Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/903052e0-4837-3d7f-bd73-e58779f7ed99.roa
File:                     903052e0-4837-3d7f-bd73-e58779f7ed99.roa (raw, json)
Hash identifier:          v7rbMgHw97Xdf3tLneqIwe+TyNpo+g7ukGcQypyt1hQ=
Subject key identifier:   E8:3A:96:6F:7C:68:67:8F:34:3F:F8:34:C8:36:66:2F:7B:09:DE:9D
Certificate issuer:       /CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Certificate serial:       010D0C9F4328584D3704B5CC1F2358259B83AE80
Authority key identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/903052e0-4837-3d7f-bd73-e58779f7ed99.roa
Signing time:             Thu 19 Mar 2026 01:00:31 +0000
ROA not before:           Thu 19 Mar 2026 01:00:31 +0000
ROA not after:            Wed 17 Jun 2026 01:00:31 +0000
asID:                     53654
IP address blocks:        142.248.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:37:04:b5:cc:1f:23:58:25:9b:83:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
        Validity
            Not Before: Mar 19 01:00:31 2026 GMT
            Not After : Jun 17 01:00:31 2026 GMT
        Subject: CN=321e0023-3253-4c41-a069-c5cc9260078c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:72:5d:70:b0:fc:7d:59:75:f3:fa:74:fd:
                    b5:2b:2e:61:32:e0:57:37:61:37:cf:72:06:ba:c4:
                    7d:b0:fb:b2:24:76:e1:e6:00:8c:b7:7f:c3:e4:f0:
                    91:12:00:7f:cd:a9:62:50:f4:4a:3f:90:24:4b:d9:
                    ca:43:d9:d8:f9:d3:4b:d6:39:35:32:21:a0:7c:02:
                    3d:83:b3:93:1b:75:30:8e:22:7a:77:16:ea:a9:c3:
                    2c:b4:b3:35:6e:93:09:c7:3e:38:e0:6c:ea:80:93:
                    b5:bf:29:94:de:08:e1:e9:4a:f5:5e:0f:aa:b3:28:
                    35:15:d2:ca:22:da:1a:a4:72:92:9e:3f:0d:18:cb:
                    6f:cb:55:31:a9:09:d6:7a:96:23:ae:07:1c:5c:8e:
                    50:bc:07:19:6b:f7:7f:c9:2a:32:8e:c6:6a:f0:6a:
                    7f:1a:21:7e:f0:8f:36:09:ea:a0:38:55:07:9f:b1:
                    57:cb:4c:3a:77:cd:3b:f4:71:b9:35:4e:62:b3:a1:
                    47:dd:e1:3b:4d:28:e1:e3:31:84:d6:6f:b5:ef:2a:
                    31:e2:66:a5:5b:70:e2:b4:bc:08:3a:7d:a0:ff:99:
                    0f:0c:0a:e3:f8:ce:cf:43:19:af:bb:e5:e0:25:02:
                    d7:2d:68:56:96:a3:8a:45:c3:8c:07:1c:69:b8:d8:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3A:96:6F:7C:68:67:8F:34:3F:F8:34:C8:36:66:2F:7B:09:DE:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/903052e0-4837-3d7f-bd73-e58779f7ed99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl

            X509v3 Authority Key Identifier:
                keyid:F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:28:63:ca:65:04:82:1b:45:26:00:f1:3f:32:6f:37:a8:f2:
         83:cf:bc:4c:74:50:07:27:cc:a5:cb:46:9b:34:3f:0e:e9:ab:
         69:80:8e:ff:73:a3:34:0a:b0:ab:7b:8d:64:10:15:89:02:28:
         cc:ee:e9:c4:50:2a:39:55:58:98:b3:fc:74:7a:16:e6:6c:3e:
         f0:ed:d6:53:50:5e:4b:bd:69:51:18:ef:01:bf:9a:b0:76:59:
         03:69:88:8a:03:b0:67:d7:49:6e:a2:cd:a1:cc:c8:7a:36:08:
         c6:4c:9b:bb:e2:1f:b6:44:59:a0:cb:66:5a:14:eb:a0:8e:92:
         04:11:cd:02:d3:45:62:f2:0f:3c:e9:4e:12:92:a8:e9:f6:06:
         34:b2:6f:41:0e:86:61:01:9e:93:7a:e5:9d:e5:17:4f:26:7e:
         25:4a:73:e7:fc:ab:ff:9e:b8:ff:f4:a0:42:f9:c4:74:23:d6:
         da:3e:65:58:96:61:db:e5:a3:d5:21:c6:07:50:c9:0b:d9:62:
         44:e7:b5:50:dc:67:04:66:ce:63:e2:8a:b1:77:6f:9b:6e:f5:
         be:2f:bf:ac:67:ca:52:8d:19:6c:5f:13:f2:c5:39:08:c9:1f:
         9b:dd:23:89:7d:a9:49:12:34:9c:7b:74:f8:3a:1f:01:ad:9c:
         3d:22:e7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:46 2026 by rpki-client