3b:74:d9:a3:60:77:90:e4:f2:c5:61:d8:
         88:f1:c4:54:9f:4b:60:c0:9d:54:3f:c9:eb:cd:13:b8:3e:3b:
         cd:aa:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:15:11 2026 by rpki-client