Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/6ef86aea-bf34-345a-9e7e-723112aaae93.roa
File:                     6ef86aea-bf34-345a-9e7e-723112aaae93.roa (raw, json)
Hash identifier:          hNc0Pe5+MSPtot5WhdGbMa6RUdyrKxSqQTtVbihQSGg=
Subject key identifier:   5F:76:07:77:D2:28:7B:53:D0:4A:93:99:4A:3D:63:07:DB:FD:B4:93
Certificate issuer:       /CN=4fb807a6-a767-48e7-9269-338a356ed476
Certificate serial:       010D0C9F4328584F268D037F3B40B1DBD7C33C40
Authority key identifier: 7C:7F:51:F9:75:E3:C9:4E:1B:4B:FF:CD:76:7D:3E:DA:7C:75:82:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/6ef86aea-bf34-345a-9e7e-723112aaae93.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     40001
IP address blocks:        142.248.100.0/22 maxlen: 22
                          168.245.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/4fb807a6-a767-48e7-9269-338a356ed476.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/4fb807a6-a767-48e7-9269-338a356ed476.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:03:7f:3b:40:b1:db:d7:c3:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb807a6-a767-48e7-9269-338a356ed476
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=944cf194-b901-45b4-a0fe-e9c859f008d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1b:91:58:ec:70:79:69:88:7c:b3:64:68:7e:
                    fd:bd:1e:8e:50:4b:b9:d9:3e:75:aa:f1:de:c1:cc:
                    f3:4e:a8:81:bb:b0:32:da:71:01:ff:b5:cc:0e:71:
                    e7:d4:45:36:cc:e4:7f:b9:46:3b:4d:1b:c7:32:5a:
                    3c:1c:8f:33:1c:b2:df:7d:f0:bf:1e:35:0f:93:4c:
                    f9:72:28:2d:59:d7:70:fa:c9:62:1c:2e:8a:06:11:
                    91:8b:8c:c8:ac:0d:86:c7:a0:13:a2:f6:36:cf:10:
                    fc:81:03:98:1c:84:26:3b:84:42:26:d9:93:5f:5a:
                    a2:a2:f7:40:54:cf:79:f1:6d:f1:0e:5d:a2:aa:63:
                    f6:d1:25:84:13:72:14:35:2b:e5:de:15:c9:d9:a6:
                    37:6e:cf:05:81:33:41:bb:f0:c7:0c:9c:b6:b3:49:
                    5d:75:0e:b8:57:2d:67:c3:f9:ca:a5:88:5b:97:77:
                    ff:8f:c4:4b:6a:41:9c:5f:a7:bd:cb:f6:e7:a5:a2:
                    3e:5a:aa:3d:7a:a4:0c:bc:13:e4:c7:6f:28:0d:bf:
                    a5:98:c9:a6:b2:19:a3:e3:23:5d:21:54:c0:45:0b:
                    21:07:80:b5:0f:e7:90:b2:79:b1:b8:27:38:90:6d:
                    5b:86:30:38:f3:37:7e:6c:2c:ef:9f:15:db:01:8b:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:76:07:77:D2:28:7B:53:D0:4A:93:99:4A:3D:63:07:DB:FD:B4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/6ef86aea-bf34-345a-9e7e-723112aaae93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476/4fb807a6-a767-48e7-9269-338a356ed476.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7F:51:F9:75:E3:C9:4E:1B:4B:FF:CD:76:7D:3E:DA:7C:75:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4fb807a6-a767-48e7-9269-338a356ed476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.100.0/22
                  168.245.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:d6:8e:78:1c:53:23:e1:8d:a0:8c:60:a4:b0:57:03:3c:
         be:bd:cf:c1:5a:d4:12:a3:e1:8e:f4:b0:ab:29:56:14:f4:b7:
         fb:e4:75:f3:ec:c7:eb:5d:29:1a:33:21:96:d0:b7:42:96:86:
         33:c7:39:3e:43:ad:86:8c:ee:1b:08:2b:b9:cb:d6:d5:3b:8c:
         bd:d6:db:79:a6:f2:88:19:f8:5c:a0:1f:8f:f0:03:18:64:a1:
         e4:8e:7f:23:c8:c4:b9:8a:f7:aa:f4:df:06:bb:27:a0:f1:14:
         8a:8e:81:4b:83:b9:70:19:de:7e:0c:11:ed:16:ac:a2:81:f5:
         84:e1:49:5a:64:eb:2e:de:46:64:5b:6f:de:34:75:3c:f3:e4:
         68:de:90:d2:d4:15:7e:0d:04:ea:74:7e:d6:5a:d0:dc:7b:62:
         d3:af:27:47:db:1c:b7:17:40:59:4d:78:eb:e8:74:50:8f:fb:
         b7:8e:89:a8:e2:40:4e:7a:b5:bf:92:70:82:0a:be:17:b6:3d:
         9b:d5:5b:f7:1c:9a:46:96:57:21:85:7d:a5:0e:22:47:52:c4:
         14:fd:7f:9a:7d:b3:84:d1:68:3d:7c:78:3c:98:d4:e0:fc:be:
         27:a9:a8:b1:8f:57:4d:d9:db:d8:77:47:11:f7:d2:f5:67:13:
         a1:db:cd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:49:45 2026 by rpki-client