Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffe6927f-185b-33c2-a452-3c92fb49b98a.roa
File:                     ffe6927f-185b-33c2-a452-3c92fb49b98a.roa (raw, json)
Hash identifier:          J+tBMIfWSdpBy8Kw+U5lm+sF7QImxJEZs3zpCNiJN7s=
Subject key identifier:   33:00:B7:DF:B5:A3:9A:16:EE:32:F0:6F:B4:1D:7B:21:82:F3:99:2A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DEB1CC1E05E16EE96E0880F40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffe6927f-185b-33c2-a452-3c92fb49b98a.roa
Signing time:             Fri 22 May 2026 13:14:29 +0000
ROA not before:           Fri 22 May 2026 13:14:29 +0000
ROA not after:            Thu 20 Aug 2026 13:14:29 +0000
asID:                     273887
IP address blocks:        154.13.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:1c:c1:e0:5e:16:ee:96:e0:88:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 22 13:14:29 2026 GMT
            Not After : Aug 20 13:14:29 2026 GMT
        Subject: CN=b833d156-2a98-4fcf-ae66-4a777edc4cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:f9:97:bb:44:b8:c9:f1:3c:4c:a2:e5:8f:
                    5d:aa:ee:aa:d7:d4:f1:5c:ca:10:09:43:c0:84:25:
                    bd:dc:1a:a7:70:4d:01:fa:e9:c7:ca:2a:fe:07:74:
                    2e:e3:44:8c:ec:43:62:58:79:ef:45:f3:57:e2:34:
                    fc:f9:ff:d2:71:e3:ef:bc:51:58:56:f9:a4:8f:86:
                    82:79:dc:78:1c:c3:bf:16:00:51:07:c0:61:85:b2:
                    b2:c0:4d:52:65:d7:04:1c:09:8b:2c:96:57:1e:a9:
                    ff:28:e3:7e:6f:4d:f9:39:49:86:8b:83:50:87:16:
                    41:eb:24:0b:12:59:9d:8f:87:a8:a1:53:3b:fb:02:
                    7b:7e:a9:d7:e1:e7:fc:3a:25:b3:9b:e0:b2:01:02:
                    12:df:d5:d1:9e:04:0a:1b:f2:f7:30:21:19:bb:0c:
                    69:b7:a9:ce:53:91:48:f9:81:20:8e:7c:b2:83:da:
                    7d:21:2b:4a:52:f8:8e:7d:44:08:ad:73:0a:ef:68:
                    83:ad:02:9a:8a:bf:92:75:33:3c:fa:10:8a:50:2d:
                    2f:cf:d8:aa:f3:62:21:d4:d1:fd:ba:41:6f:5d:a9:
                    ee:60:73:82:a4:ef:f1:76:e7:a1:47:95:d7:12:dd:
                    aa:6e:94:bc:4f:33:b8:b3:83:6c:e0:91:79:9b:fb:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:B7:DF:B5:A3:9A:16:EE:32:F0:6F:B4:1D:7B:21:82:F3:99:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffe6927f-185b-33c2-a452-3c92fb49b98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.13.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:b0:c1:9f:2f:1d:4f:17:b2:07:34:a9:fc:4f:38:d8:bc:b5:
         00:51:3a:a7:06:2a:7f:b9:a7:af:23:eb:5e:26:23:83:b2:ad:
         5e:c5:f5:9f:cd:fe:7b:67:7c:f3:76:8b:76:24:3f:0d:82:07:
         e3:a3:1a:7a:ae:4e:98:1f:a3:17:7d:f6:67:4c:f1:d9:17:39:
         c7:a4:bb:5a:ed:1a:d1:49:0d:c6:bb:f6:fa:3a:cf:f0:b5:16:
         b4:04:23:d1:01:ac:91:ef:73:88:2d:b1:3d:f7:c2:68:91:6c:
         f0:7d:7e:24:85:fe:51:a1:44:bd:a4:c6:83:2c:8d:3e:50:f3:
         67:be:1b:14:c9:7c:27:61:cd:5e:cd:e6:d9:d4:89:13:52:7b:
         23:4e:7a:23:2a:68:4a:ab:bd:2b:a7:b3:97:17:a1:35:97:6d:
         05:eb:62:05:d4:ba:b2:e1:a6:62:7f:f5:7a:5b:82:22:4d:d1:
         94:b4:7e:cd:57:0e:04:a9:13:ab:ea:5e:c7:34:38:93:7a:90:
         ed:74:a5:86:99:a2:37:0e:8b:85:95:46:a4:cd:1f:69:00:27:
         82:a4:a0:c9:ad:00:32:54:b6:04:13:d3:d3:ea:59:22:6d:9f:
         a6:d1:41:e7:93:e3:a0:97:7c:dd:05:4f:dc:97:44:3f:60:06:
         22:50:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 23:36:33 2026 by rpki-client