Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd432cee-5d5e-30da-9017-38ee722461aa.roa
File:                     fd432cee-5d5e-30da-9017-38ee722461aa.roa (raw, json)
Hash identifier:          GJqBWZ5/xuqb4td/fAZPczdpwLARtFvumQsQ9g68b+U=
Subject key identifier:   29:18:A0:E2:FA:6F:2E:7C:E1:EC:5C:E4:47:34:C0:A4:EB:DA:66:2B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EC0A71010A5E5A9F7DC47A1C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd432cee-5d5e-30da-9017-38ee722461aa.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     19797
IP address blocks:        154.62.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:10:10:a5:e5:a9:f7:dc:47:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=9056d184-80b9-4187-951a-89aa339c2474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:89:bc:c9:32:c3:f8:5c:98:10:cb:cc:6f:
                    bb:ad:66:ae:66:e0:5e:48:f4:40:c5:40:94:85:a5:
                    0e:a8:29:d3:f9:c8:65:a6:7c:33:0e:dd:93:4f:e7:
                    9e:fc:db:30:96:c3:8f:28:b0:55:6b:0a:e3:28:9e:
                    2c:a1:93:cf:de:22:25:75:1a:a1:f4:27:b7:98:4b:
                    94:60:85:0c:ea:d7:af:29:41:06:08:fc:4d:67:e6:
                    f5:09:ff:71:24:6b:f3:7d:b8:b9:a3:55:cc:8f:a5:
                    20:7b:7d:60:b8:aa:74:4f:6a:ac:76:e6:38:3b:b9:
                    a6:75:41:d1:fe:73:9f:23:47:fe:3c:ba:9e:5f:46:
                    99:89:7f:59:a8:af:b9:3e:86:ec:cc:2b:ba:e1:6c:
                    35:00:53:87:63:32:3a:03:2e:2d:61:db:d4:d2:29:
                    d9:1e:77:2d:45:e0:7e:88:05:f7:51:2a:2f:88:02:
                    ed:b1:a3:cc:12:25:62:67:c3:47:7c:10:14:6f:10:
                    6a:47:25:5e:a5:fb:66:89:9d:38:d5:aa:31:c6:c8:
                    f0:4b:ec:c7:8f:96:4a:7f:3c:64:4a:fe:e7:00:aa:
                    5a:08:41:83:b0:00:6b:e3:26:66:9a:a7:3c:54:8a:
                    f2:9a:d2:7b:3c:d4:de:9e:56:1c:54:28:be:ea:37:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:18:A0:E2:FA:6F:2E:7C:E1:EC:5C:E4:47:34:C0:A4:EB:DA:66:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fd432cee-5d5e-30da-9017-38ee722461aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.62.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cd:63:ea:11:6c:3d:71:e0:75:56:dc:87:fd:ae:f2:42:92:
         bf:fc:84:1e:25:9e:ac:81:8e:9a:e6:e7:5c:60:17:a5:5d:ee:
         ed:8f:dc:d1:63:51:88:44:86:2d:af:34:06:5c:48:49:26:e1:
         a7:7b:a1:6f:a7:ad:72:85:d2:dd:0c:b9:05:72:af:21:ac:08:
         ea:51:e4:ee:52:e2:d3:6c:3b:9d:b0:8c:2d:4c:fc:bd:bd:78:
         46:d7:53:80:c9:1b:4b:eb:32:35:3f:41:5d:ca:a1:5a:e1:b8:
         31:89:d0:c2:70:c7:8c:69:5e:8d:7f:14:b9:7b:6f:40:60:88:
         f5:7a:0c:79:38:d1:ac:cd:96:c8:d6:fc:0d:14:76:d5:40:74:
         4c:7a:db:6d:38:35:4f:2b:fc:83:99:bd:a9:fc:e2:11:a1:bf:
         f9:38:ea:46:4c:5b:f3:53:84:28:3c:e3:62:b2:d8:e5:f1:a4:
         5b:ec:41:20:81:70:48:04:7e:b8:26:13:4c:bb:a5:38:cd:f8:
         d7:1a:c2:47:a4:b4:b1:14:a2:01:b2:8f:ab:af:b7:14:fb:26:
         f2:32:32:af:7d:f4:b0:01:1d:a8:2c:4e:d6:82:9a:4e:ca:78:
         de:e0:40:91:62:21:27:ae:b2:82:3f:f3:bc:b3:5f:28:ed:27:
         b4:d3:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:41 2026 by rpki-client