Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/28e54bb3-0475-3b87-9b74-f422b92c01da.roa
File:                     28e54bb3-0475-3b87-9b74-f422b92c01da.roa (raw, json)
Hash identifier:          ptjNVbyVWlUsrx4yMS/5K+fvhJ6le/Rj6wj/bqG5cgc=
Subject key identifier:   DD:3C:B1:F5:26:94:48:E5:75:F9:ED:BC:04:3F:68:EA:18:C5:C0:BA
Certificate issuer:       /CN=70a36240-104b-454c-b230-bf415e356e88
Certificate serial:       010D0C9F4328584D3D753518FC85E968B22058D0
Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/28e54bb3-0475-3b87-9b74-f422b92c01da.roa
Signing time:             Sat 21 Mar 2026 08:22:03 +0000
ROA not before:           Sat 21 Mar 2026 08:22:03 +0000
ROA not after:            Fri 19 Jun 2026 08:22:03 +0000
asID:                     20473
IP address blocks:        142.249.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:75:35:18:fc:85:e9:68:b2:20:58:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a36240-104b-454c-b230-bf415e356e88
        Validity
            Not Before: Mar 21 08:22:03 2026 GMT
            Not After : Jun 19 08:22:03 2026 GMT
        Subject: CN=a29427d3-c1ea-4823-9db5-a10a2520cd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:44:86:23:c8:bf:f3:3f:19:d3:64:c9:8e:
                    e3:3a:84:55:66:54:31:06:62:0c:ed:2e:9d:9f:0c:
                    6b:b5:1d:d3:e9:55:b1:23:0c:88:33:db:de:17:6e:
                    98:ec:ef:1f:49:ea:de:2e:f2:e5:b3:5c:7e:65:40:
                    f4:72:6a:15:3a:89:e5:ca:e4:b7:f8:11:72:4e:c1:
                    86:06:dc:a8:2d:7a:f8:df:13:0a:09:81:78:cc:27:
                    cd:23:bc:6a:8e:40:aa:c9:88:45:6b:4b:25:f0:ea:
                    83:7b:e8:ec:1b:28:63:78:69:8a:59:ce:82:96:4e:
                    c0:fb:d4:9b:d8:56:68:f7:db:b1:b9:b5:a9:55:ea:
                    2d:3a:6d:97:6f:d2:05:a0:79:74:89:e3:2f:66:46:
                    8b:31:0a:76:40:50:54:2d:b0:0e:b2:f6:c9:a8:4b:
                    3f:8b:3b:79:51:73:ad:e2:12:7e:71:4f:8b:6d:0f:
                    c8:4e:c0:3b:89:3e:eb:4d:b4:f0:61:ed:3a:03:bd:
                    db:8f:13:3a:67:28:3b:67:a8:f3:4d:9b:ce:42:0b:
                    08:ce:c5:ea:22:b6:45:08:2b:c9:80:24:d8:09:2e:
                    e0:ef:72:95:04:6d:32:31:97:f0:76:97:d0:b9:2e:
                    b0:5d:b3:53:11:19:76:d9:35:43:2a:89:08:a9:a2:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3C:B1:F5:26:94:48:E5:75:F9:ED:BC:04:3F:68:EA:18:C5:C0:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/28e54bb3-0475-3b87-9b74-f422b92c01da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl

            X509v3 Authority Key Identifier:
                keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d8:d6:1b:08:08:71:d4:f5:02:b3:f7:1c:79:20:f1:cc:36:
         93:a9:b2:a1:65:06:f2:b3:80:fc:0a:15:ab:eb:a5:92:93:0e:
         0e:10:ab:84:04:1a:87:00:13:27:2b:be:b2:e6:69:7e:86:6e:
         a3:dd:34:b8:67:64:b6:3b:a7:f7:56:fa:75:eb:10:c5:30:ef:
         30:f5:af:e9:8e:b8:ef:25:c1:9f:86:39:12:79:7d:8a:c1:18:
         05:41:cc:ea:4c:71:7b:ad:05:65:f6:05:b0:91:5b:06:10:d5:
         17:30:7f:46:43:c6:2d:5a:7f:9c:32:73:66:70:a7:61:30:55:
         c4:6b:f8:a2:fc:67:12:5b:0d:43:22:38:a1:16:d0:a0:f8:20:
         38:f5:53:29:3b:96:81:0e:84:70:8c:5a:79:78:32:36:d4:90:
         55:be:56:7d:ef:4e:45:3d:95:fa:b3:32:75:66:77:9c:76:d9:
         c6:f7:f4:55:51:02:36:62:73:02:02:d4:ca:52:13:59:99:62:
         09:64:4e:70:38:3c:49:62:1f:28:3b:4b:61:02:7b:0b:a9:f9:
         33:a1:3b:6b:27:62:29:86:40:34:88:6a:34:59:b6:a1:3a:7a:
         74:8d:72:0b:11:bc:64:6f:52:ce:0a:a3:27:af:ca:09:99:8f:
         4a:5a:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:12:25 2026 by rpki-client