Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa
File:                     813bce22-9dd7-3250-8981-49e0d8bbfd64.roa (raw, json)
Hash identifier:          ONS4W2K25+H9M0zf2s3B6fhL9rsdYGzbl+tfn2kddtQ=
Subject key identifier:   DA:6B:FC:AC:91:BF:EB:4B:00:72:FE:52:15:DE:D2:CA:50:89:99:C3
Certificate issuer:       /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
Certificate serial:       010D0C9F4328584D465F9C54653D68C2CC294A70
Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     203963
IP address blocks:        141.195.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:9c:54:65:3d:68:c2:cc:29:4a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=2cca1c94-d24e-4c19-9258-33330fe79b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:4a:58:c7:8e:a7:74:de:10:de:ea:41:24:
                    79:1c:41:66:62:50:1b:06:e8:ca:46:45:45:62:0f:
                    48:b2:8d:61:f8:a9:d6:82:b9:c1:f4:db:01:bd:29:
                    aa:b8:f3:40:ff:9c:c0:2b:4a:d2:7e:7f:f1:42:fe:
                    ed:95:57:69:40:3f:ef:26:ad:e7:e2:8b:76:24:c4:
                    b6:2c:44:53:ed:71:22:d9:7c:27:9a:c8:1c:3d:3b:
                    13:4a:3b:b8:69:e8:48:8a:b4:3e:10:b8:15:09:ab:
                    e9:16:24:98:82:48:a6:25:76:7d:b4:a4:73:65:90:
                    7a:4f:f8:d0:cc:eb:91:6d:d4:a0:3f:12:2e:5e:49:
                    b2:44:92:ad:fb:1e:2d:a9:4b:20:0c:93:bc:33:f4:
                    cc:37:ff:7b:ea:62:b7:d5:d3:6d:a9:c5:62:c2:b7:
                    d3:8c:e7:0a:5e:e8:95:e6:ea:53:c5:07:2e:94:82:
                    8f:ef:e1:7e:da:2d:62:ce:d0:df:05:88:40:d5:20:
                    5b:4e:10:65:ca:23:24:6c:b3:ef:a0:2d:64:fc:61:
                    ad:4d:5c:c0:77:93:e3:56:a4:48:bb:62:e8:69:eb:
                    9c:cc:4a:a3:db:9f:8b:4f:e2:7a:62:22:fa:fb:ff:
                    b2:bc:e3:ce:68:fb:eb:96:53:47:8d:c1:2d:84:0f:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6B:FC:AC:91:BF:EB:4B:00:72:FE:52:15:DE:D2:CA:50:89:99:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl

            X509v3 Authority Key Identifier:
                keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:12:f2:7a:5c:d1:60:08:5c:f1:e7:64:a0:9d:5d:42:85:d8:
         6d:b6:ba:58:0a:40:11:06:32:b5:21:b9:9e:a1:ff:d1:31:53:
         b2:4c:85:2f:4c:81:63:96:91:8f:2e:59:20:da:3d:92:2c:65:
         af:bb:15:ee:ca:22:3f:64:a1:46:f2:9d:22:03:b2:76:dd:8f:
         eb:e2:30:c2:d5:e3:0e:10:47:a5:e2:e5:7f:90:f9:cd:22:37:
         57:37:31:93:1b:7e:e6:ba:19:ff:79:f0:d5:1b:1e:ef:9a:5e:
         a6:cc:c8:67:ca:7a:1b:74:79:cf:d6:90:de:83:2b:6d:0c:ba:
         5c:d2:ec:e7:30:1c:1e:95:76:3a:69:60:49:0c:dc:4c:b9:1f:
         51:e6:cf:84:33:ab:0f:c9:24:9e:ec:c2:42:a9:3b:bb:e8:c4:
         35:3f:6a:4a:cf:21:e1:34:18:4d:c0:fe:cb:5c:29:9b:bc:28:
         83:2d:fe:d8:b2:42:44:2f:a0:90:c5:3f:b7:71:f2:27:53:da:
         c8:93:5b:e7:4c:0e:03:02:78:8d:04:f8:90:37:4c:2f:f8:95:
         cd:55:79:c4:f6:cf:7e:c0:6f:f4:ba:43:6f:f5:b8:91:74:47:
         12:4f:22:c6:dc:96:c1:8b:c9:1d:81:e6:70:47:97:c1:66:80:
         af:b2:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:57 2026 by rpki-client