Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/b996d537-7a7c-39bc-bbb4-041c7a3ccefe.roa
File:                     b996d537-7a7c-39bc-bbb4-041c7a3ccefe.roa (raw, json)
Hash identifier:          Tm6rEvC2kx1ejxOCm/W+paMWjouC7UotZjOlpL0+sgU=
Subject key identifier:   64:7F:25:3A:DC:FC:CE:3B:0A:E5:D0:C6:B2:F6:15:A9:93:1A:B8:07
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584E640F5F8D6029E0F3437F3840
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/b996d537-7a7c-39bc-bbb4-041c7a3ccefe.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     897
IP address blocks:        142.248.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:5f:8d:60:29:e0:f3:43:7f:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=1e0f1455-5db1-4900-b23a-092e917b796d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:22:c0:87:15:cb:52:15:33:46:ad:e6:27:
                    b5:85:9d:28:65:26:44:51:3a:64:4f:da:ff:c7:a6:
                    36:e7:40:9a:a4:68:9c:1e:37:6c:c5:ca:9b:a7:ca:
                    f7:20:3b:ab:a7:80:40:54:50:04:04:13:8c:39:ed:
                    bb:58:90:c9:2f:8b:b2:07:23:77:d6:bc:e9:60:6e:
                    f7:be:93:af:55:dc:c7:6d:75:8e:0d:22:30:44:6d:
                    38:ec:d6:e2:bd:91:3c:a1:52:7b:7e:43:79:67:cb:
                    f3:01:01:1c:6a:73:5c:37:ba:76:15:1e:e6:ce:a9:
                    ca:da:c1:9b:b4:99:52:8a:b4:61:4c:d7:bc:69:b7:
                    c9:d5:c6:0e:49:ae:bf:84:ee:55:3c:46:48:ec:b1:
                    fc:15:d7:9c:93:f6:f7:41:a4:09:2e:a9:8f:a6:49:
                    32:f9:67:23:f6:f2:0e:aa:3d:88:f5:da:42:bc:60:
                    0a:09:f9:ea:3d:a6:11:83:23:f7:59:9e:d2:bb:3a:
                    96:6b:f9:75:06:8a:23:a7:b1:a2:89:a6:14:12:f4:
                    b4:18:fd:fd:93:54:b0:cf:62:e4:25:80:e1:4e:c7:
                    84:2f:85:8b:f2:7b:64:a3:7e:91:c0:f6:f8:94:12:
                    0a:cb:da:af:cf:17:e4:26:a5:e5:f9:9b:c3:6f:d0:
                    21:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7F:25:3A:DC:FC:CE:3B:0A:E5:D0:C6:B2:F6:15:A9:93:1A:B8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/b996d537-7a7c-39bc-bbb4-041c7a3ccefe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4b:9e:10:20:ff:57:b2:64:c3:f0:00:23:82:ab:9b:f4:55:
         26:09:9c:a4:71:1e:6e:2d:a0:79:fc:24:82:d2:37:46:d6:e2:
         47:8a:ef:4c:88:c2:c3:02:61:e5:bc:9e:b4:14:ec:07:c1:d0:
         51:a7:3e:fb:6e:fa:88:a8:67:18:33:73:f8:26:f3:02:18:0b:
         75:fa:aa:4b:65:bd:ce:8a:ae:99:11:b1:07:44:01:44:ef:11:
         e5:ad:f6:0c:05:25:d9:52:e7:8d:88:1a:35:72:a7:02:9c:4d:
         86:ee:f8:ab:1e:92:30:b4:09:60:a7:b9:66:bb:3f:cd:fb:e1:
         5c:88:2a:63:2b:4a:6c:67:18:77:1a:25:bb:f6:1e:0f:ef:23:
         c8:3d:1a:fc:51:a0:7b:59:3d:33:a0:9e:61:fe:9c:ea:89:1a:
         ed:26:3b:f4:9f:53:91:b7:28:0a:e1:a0:45:ad:4c:41:d8:1f:
         ce:bf:34:20:10:41:01:f7:b9:7d:50:f6:d9:a4:f5:62:b6:94:
         e5:36:e8:21:65:a5:22:f8:f7:48:60:f7:8b:9d:8c:a0:17:ad:
         8c:c2:fe:d9:1a:02:a6:a2:c2:c4:38:e6:bc:51:62:c7:ff:8f:
         40:78:69:85:7b:8c:e8:34:34:fd:f8:c2:83:2e:89:ce:6c:a0:
         34:ee:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:40 2026 by rpki-client