Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/bd7c9bb1-3489-3c4a-908f-7be2d3b64c9f.roa
File:                     bd7c9bb1-3489-3c4a-908f-7be2d3b64c9f.roa (raw, json)
Hash identifier:          9P95Bb+cdzLZ/7TfpFgF47wHCTXpyJXwlVDQmWFhKp8=
Subject key identifier:   9F:91:EC:03:33:4D:D5:C8:6E:DF:00:07:5E:91:A2:DE:6F:FE:F4:A7
Certificate issuer:       /CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5
Certificate serial:       010D0C9F4328584DA11AEDBDE75994F18A175440
Authority key identifier: 5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/bd7c9bb1-3489-3c4a-908f-7be2d3b64c9f.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     2675
IP address blocks:        142.236.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:ed:bd:e7:59:94:f1:8a:17:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=48f4a424-b910-4e8c-b329-5a6708894ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:54:5e:63:10:ec:6a:5d:a4:6f:0a:12:c3:85:
                    19:a5:1f:7e:2f:07:0c:89:09:56:f6:60:ec:ae:aa:
                    fd:5e:07:4a:8f:ab:02:97:b9:a8:dc:df:f0:7d:50:
                    97:21:51:f3:8f:df:55:60:e7:55:ce:9d:e8:9b:1a:
                    48:f5:de:f8:f8:d8:41:70:b4:54:c1:a1:67:ed:a8:
                    bb:a7:21:4a:02:23:fa:6b:df:b3:44:b0:42:0c:28:
                    74:8a:ec:8f:cb:2f:c7:c1:5a:d8:65:16:e5:c6:ec:
                    1a:9a:a1:69:8d:01:8c:94:fd:ed:d2:e7:98:ca:8b:
                    6f:64:44:3a:fd:63:e2:d3:85:fe:b3:d6:f2:a0:bf:
                    67:d3:8b:82:75:b5:86:7a:c0:ca:d9:d6:73:4a:93:
                    10:0b:5c:df:ee:6b:65:5a:ff:13:97:0e:1f:19:81:
                    b3:6b:e6:78:10:ed:1f:65:ff:17:16:7c:b0:b4:1b:
                    0c:54:32:63:d1:46:d7:79:17:e3:01:60:ba:af:0d:
                    2e:08:62:14:3d:28:c3:ff:45:39:4b:e9:ad:84:0c:
                    46:d7:b5:fa:5d:bd:3d:b0:34:3e:03:cf:9c:17:78:
                    bc:ac:b8:7b:1e:63:b2:a1:d5:07:b6:69:ab:87:b6:
                    6c:9a:b5:d6:13:9e:5c:6a:df:92:74:13:4a:1b:dc:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:91:EC:03:33:4D:D5:C8:6E:DF:00:07:5E:91:A2:DE:6F:FE:F4:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/bd7c9bb1-3489-3c4a-908f-7be2d3b64c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.crl

            X509v3 Authority Key Identifier:
                keyid:5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.236.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:c8:4a:5e:75:84:b6:88:cd:02:89:75:1b:3b:5a:33:05:
         6b:3b:71:30:f2:fc:36:55:4d:9e:81:67:10:3b:aa:07:ec:aa:
         40:d0:ef:94:3c:a0:6d:38:51:a0:a3:cd:57:ba:ca:82:83:d8:
         2c:7e:c4:62:4c:80:78:46:fa:a1:6c:02:b5:1b:b7:71:c2:4b:
         06:dd:66:89:6c:59:29:dc:17:bb:95:6f:69:7a:c8:9c:27:b3:
         12:f5:5d:3f:4c:2e:81:e2:97:01:d6:4b:a0:85:5b:6d:f5:77:
         0b:24:85:16:7d:50:e0:07:83:f6:6c:ff:58:8e:5e:70:77:33:
         a6:68:62:5d:b0:c1:d4:4f:43:00:86:70:e3:2e:98:74:28:a3:
         57:c7:40:90:75:79:b8:91:c3:77:18:7a:f6:8a:21:98:a1:0b:
         28:d6:d6:5d:77:cb:41:55:7a:b4:19:84:fd:fe:65:d6:df:a6:
         af:fa:04:68:0c:5a:19:b3:8f:bd:4b:32:e0:2a:8d:c2:60:fd:
         7f:f6:dc:0a:49:00:10:26:6d:02:e3:d7:a9:d3:f6:5f:08:e8:
         f3:93:18:a0:7b:71:d1:a4:69:8b:76:8f:e6:af:39:e3:d3:20:
         7d:66:2f:9f:78:f3:eb:89:c8:1b:ca:a1:f2:4c:4d:58:e1:e8:
         b5:7c:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:22 2026 by rpki-client