Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa
File:                     2afed25b-a61d-3cc4-9fae-308ffa589871.roa (raw, json)
Hash identifier:          X7HoN17CzjJOwybk3JFZiVl6QglMNTAD3rboovcVtvI=
Subject key identifier:   DC:D4:89:16:0C:7B:20:33:67:5B:15:49:23:4C:96:F7:21:9A:51:C7
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A6F9DBBD8616DE9C77880
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        142.79.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6f:9d:bb:d8:61:6d:e9:c7:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=0a053d80-de98-4ee8-aedb-25d3a84f5747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:94:eb:88:7d:20:5e:6e:0e:ba:26:69:64:
                    03:c7:e1:32:bf:44:11:ed:7e:2b:9d:e7:b0:4a:c9:
                    46:c5:de:d3:bc:af:81:b9:9b:a8:6d:48:cd:e4:1d:
                    2e:54:d3:52:04:9b:74:b3:07:dc:f2:31:b9:66:2b:
                    c6:c6:5e:47:6d:4b:cb:5a:94:38:9c:d8:68:bd:ae:
                    f5:23:c5:9b:d3:dc:de:d0:fe:03:f9:1c:9d:f3:8f:
                    ca:62:17:43:9e:33:16:7f:64:1d:ec:2b:7e:49:10:
                    40:69:3d:69:91:f5:80:89:4e:e4:33:32:f7:e5:de:
                    21:4f:1d:08:a0:9a:0d:56:bb:68:1d:5b:60:ef:18:
                    af:12:33:f3:e3:dd:e2:6a:b3:ac:7d:e4:2e:fc:08:
                    72:49:f1:4f:1a:aa:a3:3a:a1:54:95:c7:fd:18:29:
                    12:4c:57:2b:eb:34:f9:86:02:36:5a:0e:30:4d:9a:
                    51:8a:13:47:91:60:08:f6:ff:e0:ab:60:b1:87:f3:
                    0a:ef:42:a4:79:6d:f6:90:42:92:e6:17:25:60:a8:
                    2a:a9:59:75:05:00:0b:21:fd:77:d5:eb:f3:1d:ec:
                    26:bc:2f:92:75:3c:43:bc:e6:91:92:a8:2a:60:93:
                    a9:dd:c2:2e:a4:78:6c:f7:7a:98:83:d9:55:3b:2b:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D4:89:16:0C:7B:20:33:67:5B:15:49:23:4C:96:F7:21:9A:51:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:f9:72:d5:ac:d0:df:d3:d9:e2:d4:f7:0f:cb:13:a8:e2:
         40:d3:f3:da:29:9e:1f:62:22:f9:6e:10:c9:d9:ce:c7:06:d9:
         df:a7:b6:03:dd:f7:d9:78:74:76:26:bc:c4:7f:5b:fc:b6:05:
         06:3f:0b:bd:c9:6a:dc:c0:b5:ec:5f:e9:9b:e0:5c:4c:d6:26:
         2a:ae:92:bf:f7:44:03:9a:82:f5:77:08:fe:43:b9:a6:12:30:
         f0:81:3c:4f:93:cd:40:14:2d:9f:6a:be:70:bd:f9:8a:e7:1b:
         d1:05:1f:17:7b:f5:4a:6d:56:12:1c:43:54:b6:da:d7:5f:d5:
         56:d7:30:ad:69:6a:1d:3b:1b:96:d7:72:06:35:c7:ed:79:52:
         9d:24:12:96:ec:18:5f:24:f9:46:ec:6a:99:7b:23:ce:29:a0:
         3f:93:b0:cd:24:c8:98:01:bb:e4:a5:91:73:b4:e3:53:ed:d7:
         d7:78:01:29:a9:34:6f:06:e4:86:f7:18:ef:46:d7:a3:8f:25:
         73:96:3e:74:02:48:8e:13:f1:26:5a:82:c5:9d:cf:fb:5b:fd:
         82:1e:01:e8:29:b5:ee:58:cd:fa:14:6b:0e:95:66:b3:e0:21:
         b7:96:00:ef:d3:e1:04:03:76:44:bd:42:a8:a7:df:c7:ff:20:
         3c:db:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:15 2026 by rpki-client