Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/0238aa93-fe9d-3d8e-a81e-7612e1121f26.roa
File:                     0238aa93-fe9d-3d8e-a81e-7612e1121f26.roa (raw, json)
Hash identifier:          DABydnsBza9eHRLFALq+h9uNasIOAdTnwy9zUb1MI7o=
Subject key identifier:   F0:A5:E7:14:E7:7C:A9:6D:BE:AE:A9:74:A4:05:8B:A0:74:B7:B9:4F
Certificate issuer:       /CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
Certificate serial:       010D0C9F4328584DBB3BFB013DF36F4F0D98D180
Authority key identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/0238aa93-fe9d-3d8e-a81e-7612e1121f26.roa
Signing time:             Tue 05 May 2026 09:38:35 +0000
ROA not before:           Tue 05 May 2026 09:38:35 +0000
ROA not after:            Mon 03 Aug 2026 09:38:35 +0000
asID:                     13437
IP address blocks:        142.248.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:3b:fb:01:3d:f3:6f:4f:0d:98:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
        Validity
            Not Before: May  5 09:38:35 2026 GMT
            Not After : Aug  3 09:38:35 2026 GMT
        Subject: CN=3864391b-3ff0-4910-924d-38d79aaf0210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:03:db:07:3d:c2:2f:48:7d:2d:cc:ab:fb:
                    6c:6a:18:d4:92:6b:75:fc:65:ab:f3:fe:a6:3e:3c:
                    bc:f9:35:7a:f6:be:a6:c3:52:37:e6:88:b9:19:45:
                    3a:36:a4:52:f4:46:b5:0c:f9:03:cb:0c:b7:25:0d:
                    d4:71:0a:ce:49:2f:7f:ce:ca:3f:ab:51:74:1e:e6:
                    fd:8e:40:d6:99:ea:eb:78:93:a8:4a:69:91:5e:19:
                    aa:be:6f:d0:52:08:33:5a:f9:f6:51:0e:56:ac:d9:
                    e9:41:31:72:3e:17:34:e2:33:31:d6:0c:d0:c8:79:
                    ce:cb:c4:bc:ca:ac:48:5a:ae:85:0a:d0:da:80:8f:
                    e2:ca:a7:32:e5:20:e9:bc:4e:4a:d6:54:52:db:a9:
                    70:16:69:2d:1d:2b:8e:2d:d8:8b:1b:5b:ab:b1:46:
                    38:a5:1f:b1:9f:5f:a4:1a:db:54:e5:1e:dd:57:8e:
                    da:bc:06:6f:9f:ad:78:ae:8e:f0:a0:36:21:31:44:
                    ff:bd:b5:09:f7:f4:30:28:36:74:47:d6:fb:26:a6:
                    62:ec:e6:d0:31:95:dc:38:f9:81:98:93:fc:d7:34:
                    de:e6:87:f0:7f:85:b7:73:57:bd:7b:65:0f:97:0e:
                    6e:90:d8:a5:f5:13:63:f8:45:29:21:42:35:90:44:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:E7:14:E7:7C:A9:6D:BE:AE:A9:74:A4:05:8B:A0:74:B7:B9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/0238aa93-fe9d-3d8e-a81e-7612e1121f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl

            X509v3 Authority Key Identifier:
                keyid:27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:3d:3d:8d:5b:7a:ba:61:d8:7c:8d:8a:ad:6f:54:d9:58:
         ff:d5:2b:f0:9a:9c:85:ff:ef:8e:b4:94:de:bf:6e:53:a4:f1:
         48:de:ef:68:ed:be:5c:3d:70:31:18:c6:11:1f:f5:72:91:fe:
         b6:61:8b:b6:a3:0a:a4:f7:43:82:98:97:ba:23:bb:6e:87:6d:
         a1:48:12:eb:73:75:a4:0b:ec:84:2d:cc:8e:ef:73:7c:eb:90:
         ba:7c:29:ad:ad:6c:3e:d9:58:f4:af:f0:7f:0e:08:37:3d:86:
         d4:59:21:a4:ab:b3:df:e7:a4:0d:61:56:23:f1:e0:f7:b6:b7:
         3a:9f:5f:c6:c7:42:36:eb:04:ed:80:83:06:71:5c:81:bb:24:
         8d:08:d2:2d:8f:82:cf:36:2d:2b:92:c6:42:ae:98:08:dc:c5:
         3a:b4:36:e7:36:03:f1:30:c9:39:4d:98:e1:af:92:6f:a6:e5:
         f2:6b:5d:d0:59:23:72:44:63:1c:f0:10:67:b5:db:9b:ca:88:
         04:c4:52:91:32:ba:2e:f0:3a:f9:64:da:ba:43:3d:5a:fc:85:
         14:84:3c:52:09:ee:80:0c:12:06:dc:ef:20:44:c6:83:3b:ea:
         0f:59:96:f4:fa:53:e4:3b:59:1d:e8:74:6f:73:cd:c9:07:69:
         54:c4:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:16 2026 by rpki-client