Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/6ef86aea-bf34-345a-9e7e-723112aaae93.roa
File:                     6ef86aea-bf34-345a-9e7e-723112aaae93.roa (raw, json)
Hash identifier:          iy6Yd1S6pPwrP77h+izDlRo5eHQkQIN9jmco39Wji3M=
Subject key identifier:   69:6E:9C:27:D4:A2:F2:9C:CE:9D:5F:57:3D:21:85:69:CF:6F:A3:77
Certificate issuer:       /CN=4fb807a6-a767-48e7-9269-338a356ed476
Certificate serial:       010D0C9F4328584DA3E56939327D9C5165B82B00
Authority key identifier: 7C:7F:51:F9:75:E3:C9:4E:1B:4B:FF:CD:76:7D:3E:DA:7C:75:82:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/6ef86aea-bf34-345a-9e7e-723112aaae93.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     40001
IP address blocks:        142.248.100.0/22 maxlen: 22
                          168.245.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/4fb807a6-a767-48e7-9269-338a356ed476.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/4fb807a6-a767-48e7-9269-338a356ed476.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:69:39:32:7d:9c:51:65:b8:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb807a6-a767-48e7-9269-338a356ed476
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=4f1a7426-9117-40a6-a3d5-2152629ace5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:51:8a:4b:29:60:eb:df:1a:66:17:a1:a5:
                    77:71:26:c4:89:07:69:b7:1d:43:c8:8f:3a:78:f4:
                    94:94:e4:23:46:51:85:f3:6a:e7:1b:34:e4:66:70:
                    45:b4:ef:6f:4b:b4:12:d4:94:f4:9d:69:d5:7a:45:
                    1c:ca:82:24:f7:b7:99:0b:af:04:05:a4:4a:9a:11:
                    9f:09:c1:c6:5f:f6:78:5a:54:96:df:91:db:fd:25:
                    be:e9:6d:ef:7b:8b:a8:d8:71:91:9a:c3:62:c1:3f:
                    89:a1:a1:0d:17:7d:95:20:2d:07:f1:15:af:7a:10:
                    54:76:b9:31:94:df:ca:52:3f:b1:6b:81:c3:55:d6:
                    25:e0:e0:4c:72:9e:7f:50:ac:c3:1e:b3:19:d1:db:
                    8c:69:8a:0c:65:aa:d7:bc:dd:81:6b:96:82:26:dd:
                    8e:1e:a7:74:e5:66:20:92:28:03:33:ac:fd:82:65:
                    9b:62:4d:c8:c2:ec:86:af:d8:4c:70:84:78:48:c6:
                    68:a6:aa:57:6b:27:25:5a:2d:1d:37:f2:46:34:70:
                    75:f4:09:74:62:8b:bf:48:fc:4a:3b:53:07:ab:a4:
                    eb:8a:82:e0:42:e5:42:ab:fe:6b:81:04:94:40:77:
                    2a:2f:04:ab:d7:1b:41:d4:02:1c:bc:43:d9:c5:ea:
                    80:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6E:9C:27:D4:A2:F2:9C:CE:9D:5F:57:3D:21:85:69:CF:6F:A3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/6ef86aea-bf34-345a-9e7e-723112aaae93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/4fb807a6-a767-48e7-9269-338a356ed476.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7F:51:F9:75:E3:C9:4E:1B:4B:FF:CD:76:7D:3E:DA:7C:75:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.100.0/22
                  168.245.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:13:6f:61:72:95:ad:29:11:5b:39:21:43:f0:63:ba:2d:23:
         58:6f:43:79:ec:1a:8d:2f:63:76:f7:ea:59:13:42:58:6c:74:
         cf:aa:90:21:08:d7:ac:d4:83:1c:0b:d9:c6:08:f9:12:ee:dd:
         b3:f0:8f:e7:dd:e1:47:35:1f:c8:eb:f5:fd:02:fe:c4:0a:da:
         27:7e:22:6a:5c:cd:9a:ca:82:16:0e:cf:b9:c0:34:ca:e1:87:
         34:76:4d:6f:a8:33:2c:64:ed:0f:86:22:5c:61:4a:f3:e7:21:
         00:5e:ea:66:7d:39:d8:dd:18:99:82:a1:b1:95:32:24:a8:07:
         ef:ab:da:79:db:22:df:fa:02:40:96:93:de:2c:dc:71:6c:8a:
         80:dc:2f:d4:fe:88:9d:cb:4c:a5:47:2a:86:50:c0:7c:cf:f0:
         92:74:53:01:92:cb:33:36:d5:2c:2b:e2:9c:3a:d7:87:79:62:
         bb:17:e3:40:b9:3c:18:b7:6d:ec:2a:c9:77:4e:bc:30:68:7a:
         b3:d2:87:f8:03:e0:e0:8c:92:79:21:e8:0f:40:45:79:f6:4f:
         f3:bd:53:e9:9a:6b:52:30:ed:5b:af:3f:7f:7e:72:c6:84:2a:
         7d:8a:70:0c:16:b7:28:00:66:2c:de:7c:c0:2e:a4:c5:0b:91:
         21:13:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:42 2026 by rpki-client