Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa
File:                     f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa (raw, json)
Hash identifier:          OHsot5yQyPSRKyEMUglfMpZcdebbhXISsTftSaRcxG0=
Subject key identifier:   0B:3A:C1:B0:54:D5:97:89:E9:7D:6E:35:36:42:18:62:B7:9B:FD:EB
Certificate issuer:       /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Certificate serial:       010D0C9F4328584B7F6E6C7422C2CFE01790BE80
Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa
Signing time:             Thu 09 Oct 2025 17:11:13 +0000
ROA not before:           Thu 09 Oct 2025 17:11:13 +0000
ROA not after:            Wed 07 Jan 2026 18:11:13 +0000
asID:                     394106
IP address blocks:        142.249.136.0/24 maxlen: 24
                          142.249.137.0/24 maxlen: 24
                          142.249.138.0/24 maxlen: 24
                          142.249.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:6e:6c:74:22:c2:cf:e0:17:90:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
        Validity
            Not Before: Oct  9 17:11:13 2025 GMT
            Not After : Jan  7 18:11:13 2026 GMT
        Subject: CN=3bc09e63-5f2c-4e7b-a128-fed53596c012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:df:5a:3b:80:fc:66:91:e6:e4:46:e3:3b:1f:
                    0b:c1:90:c5:c2:a8:96:13:fa:cb:27:76:80:1b:9f:
                    df:35:e7:bf:1d:6b:c8:e5:98:22:6d:48:f9:19:35:
                    e9:a6:41:2a:69:20:73:c7:ea:1e:5f:23:2c:83:83:
                    d2:05:e2:69:bb:69:0c:4e:13:59:d4:4d:cb:bc:48:
                    ce:9d:cb:5a:2e:b2:01:c6:88:40:30:4c:0e:63:f9:
                    55:fa:38:b0:6b:1a:78:24:27:89:38:36:65:b6:b5:
                    c6:c1:fe:c6:f6:62:f3:bb:e6:27:8c:3f:93:ce:fa:
                    eb:4a:97:29:f0:e1:c0:14:e8:66:2f:ba:3d:52:e0:
                    85:26:67:86:51:10:b6:77:db:6b:83:a8:56:b5:b9:
                    4d:88:a8:29:38:07:91:c7:1e:57:5d:d5:57:08:cd:
                    6c:c9:a5:a9:b6:2b:fe:f4:68:43:37:b9:cd:3d:a9:
                    dd:af:10:c7:e8:df:b1:39:ec:8d:bb:2a:69:b2:42:
                    8f:5c:d4:5c:79:76:86:fd:bb:6a:25:8d:f2:d7:90:
                    45:69:e2:90:13:a6:eb:3b:eb:ca:8c:45:4a:82:b3:
                    5b:a9:d8:34:e8:53:ed:7e:c5:59:f2:12:17:db:7d:
                    11:81:4a:62:bd:34:d7:e0:ff:33:db:48:b9:0e:c0:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3A:C1:B0:54:D5:97:89:E9:7D:6E:35:36:42:18:62:B7:9B:FD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl

            X509v3 Authority Key Identifier:
                keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:09:f1:a6:b5:34:c8:d2:83:12:16:4d:76:e4:b8:cd:d9:bb:
         20:0f:d2:9c:6c:77:93:a9:45:bc:0d:e7:a0:c1:ab:4c:40:4b:
         d1:d7:27:cf:69:44:6f:24:88:86:71:72:c2:0d:8e:e4:40:d7:
         f8:99:08:0d:1a:53:15:8f:eb:15:18:ee:7b:1b:0a:72:75:5a:
         c9:14:2c:3d:f9:be:38:d7:90:90:58:f0:23:b4:77:42:aa:dc:
         81:5f:60:7c:5c:58:c9:33:64:55:4a:95:f5:3f:44:f8:1f:da:
         95:cb:7b:b2:2c:94:8d:06:e5:80:a5:bb:fc:bc:a9:f0:a5:0e:
         d8:a0:bc:80:1b:c7:ef:5d:99:ad:65:40:11:f1:e1:3a:d1:29:
         96:23:73:97:51:0e:8c:f0:10:8f:c4:34:6a:22:47:90:98:b6:
         e8:11:11:3c:06:48:b7:2e:66:77:24:35:67:de:73:d1:ad:17:
         af:84:eb:08:8c:65:e0:e3:36:e1:6e:a7:e4:b2:d0:62:ca:c3:
         9b:fb:d3:2d:1e:fe:25:15:df:48:78:24:81:ea:5f:a9:cf:69:
         83:39:8c:cc:a4:22:1a:25:e7:dc:10:7f:2a:ec:4f:e8:be:2a:
         22:6c:56:6a:1b:9d:a4:a2:51:19:c7:a7:fa:3d:37:10:54:02:
         06:bb:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:53 2025 by rpki-client