Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa
File:                     14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa (raw, json)
Hash identifier:          jlum9eyoddW3eMSVT88pcLFEPBDLfdYn9mz5CVZ3ncM=
Subject key identifier:   66:11:0E:4F:1B:D8:9D:AC:CB:AB:A5:5F:3F:EF:52:02:3B:F1:54:ED
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584D3B34E7A1F5098492FD0F4290
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     13335
IP address blocks:        159.242.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e7:a1:f5:09:84:92:fd:0f:42:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=2e3a6d59-6cc3-4f56-b60c-60483256c7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:12:a2:ba:33:1d:44:49:99:99:a4:ee:e6:db:
                    79:78:d3:0e:8d:e1:58:ae:8a:a4:30:6a:97:6d:3c:
                    17:bc:17:37:80:5f:cd:a7:a0:8f:a6:6f:dd:64:ea:
                    2f:43:23:7e:fa:bf:c3:8b:bc:ea:48:80:61:eb:fa:
                    3d:0b:10:84:54:5f:80:ac:cb:e4:f3:49:a4:f2:3e:
                    4f:a1:ba:42:3c:5a:1a:74:84:79:d5:64:ad:f1:df:
                    a9:2c:6e:0e:7c:df:2b:70:42:b6:17:2c:1b:9e:77:
                    11:37:b0:60:74:97:d4:85:58:9f:e9:20:be:4c:19:
                    27:24:43:f7:fe:69:37:f5:9a:d0:1e:58:11:46:6a:
                    30:39:6a:56:92:35:18:ee:63:20:18:86:ad:d3:fb:
                    d1:e7:f2:4a:09:96:b5:8f:4d:4a:62:42:6a:a5:54:
                    b7:2d:89:68:89:3b:91:a4:68:27:68:77:a1:1e:18:
                    d1:ff:2e:74:fa:d8:9b:35:fe:2e:65:db:fd:4c:97:
                    5c:37:58:12:05:a8:4c:6c:e4:29:71:25:0e:01:87:
                    d4:80:53:06:fa:3e:70:cc:a6:26:7e:0b:49:fe:0b:
                    e2:90:e0:4b:43:80:bd:4f:51:ed:6a:65:b4:7e:78:
                    b5:d9:18:c0:19:18:1b:6d:18:43:9c:1c:12:bc:06:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:0E:4F:1B:D8:9D:AC:CB:AB:A5:5F:3F:EF:52:02:3B:F1:54:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.242.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:70:b4:d9:2b:f1:f2:13:a4:70:45:17:e0:0d:f5:bf:52:c7:
         d1:96:5d:1a:2b:50:9d:0c:ce:07:ee:b0:b3:a0:a0:fd:58:46:
         71:c7:7a:31:f4:eb:71:a7:93:94:e3:ea:3f:18:7d:15:1a:0b:
         aa:66:b2:c5:be:b9:31:b9:96:c0:f1:93:61:31:28:0b:11:f3:
         63:61:69:fb:7d:4f:9f:c8:6f:37:0d:cf:89:4e:bc:b0:de:c4:
         39:a7:db:b7:3c:67:f9:fb:27:cd:11:97:06:c3:7a:99:76:1a:
         4b:f8:e7:50:67:10:05:ff:1e:8b:fc:2d:4a:06:ef:7d:09:fb:
         5f:e7:5e:c4:b7:7c:da:c2:33:9e:0a:6b:12:f4:e1:6d:6a:09:
         db:76:86:8d:0f:0d:fa:ff:b8:6b:6c:9c:e6:11:37:0e:8a:cd:
         a7:70:9e:fe:b4:c2:87:ef:4e:0e:2c:98:95:78:5f:0b:c9:3a:
         18:03:9a:d7:b4:34:2f:dd:8e:ab:4b:1c:82:2c:d1:f5:ad:58:
         4a:94:90:1b:67:77:42:c4:f7:89:80:00:e9:a4:0a:b5:45:ad:
         37:bc:e6:ac:d0:ef:b2:5a:df:a3:06:f6:9c:a5:43:6e:17:8b:
         ef:e8:32:10:65:59:14:00:16:8f:5f:3a:29:b5:29:90:59:a9:
         0e:74:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:11 2026 by rpki-client