Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/6de50b14-1a81-3455-bc7b-4cbe6f3aadc0.roa
File:                     6de50b14-1a81-3455-bc7b-4cbe6f3aadc0.roa (raw, json)
Hash identifier:          HcViSmzYGlsxsTClrunL8vJkjD/RPsagRporU96mWlg=
Subject key identifier:   D6:B6:F2:3F:96:64:96:4F:CF:05:8D:F9:71:DC:52:97:D0:FA:64:DE
Certificate issuer:       /CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
Certificate serial:       010D0C9F4328584D386A64132B01139676AC5800
Authority key identifier: 1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/6de50b14-1a81-3455-bc7b-4cbe6f3aadc0.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     399788
IP address blocks:        142.249.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:64:13:2b:01:13:96:76:ac:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=7c2541c3-fb48-4c96-8b26-d39a0c70d448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:53:68:bc:48:78:33:b7:90:5c:a1:55:2f:36:
                    1c:0f:05:75:59:9d:d0:d3:91:35:5c:0b:ea:ba:54:
                    a0:89:c5:f4:28:39:aa:33:57:07:7d:08:cc:d9:12:
                    5b:f3:38:58:bb:bb:9c:fc:5f:31:6d:b6:96:08:43:
                    e2:36:dc:e5:95:ae:25:6e:47:ef:b7:a8:9d:71:42:
                    fb:9f:b5:02:76:e4:38:e5:c2:9f:11:05:72:46:68:
                    26:95:ce:12:52:0e:c6:61:5e:85:e4:b0:d3:fc:55:
                    b6:8d:c8:17:84:d0:b4:fd:50:7e:2f:49:8b:42:7c:
                    fe:ee:57:4d:bb:50:2e:8c:80:86:c9:8b:91:18:f5:
                    61:d8:3c:d8:93:80:91:dd:66:27:67:77:1a:3a:78:
                    c1:fd:0e:a8:fb:f8:98:db:a8:60:cc:cf:04:b9:71:
                    2c:9c:a8:63:85:6b:64:58:76:00:e0:13:3a:bf:b7:
                    0f:89:9a:0d:db:6d:02:52:25:0b:23:90:bc:f8:dc:
                    51:9b:ca:b0:8b:81:88:43:48:94:03:ad:fa:20:f3:
                    16:5b:7c:d2:7f:f4:f6:5d:bf:b8:f4:00:80:92:40:
                    e1:11:7a:26:cf:df:d4:9b:d9:45:4a:d9:65:bc:fe:
                    e1:9b:4f:55:5d:ee:c5:31:60:a6:41:73:c1:2c:8f:
                    92:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B6:F2:3F:96:64:96:4F:CF:05:8D:F9:71:DC:52:97:D0:FA:64:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/6de50b14-1a81-3455-bc7b-4cbe6f3aadc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:b9:e5:2d:43:52:c7:17:e0:13:1f:07:f0:82:03:a6:fa:
         6f:5f:1b:c4:df:a7:29:77:d9:50:a5:15:12:7d:04:67:d9:86:
         9c:27:6f:c3:69:22:57:6a:c6:ee:f9:1b:31:63:d8:e9:91:81:
         59:0c:cc:7e:fc:f5:a6:1a:46:50:d2:c6:82:b3:69:0b:28:b5:
         de:4b:77:47:91:4a:d3:45:f7:81:9c:82:67:54:96:1a:49:09:
         e4:0f:c0:20:06:54:1e:e0:0e:01:c3:0b:a3:6e:9c:09:d7:bc:
         3a:bd:75:24:a0:d4:56:05:45:f0:8c:96:e2:10:e8:be:f5:4d:
         06:0e:4e:b0:41:4b:0e:d9:b4:44:c5:f6:eb:aa:59:1f:03:d6:
         5f:a2:36:ff:0c:7a:91:fd:ee:02:78:bb:b8:f1:76:8b:8f:9d:
         a7:79:90:22:d2:2a:13:e4:ef:32:ae:b4:70:2e:c5:08:ff:b2:
         ea:64:0a:0f:d2:13:16:92:b5:88:42:08:79:05:31:f0:07:ee:
         0a:f5:fa:81:4d:a5:bd:7d:73:7f:75:b8:ff:ed:07:3b:86:4f:
         f2:ca:ea:13:f9:58:dd:4f:85:08:90:c6:d8:1a:b4:53:fc:2d:
         48:52:f1:3e:14:ec:9c:5a:50:8e:10:da:4e:a7:06:aa:c6:97:
         fe:fc:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:32:49 2026 by rpki-client