Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/468664e9-f5d2-3d25-8300-28b096b780ae.roa
File:                     468664e9-f5d2-3d25-8300-28b096b780ae.roa (raw, json)
Hash identifier:          l8Xt2o2TB47CQH/DoV7uD6Ne434weZgw8h7RbyjvOmg=
Subject key identifier:   05:59:B6:E9:23:A5:DB:8F:AC:AA:A8:81:76:67:96:BF:CC:53:C5:2F
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E69A4B3717AB5E603BD131A00
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/468664e9-f5d2-3d25-8300-28b096b780ae.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     63023
IP address blocks:        142.202.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b3:71:7a:b5:e6:03:bd:13:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=609b7d57-fee5-40de-881a-cec85931e373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:1e:34:51:d4:4a:11:e5:64:25:dc:71:40:
                    07:e3:a6:f9:28:3a:93:47:7a:24:17:e8:ff:bb:57:
                    5b:e1:75:e1:72:ef:c4:4e:09:ed:0f:de:6b:53:f6:
                    dd:4e:21:cf:7a:f0:bb:c1:26:cb:f4:b4:9c:fd:5e:
                    64:45:5d:6d:72:2f:37:ff:ff:d3:4b:a0:17:e5:5f:
                    bd:ff:58:f7:d0:93:8e:38:af:45:6d:f3:12:61:a8:
                    c8:a2:b3:29:e2:24:f6:a4:f0:3d:3d:e9:49:92:41:
                    f3:db:41:18:e7:66:ef:78:a2:2a:72:45:87:a2:af:
                    27:d8:f4:1f:50:7c:09:e4:bb:7f:59:b0:70:6a:19:
                    f9:8c:4c:0e:18:bf:b6:8e:b7:d7:00:84:9e:bf:47:
                    bb:0a:1d:67:20:d9:58:e7:21:52:40:18:29:5b:fa:
                    c5:a0:da:73:03:8e:56:ee:99:3d:c6:4f:39:2f:84:
                    60:90:84:82:ff:5c:71:5a:28:9d:e6:87:96:f2:7c:
                    67:a5:7c:82:6f:01:26:ae:93:36:04:38:bd:26:d5:
                    c6:d3:bd:55:4a:24:6d:69:c4:94:ed:8f:77:8d:d9:
                    f0:e1:63:eb:63:3e:d4:7b:a0:89:49:b2:37:c8:3d:
                    49:2f:69:01:cd:e2:ae:c4:31:53:7b:60:18:c9:dd:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:59:B6:E9:23:A5:DB:8F:AC:AA:A8:81:76:67:96:BF:CC:53:C5:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/468664e9-f5d2-3d25-8300-28b096b780ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ba:5e:0d:a4:0a:d0:65:15:76:dc:63:5f:0e:f1:5c:85:aa:
         1f:0f:43:71:84:33:db:2c:bd:3f:52:21:74:05:a7:b7:db:03:
         30:f7:b9:80:4e:9a:cf:b5:0e:11:6b:e6:09:ac:2b:1b:62:ec:
         23:b2:f3:c4:e6:6e:81:6f:ec:3e:b0:c9:9b:3e:5b:44:ac:f0:
         45:c5:a2:f6:fe:1f:be:4c:78:52:43:69:92:92:14:c3:14:69:
         0a:d1:ca:ef:90:d9:f7:a5:ea:2c:df:e3:06:d6:3c:b2:11:91:
         df:a0:7f:7c:41:f1:99:a1:40:b3:95:34:10:86:91:4a:e8:a2:
         c9:2b:23:7d:9c:b7:c3:72:6f:44:96:0f:2c:16:41:22:79:51:
         a6:86:df:11:d9:5a:f7:b4:f8:65:88:f7:da:b9:54:c6:4e:e2:
         42:6a:93:4e:56:bb:2e:99:6f:3e:a7:22:de:6c:8d:62:af:b8:
         f0:d3:5a:fa:41:d0:fb:74:86:50:4a:92:50:61:08:48:d8:85:
         16:a5:a2:4f:fd:58:bc:23:1c:17:37:2f:3a:2c:0a:fe:a4:10:
         8f:57:b0:55:d0:e1:97:00:c4:bf:c6:fd:b5:03:ee:18:10:23:
         92:8d:58:99:f7:3f:8d:fa:d8:0d:4d:dd:41:a7:b7:f3:3e:95:
         1a:4e:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:49 2026 by rpki-client