Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa
File:                     33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa (raw, json)
Hash identifier:          zBB3gtIvxfVHXmPyuC02ybdqzN0y/bzH8duFzZNXdTA=
Subject key identifier:   5F:18:F0:1B:53:F1:49:E5:1A:66:B6:9B:DA:BC:06:C1:12:FB:E8:A2
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A66D9F266FC74A1768DF0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        142.79.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:66:d9:f2:66:fc:74:a1:76:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e4aaa285-246e-409d-a726-5126ffb11eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:7d:9c:dc:d4:77:62:5a:69:08:90:62:b6:
                    7c:ac:6d:91:63:9c:c1:05:47:a9:bc:94:21:74:f6:
                    80:e4:0b:fe:4b:c6:78:f0:91:18:4c:da:0f:a5:3d:
                    32:81:92:0c:f7:15:50:4b:fb:bc:33:9c:03:25:3e:
                    54:ef:16:bd:86:57:75:8f:84:c6:44:38:61:ed:c7:
                    e7:fe:81:94:8b:e5:17:22:b0:36:8d:b2:87:df:a4:
                    cf:c5:99:89:81:a9:62:47:06:ba:4a:54:42:93:d2:
                    26:58:60:86:b6:19:c4:19:ef:59:20:a6:20:11:e2:
                    86:b4:9d:5f:f4:c4:8a:ce:9a:04:d7:aa:44:a0:c4:
                    ac:e8:d5:2f:7c:32:cd:de:18:60:0f:47:5d:96:2d:
                    c5:08:be:75:70:aa:43:26:66:41:cc:a4:55:ed:e7:
                    c1:0d:ee:96:b3:7f:7b:5e:d8:e3:be:7d:a8:86:46:
                    d3:3c:50:7d:cf:bd:e2:37:07:a6:1e:6e:fc:b0:0a:
                    b1:a4:e3:d7:02:b4:7b:4b:3f:aa:36:ea:c1:17:48:
                    08:8c:6b:37:b0:8d:c9:25:7a:21:a1:35:f9:92:49:
                    bb:96:81:42:6b:0a:66:67:2e:a6:b2:62:b4:56:6c:
                    b9:8e:63:cc:65:d4:85:6f:43:e8:98:aa:be:0a:64:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:18:F0:1B:53:F1:49:E5:1A:66:B6:9B:DA:BC:06:C1:12:FB:E8:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:df:fd:99:cb:26:0e:1a:50:3a:b1:0f:8c:32:19:bd:62:6d:
         2e:a4:04:68:da:72:4e:a5:de:3c:5f:a4:a7:b8:0c:99:6f:0e:
         d7:41:57:49:cf:a9:44:4c:77:7b:08:d8:bb:2c:cc:ee:06:ae:
         76:73:59:73:eb:e1:cc:8a:6f:66:1c:74:0a:b8:36:d5:ea:a2:
         ea:f3:b7:6d:46:bc:a9:16:40:f5:93:a9:d6:23:8e:a5:4d:6d:
         07:f0:7d:7e:12:65:b3:da:36:63:19:40:71:23:a5:5a:fd:ae:
         3b:a4:ad:4a:da:d6:92:a9:a2:9e:e9:97:1c:53:2e:7c:c8:fc:
         a6:9a:b0:47:df:26:d8:31:07:4f:18:eb:d9:37:ab:30:12:27:
         70:41:5b:0b:ce:53:62:20:63:2a:e5:b5:cd:6f:30:b2:f4:ba:
         f6:7c:e9:d8:81:41:8b:e2:f1:21:e6:8f:0c:86:d3:45:1b:b9:
         33:a4:80:63:79:eb:2a:b6:10:68:3c:ff:0f:dd:76:c5:85:b5:
         19:36:d7:fe:a0:8a:14:e7:87:1f:91:c7:dc:bf:02:5c:cc:d6:
         5d:b0:54:b7:c6:5a:10:0a:06:3e:55:42:55:21:50:66:5f:23:
         47:7b:89:d3:21:f1:ea:fe:0d:ad:61:30:65:6d:4f:3e:a6:bd:
         9a:30:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:01:19 2026 by rpki-client