Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/0b5d44a5-7f8b-31b1-9cfc-c4899d837137.roa
File:                     0b5d44a5-7f8b-31b1-9cfc-c4899d837137.roa (raw, json)
Hash identifier:          tKnTzZZatT9eps+IfHYosFOWzEDCAHm9NExiKI3O1jI=
Subject key identifier:   5F:70:F8:27:AD:39:CB:EF:38:F9:15:96:04:F2:86:D3:DE:A4:43:0E
Certificate issuer:       /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Certificate serial:       010D0C9F4328584D186CFF784B376DE0FDEF9AC0
Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/0b5d44a5-7f8b-31b1-9cfc-c4899d837137.roa
Signing time:             Sun 08 Mar 2026 02:00:31 +0000
ROA not before:           Sun 08 Mar 2026 02:00:31 +0000
ROA not after:            Sat 06 Jun 2026 01:00:31 +0000
asID:                     23557
IP address blocks:        142.249.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:18:6c:ff:78:4b:37:6d:e0:fd:ef:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
        Validity
            Not Before: Mar  8 02:00:31 2026 GMT
            Not After : Jun  6 01:00:31 2026 GMT
        Subject: CN=13fdc958-890c-4010-a79a-f9f21d2f3c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:d6:3f:41:2f:09:b4:a4:cc:ce:4c:8a:7f:
                    9e:45:9f:97:4d:67:f1:e6:32:9b:bb:4e:20:41:6f:
                    45:f4:a7:0d:dc:a4:7a:8c:2b:c6:f8:6a:bb:29:6f:
                    05:23:64:f7:c5:2f:5c:34:99:a1:e3:2d:f7:81:09:
                    6d:05:1a:ce:df:97:16:50:aa:b1:b6:b8:1d:11:3b:
                    bc:a5:30:94:d4:ea:0c:63:52:e7:c0:11:fa:03:51:
                    5d:69:39:b2:1c:3e:c8:70:f8:f2:01:b3:e3:d8:e8:
                    44:a0:6f:9e:6f:99:46:10:69:52:9a:13:ec:cf:38:
                    60:17:b3:8e:c3:00:4e:f1:fd:20:3b:96:ce:e6:70:
                    16:76:42:ae:9b:0e:56:e3:06:6a:2d:de:23:9f:1c:
                    dd:18:bc:0b:12:34:5b:fb:88:2d:bb:23:d1:d3:dc:
                    0b:d2:b8:1c:a2:ee:25:1f:8b:ee:99:ef:de:4e:fa:
                    be:00:32:3d:0f:53:14:8b:99:26:bc:ed:7f:97:a6:
                    b9:19:f8:1e:cb:5c:44:cd:33:d9:1c:06:73:bf:05:
                    d3:38:b3:5f:85:78:96:7f:0e:f6:7f:a1:79:c9:3c:
                    db:a5:0c:9c:08:e5:79:3e:fb:a8:8b:d4:5c:47:c2:
                    13:b3:40:de:44:62:15:9d:8d:c2:07:43:52:5c:5b:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:70:F8:27:AD:39:CB:EF:38:F9:15:96:04:F2:86:D3:DE:A4:43:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/0b5d44a5-7f8b-31b1-9cfc-c4899d837137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl

            X509v3 Authority Key Identifier:
                keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:60:9d:c7:cd:2e:3f:6c:34:a6:e8:29:05:56:ef:6f:54:
         77:76:58:3c:4b:f3:9e:43:46:a3:2b:c7:82:56:f0:bd:5c:a7:
         8f:e7:b5:65:e9:a0:0f:3e:22:e1:e2:f1:15:50:e3:a3:cc:f0:
         64:3b:96:d7:84:fa:5e:d9:36:09:1d:58:26:24:b1:fe:c3:1f:
         c3:6e:1d:3e:73:39:37:c8:7f:87:5e:e4:ac:19:85:7b:5f:64:
         49:8d:82:10:e5:fc:6f:54:28:be:6a:eb:2a:3e:f6:58:c7:3b:
         32:ed:26:7b:1a:2c:ab:eb:30:a8:2f:cb:ad:19:e5:6e:2b:d9:
         60:6e:56:d0:0e:d6:57:06:ff:39:79:f5:21:a5:13:81:7b:a4:
         82:21:8a:fb:7f:8f:c1:7f:42:f0:50:47:17:a3:80:5f:dc:d2:
         5e:ae:a5:6a:68:00:4d:7e:5a:17:99:d3:d1:3b:55:30:dd:8d:
         4b:95:ba:15:89:ff:67:4f:06:19:46:cb:f7:c0:8f:47:10:1e:
         f6:b9:ee:bf:d2:df:94:12:c2:5e:3a:d9:35:c1:44:0f:ac:ce:
         a4:3f:e6:e7:32:fa:7c:5b:0b:15:05:2a:d2:b0:87:d0:ac:5e:
         6c:80:1f:60:94:6c:15:6d:42:4b:c6:84:23:1b:0f:9a:5f:d0:
         04:ed:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:24 2026 by rpki-client