Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb8a375f-c98e-3206-9287-87f52cf0f1ad.roa
File:                     bb8a375f-c98e-3206-9287-87f52cf0f1ad.roa (raw, json)
Hash identifier:          1fTAv5MhRjXVYU5dgmSx0nMHPAz4zZFZHqi+Hz4my3s=
Subject key identifier:   22:5A:43:D2:7F:24:6A:42:CF:61:E1:22:C8:00:D0:B2:32:FA:72:8D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D422F8F98B16FFB70453F5880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb8a375f-c98e-3206-9287-87f52cf0f1ad.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     202045
IP address blocks:        142.250.83.144/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8f:98:b1:6f:fb:70:45:3f:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=99d3ca49-cdd0-4847-8138-404735907a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:d8:80:d0:47:5c:b6:17:ce:06:e9:f6:36:
                    6c:c9:1d:d9:d9:34:a5:f8:ae:39:08:de:83:1f:08:
                    65:20:b7:95:8c:b0:e3:f6:7f:4e:25:46:d2:60:d1:
                    63:4f:b4:34:d9:33:44:0d:f6:cd:55:01:09:2c:71:
                    f9:07:46:61:42:ba:bd:8f:08:52:45:2f:ad:1f:66:
                    96:33:1e:a0:80:8b:9f:09:88:6a:0d:80:95:be:c6:
                    c7:57:0d:65:74:ab:95:9c:e9:cb:3a:85:d6:c8:1b:
                    c4:a1:a3:a4:9b:2f:e7:f4:86:59:3d:05:0a:29:6e:
                    9e:1c:19:e0:8e:3d:70:ae:50:58:13:d4:f7:0a:6c:
                    9e:20:b0:91:29:14:be:fb:85:36:56:c0:e5:27:32:
                    e9:53:4f:33:b3:c9:e2:f9:d2:0a:60:37:f2:21:22:
                    93:74:94:e6:b1:15:65:97:ff:65:76:2c:3e:28:7b:
                    94:7a:cd:23:1b:da:16:12:36:c5:4f:80:51:7b:ca:
                    36:f0:dc:b5:d3:a2:13:6b:97:5e:46:ec:30:98:de:
                    5c:f0:23:4f:8b:ee:6c:f0:92:e8:70:dd:2b:7f:8e:
                    21:d0:16:c5:4a:a2:6b:23:7b:91:88:df:b7:e4:6e:
                    39:97:15:55:d4:72:6c:f3:4a:4a:b4:de:f1:f4:b8:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:43:D2:7F:24:6A:42:CF:61:E1:22:C8:00:D0:B2:32:FA:72:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb8a375f-c98e-3206-9287-87f52cf0f1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.83.144/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:51:0e:ab:55:47:8a:64:72:ad:fc:71:e8:53:1f:2f:ce:2f:
         ee:c1:5d:71:32:5d:51:b0:13:86:59:ef:11:4b:15:32:e9:1a:
         8a:3c:3a:48:c8:a1:04:b0:8b:b1:20:50:b6:27:7f:b4:00:46:
         89:85:aa:d1:fb:d8:09:15:9d:29:d0:ff:0e:fd:4f:a5:49:f7:
         44:6d:f3:6d:15:e8:81:8b:de:63:f9:62:be:17:76:8b:24:82:
         2d:89:e2:c7:20:b7:1b:db:aa:cf:51:9d:ea:0a:ca:a1:28:35:
         5c:e9:9b:9b:a2:4e:d2:d0:41:78:b7:1d:a3:c1:88:88:d7:c7:
         33:2d:14:b7:11:2c:8b:bc:73:69:4e:91:bf:5c:89:c2:9a:8d:
         26:46:80:0b:64:93:ae:84:fb:05:fb:b8:57:c6:12:6e:dd:ec:
         55:ce:e8:ed:5a:90:38:b4:9a:b3:3f:c8:c7:65:b7:cd:5a:f8:
         22:8b:87:e7:0b:64:20:e9:4e:35:eb:e8:7c:4f:ab:eb:e4:04:
         9e:83:7c:ae:29:37:e7:c3:43:3c:48:d1:83:a3:bf:d2:d8:be:
         b6:24:0e:2a:b1:62:30:dc:ab:4f:41:49:78:14:3a:9a:ac:ef:
         77:46:d5:cd:5a:39:f5:ca:14:7d:17:17:42:d8:44:01:27:28:
         ec:d9:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:42 2026 by rpki-client