Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
File:                     1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa (raw, json)
Hash identifier:          cOLtbejHKz4JdPkhO0e7/4QqWraQQ7bu8Tsc1ICghik=
Subject key identifier:   78:32:E4:DB:C0:8D:E2:97:76:81:54:6D:36:4B:5A:1D:FB:3A:93:EE
Certificate issuer:       /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
Certificate serial:       010D0C9F4328584D143D2CECF82E5378178ADB00
Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     8075
IP address blocks:        142.147.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:2c:ec:f8:2e:53:78:17:8a:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=9a00fd8d-8c28-4296-9d89-11e5eb417cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:f7:a9:ec:a2:cf:8e:6e:3d:14:39:bf:5f:
                    3d:59:5f:1f:08:75:72:84:6e:75:01:fa:67:30:c5:
                    ab:65:e9:09:a3:7f:a6:fc:6c:91:32:96:4e:6f:5e:
                    f1:49:9c:22:f4:40:68:71:bd:b1:c0:e6:44:1a:48:
                    8b:fa:cb:24:51:f1:96:f9:18:47:19:14:73:70:91:
                    46:bb:b4:f6:99:a6:63:37:86:9a:f2:b2:f6:94:bb:
                    30:29:03:3d:6f:4a:a2:76:12:87:38:8b:ed:c7:d8:
                    62:7e:57:d2:58:1d:c9:ae:fd:a5:c5:3d:64:e5:ab:
                    3c:be:d0:9a:88:85:ed:8a:f6:a0:f9:fc:9b:c4:e3:
                    dd:e3:2d:b0:80:57:aa:5e:d1:94:43:02:80:0a:de:
                    46:57:25:f3:85:39:b5:52:df:79:93:ad:e0:a1:b3:
                    f3:5b:f6:68:e2:4d:a2:e7:c5:22:32:1e:bc:22:af:
                    0d:f0:10:39:97:54:d4:08:f2:d3:ca:f7:2f:03:c4:
                    d3:23:3f:4b:d0:d0:f0:4b:00:19:c2:d6:6d:bd:76:
                    84:3c:a1:b7:be:36:e6:97:00:68:4a:c4:df:81:e4:
                    c4:88:c5:06:7e:1f:43:1c:6a:f3:b0:6e:b8:bb:27:
                    00:2c:3a:3c:d9:4d:c8:c9:5b:4b:58:c1:8a:bd:45:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:32:E4:DB:C0:8D:E2:97:76:81:54:6D:36:4B:5A:1D:FB:3A:93:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl

            X509v3 Authority Key Identifier:
                keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:dc:fc:62:64:5c:e9:93:39:97:72:ac:97:df:c5:4d:8b:0d:
         eb:20:29:ec:a9:23:3b:55:0f:27:ac:35:28:76:b0:bc:59:5e:
         a5:a7:05:93:1e:7f:14:7a:af:25:c9:65:04:d2:d6:cc:0e:bb:
         44:85:d6:6f:ef:db:c7:dd:1b:7a:33:e9:22:38:90:a4:03:96:
         4d:06:74:08:f6:ad:28:2a:37:0d:06:09:8a:55:3d:37:3d:04:
         c3:94:c0:9d:5d:fa:08:0b:62:e1:72:27:23:ee:a0:6f:f0:6d:
         e8:58:cd:10:30:f5:c8:d4:dc:01:f6:c1:a6:7a:8a:57:ab:8a:
         01:a3:34:4d:de:76:57:7b:6e:11:49:89:9c:68:37:07:17:68:
         67:fa:33:85:84:05:94:ea:69:da:8b:42:4a:14:02:98:09:14:
         0c:f0:7b:43:5a:50:80:ec:a9:cd:41:fc:69:17:82:18:28:ef:
         d0:16:41:99:6b:af:d7:cc:d6:9c:34:61:4f:06:a6:6e:e0:8c:
         47:65:e4:8e:f9:8c:2e:fe:85:1b:80:52:97:fa:0b:29:6f:51:
         10:ee:9e:68:a9:27:83:b4:a3:9c:3f:ae:ed:54:9e:76:03:28:
         f3:49:e0:d3:e4:ae:2b:6b:31:3d:bd:bf:8c:15:29:2b:f2:99:
         f5:60:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:38 2026 by rpki-client