Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa
File:                     3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa (raw, json)
Hash identifier:          JkQi5rdUAqHJsGo663iIA6HDWgtAQ59F64Gx9uRt16Y=
Subject key identifier:   42:0B:DF:48:38:6B:FB:59:66:E6:F5:2C:FA:34:CC:D9:4A:EC:CD:9F
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584D47C50929D4C1E052C6B571C0
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     36549
IP address blocks:        162.249.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:09:29:d4:c1:e0:52:c6:b5:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=f2bf18cb-91bf-40a5-a73f-321f1c3bd2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:90:78:42:1e:42:d7:db:44:8e:cb:9d:03:
                    fa:57:12:43:45:6f:f7:a0:3d:8e:29:5c:20:3c:f6:
                    99:fb:4c:3a:ee:1d:9a:03:8c:1f:af:32:be:4b:ed:
                    66:f0:48:fe:85:3e:9a:5e:a6:38:1b:27:f5:ca:c5:
                    4f:e5:5a:12:77:ad:9c:4d:62:98:7f:40:19:9d:10:
                    5f:12:46:a8:74:d8:34:ef:45:d1:ed:b4:9a:ee:b1:
                    78:ba:7a:c6:0c:83:90:b7:7a:e2:e9:17:cd:2a:99:
                    03:22:3d:6e:7a:a4:1c:9e:fb:90:e3:af:29:00:d9:
                    25:c7:c3:96:b2:9b:03:3e:41:3b:1a:00:a2:3a:2d:
                    e3:bf:35:22:c3:dc:32:91:60:e3:8f:bf:36:1c:61:
                    16:98:e6:2b:c8:97:b2:64:fe:df:0f:24:60:e7:c1:
                    db:d3:e1:c8:50:a7:16:13:84:4d:7b:4e:06:17:7c:
                    4f:15:85:f2:ad:36:86:c8:53:b7:8b:9b:40:3c:01:
                    db:33:06:93:f5:b4:01:ae:31:48:8c:67:d8:ba:94:
                    8b:e7:b6:47:c2:51:97:35:ba:52:5f:b9:4e:d5:af:
                    fa:9e:ab:1a:b0:f8:93:1c:a8:77:39:ee:b2:7e:fe:
                    ac:9d:48:8f:31:a2:6c:fa:84:c1:c1:b9:5f:bd:d5:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0B:DF:48:38:6B:FB:59:66:E6:F5:2C:FA:34:CC:D9:4A:EC:CD:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:d9:99:9e:92:80:ad:43:db:9b:ab:f6:d6:f2:b1:38:4b:b3:
         84:ed:7c:9f:29:d6:17:89:f4:86:d9:7b:ca:62:9a:3f:6f:be:
         02:7e:ce:9a:ce:72:a1:20:c6:28:5a:b0:a7:05:90:53:45:7f:
         d0:3d:d7:c8:70:0e:56:1b:e2:52:cb:7a:5b:70:c8:95:d0:7a:
         b1:eb:e2:1a:58:47:89:c6:fd:4d:70:88:67:f1:62:a9:f1:0d:
         3d:aa:fe:f5:96:57:f9:aa:6b:ad:b9:2c:ca:a6:44:26:43:96:
         fb:41:83:10:89:a5:6d:0f:4e:ff:54:4b:39:fe:55:4c:f1:c3:
         80:ec:fb:2d:eb:f6:c5:a1:51:33:a4:fd:6d:4a:b3:93:1f:36:
         fb:f2:40:09:e0:9a:22:d8:d1:3e:c2:52:90:61:d2:ac:d0:89:
         d2:3d:88:dc:e8:3b:fb:54:9a:66:06:cb:9d:8f:fb:c4:7d:99:
         90:64:f4:16:ac:cc:03:f2:a8:c1:bf:6c:54:a2:ff:03:d8:c2:
         33:d8:40:2d:36:a7:23:6a:28:43:45:36:02:db:39:c7:bd:a2:
         b6:f8:b2:80:77:92:19:af:fb:2a:5e:b3:e5:b1:1f:ae:88:b7:
         f9:36:57:8b:38:39:22:14:7d:80:52:88:80:6f:1f:6e:26:9b:
         0e:1b:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:58 2026 by rpki-client