Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/736315cb-6046-3830-8d68-749b12109d4a.roa
File:                     736315cb-6046-3830-8d68-749b12109d4a.roa (raw, json)
Hash identifier:          SSAWqXqRkUWxde87t6GwZ9we7uZu3iGSrtkuBAjKzAM=
Subject key identifier:   51:65:04:6E:16:3E:F3:9D:D6:9A:40:BA:68:3A:1A:67:88:68:42:43
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F4328584E561A12EC0DA3ED9202EA9D80
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/736315cb-6046-3830-8d68-749b12109d4a.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     401224
IP address blocks:        142.248.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:12:ec:0d:a3:ed:92:02:ea:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=72fa2d0b-76fd-453d-b6d3-7bdc642c7ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:63:a8:dd:d0:d7:2c:64:12:e3:1b:41:8d:
                    45:6d:a0:7d:f0:18:99:53:e5:e4:7d:76:f6:48:06:
                    d1:ad:d6:d5:34:c2:ea:e9:23:a4:99:97:da:74:e8:
                    56:10:3f:0f:c1:90:d2:27:89:50:b3:7c:bb:5f:de:
                    eb:19:ad:3a:02:ad:c1:b4:aa:5f:72:6b:41:39:45:
                    45:87:57:35:e6:1c:7d:14:bd:06:5a:0c:32:63:ad:
                    08:af:33:3b:e4:1e:33:38:07:09:24:47:88:5a:95:
                    13:de:3f:01:d5:ce:f0:d2:70:f0:ef:9c:7b:2b:4e:
                    a2:65:7e:0e:ab:97:06:39:9d:9e:68:3b:3f:d7:73:
                    b9:fd:02:68:60:df:23:19:6c:fd:f8:bc:25:b7:c4:
                    b4:5f:ee:2f:c8:1b:e9:9c:f5:09:51:fa:b4:02:ac:
                    31:ae:ff:ba:cb:f9:ec:01:c0:5f:c7:16:af:fc:bb:
                    68:2a:9c:78:7c:24:7e:6c:2d:c4:dd:c2:e6:c1:33:
                    40:dd:a3:d1:cd:10:92:4f:19:18:f4:28:74:e4:cf:
                    ee:d8:d5:a5:38:43:51:3a:f2:8d:24:6d:4b:46:24:
                    44:88:b0:84:50:58:d0:59:76:cc:28:a0:c1:f8:e1:
                    37:0b:55:28:13:42:fa:04:b1:a5:da:93:0a:7a:4b:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:65:04:6E:16:3E:F3:9D:D6:9A:40:BA:68:3A:1A:67:88:68:42:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/736315cb-6046-3830-8d68-749b12109d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:f2:20:b7:0a:4a:53:e4:52:20:59:a2:5d:63:54:eb:e1:
         b8:31:a2:7d:2d:e5:79:1b:0b:91:41:a2:c9:80:6f:74:91:15:
         95:a9:90:90:d6:4d:64:53:27:fa:25:28:d1:53:f8:a1:ae:d3:
         da:c4:e4:3e:31:ec:23:c3:e9:e2:c3:db:9b:3e:c1:01:b2:a1:
         e4:7b:76:e6:eb:66:4e:eb:4f:32:ff:08:66:a9:1a:fb:fc:db:
         2d:65:e0:0b:bd:ef:f6:a8:6f:cb:2d:f7:c7:e6:90:e6:5a:67:
         a0:2a:5e:41:ba:2b:9e:52:b4:1c:5c:af:a9:c2:9c:d4:fa:77:
         be:3b:ad:4a:ef:f9:87:97:69:bc:a5:4d:79:66:cf:33:1a:e0:
         9d:eb:3a:76:6b:3a:10:b4:3f:f4:6a:ae:cd:7b:71:63:b1:9a:
         21:4f:26:81:1a:07:6b:bd:8a:ec:bd:0e:af:fd:48:e4:e3:18:
         d4:ac:be:77:df:eb:56:27:bf:75:a1:38:5b:44:43:13:62:f7:
         b2:95:45:e0:bf:d5:c0:83:eb:86:78:7d:5e:fe:75:9e:ec:e1:
         b6:c4:28:a4:0d:09:f5:63:3e:fe:39:6c:23:93:5e:c7:56:6d:
         5e:dd:9f:16:46:a0:30:2a:84:cb:09:fb:a7:53:12:51:e0:d0:
         eb:33:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:03 2026 by rpki-client