Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa
File:                     10edbdbf-fefe-3135-b393-2a1c2718221a.roa (raw, json)
Hash identifier:          F5Hn+LpG2TlCkfbPZf1VqnCQ7E679DCOlxKQY/k3pMM=
Subject key identifier:   5D:4D:83:3E:AC:6D:E3:26:2E:88:3D:7B:FE:F0:D0:13:25:E7:81:BF
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F4328584DBBA04BC22C56C6DD7AA99E00
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     36000
IP address blocks:        142.71.8.0/24 maxlen: 24
                          142.71.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4b:c2:2c:56:c6:dd:7a:a9:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=a637ae7c-32a7-4e17-b2fd-e04b8d4477a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:a7:36:e5:66:11:f7:14:90:5e:1e:b6:b4:
                    02:5d:af:6d:79:be:13:72:42:4e:9e:34:c5:8b:78:
                    98:d8:75:f9:96:57:e7:77:0d:cf:34:d4:16:a6:5a:
                    2f:ec:55:da:8c:4a:4f:28:97:2d:1d:62:a4:ec:34:
                    b5:b9:ab:c3:70:d2:10:58:44:c3:99:4a:c7:a4:c0:
                    86:40:47:25:d0:fa:4e:35:8a:cf:18:e2:28:c8:23:
                    2c:82:f9:06:d3:6d:8c:f8:22:d4:33:b4:71:c7:74:
                    49:78:18:3d:d7:6f:15:fa:79:ce:f4:90:d3:16:35:
                    ba:89:05:92:86:37:ce:7a:6f:bf:1d:8a:00:52:36:
                    6b:34:c1:da:91:ae:e0:2a:ca:ed:f9:f6:53:00:98:
                    5a:ce:e7:b6:60:6b:9e:31:8c:3d:8e:f7:9c:35:08:
                    9e:54:c7:84:a8:fc:b6:d3:95:65:de:19:4e:f8:3f:
                    a9:95:a0:d8:50:65:d3:0d:98:af:c2:db:36:57:20:
                    14:27:48:4a:47:68:2c:90:8a:e7:08:a8:c6:3a:39:
                    bd:a5:c1:02:71:1d:39:fb:ef:eb:20:df:fb:89:29:
                    e3:e3:f1:62:09:37:e9:5e:db:2d:54:98:92:96:d2:
                    da:40:aa:97:54:e3:d1:bc:6c:ca:63:6a:64:ba:64:
                    11:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4D:83:3E:AC:6D:E3:26:2E:88:3D:7B:FE:F0:D0:13:25:E7:81:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.71.8.0/24
                  142.71.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:1b:8e:f1:f5:9f:10:20:61:f2:1b:b8:0d:f5:78:39:46:
         79:a6:cd:c9:96:db:3a:1a:f9:40:8a:d8:ec:04:79:e0:a7:70:
         59:85:00:a5:b2:b5:5b:8a:ac:9f:19:57:ac:fc:f8:ec:37:f1:
         3c:e2:9e:52:0d:0e:a0:ca:90:fd:eb:d6:ca:5f:c9:2e:e1:1b:
         c7:6c:55:78:de:3a:ee:1b:b6:40:4b:5d:c2:e6:5d:db:f2:33:
         ee:57:ef:bb:2b:af:a3:8f:87:98:b0:3c:a9:41:88:2f:8e:84:
         8b:45:9a:69:f8:1e:d9:ae:ef:1d:fb:02:5e:ad:f3:d0:36:e7:
         46:8d:92:b6:7e:2f:f0:68:b7:c2:dc:5c:e4:64:bd:69:e1:ff:
         8c:7e:28:98:20:be:9e:92:e3:e3:0a:51:b3:30:14:39:47:46:
         46:96:65:0b:c7:dc:f1:27:86:c9:b2:b2:32:bf:8e:6e:6d:93:
         91:16:61:bb:eb:52:22:29:ce:1a:26:59:3b:eb:db:24:da:af:
         dc:c1:05:b3:c1:ef:f6:7c:5d:25:a1:38:4f:8d:c8:f5:f5:4e:
         59:fe:35:f3:3f:18:44:e4:f1:45:29:92:89:e7:be:8f:c0:98:
         a3:b4:eb:eb:7a:3e:a2:81:52:af:bc:0a:ba:9d:0c:e8:a7:a7:
         d2:a0:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:31 2026 by rpki-client