Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/4401f1aa-4cd5-33de-bd77-0573df16318a.roa
File:                     4401f1aa-4cd5-33de-bd77-0573df16318a.roa (raw, json)
Hash identifier:          DCXhBTv05xb6EwfgwjrDqhCGw6JcghMCIE3dicV9vpU=
Subject key identifier:   28:C9:91:BF:FC:7A:FC:0D:0A:54:6D:2D:BA:F9:AB:0D:7F:BB:8D:7D
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584E10557BBB054A6726AC0BFB00
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/4401f1aa-4cd5-33de-bd77-0573df16318a.roa
Signing time:             Thu 04 Jun 2026 21:13:41 +0000
ROA not before:           Thu 04 Jun 2026 21:13:41 +0000
ROA not after:            Wed 02 Sep 2026 21:13:41 +0000
asID:                     206216
IP address blocks:        142.248.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:55:7b:bb:05:4a:67:26:ac:0b:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Jun  4 21:13:41 2026 GMT
            Not After : Sep  2 21:13:41 2026 GMT
        Subject: CN=ac3ab95c-4fb2-4258-ad32-f056a6e0f107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:8b:15:7c:59:e5:49:17:15:46:b2:f6:a6:
                    67:20:3e:56:0e:15:3b:2b:c0:1f:25:a8:26:e9:8b:
                    f8:b0:51:2e:69:36:8d:22:51:73:d5:57:15:aa:d5:
                    01:88:ae:64:93:b3:04:e4:50:ee:c9:0b:2a:a0:75:
                    9a:33:9a:4a:22:a6:49:55:78:4e:e3:8a:00:d3:6c:
                    26:81:3a:e5:bd:a3:7b:1c:48:8e:52:0b:6c:93:1f:
                    32:29:16:b9:84:40:c1:45:b2:35:a2:6e:29:b4:6f:
                    08:6c:24:70:8e:92:97:9b:f1:ee:ee:dd:cd:f8:89:
                    fd:76:86:1e:2a:35:c6:a2:82:9f:20:6c:9c:ef:c7:
                    ce:dc:c1:b6:eb:cf:3e:6a:de:a4:f5:30:41:a2:ed:
                    e4:28:d1:09:61:ca:65:11:23:76:fe:c3:44:9b:61:
                    8c:aa:93:8d:df:ca:70:f8:04:55:5d:90:b6:13:d7:
                    b5:28:25:54:a0:28:b9:63:93:7f:dd:3e:84:39:8a:
                    52:e0:43:b8:fb:86:39:54:99:64:ea:2e:4f:a1:b2:
                    4a:8d:7d:51:77:96:97:b3:c9:fb:8c:fd:b4:10:2f:
                    75:4e:88:86:d4:94:93:9a:3a:b8:f0:1b:55:3e:c9:
                    4a:94:7d:1e:2e:fd:d5:a9:34:0e:d5:cb:2f:b4:85:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:91:BF:FC:7A:FC:0D:0A:54:6D:2D:BA:F9:AB:0D:7F:BB:8D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/4401f1aa-4cd5-33de-bd77-0573df16318a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0f:9f:55:2e:da:f1:1c:c1:66:cb:1a:db:c2:09:d0:79:42:
         a4:45:50:11:1d:4b:7d:b8:e1:bc:9e:3a:fd:cb:a4:2f:32:f9:
         0d:8b:67:28:a5:75:d5:ef:fb:f5:20:ce:e2:70:8f:71:ca:49:
         7a:fa:ce:43:6e:b2:83:4c:c4:f6:81:e9:93:e7:bd:35:ae:70:
         9d:e8:f1:2e:98:8c:ba:18:29:18:5b:7e:c3:a9:aa:60:e8:6d:
         79:5b:12:b7:87:d0:d9:29:30:15:75:9d:c8:83:28:22:95:40:
         ea:fc:bf:db:00:74:35:03:aa:6c:cb:41:d6:be:5a:62:cd:d8:
         78:47:77:4c:7b:cb:ed:7d:8c:6e:e5:c6:89:e6:38:ad:0f:68:
         85:d6:aa:a2:43:36:d3:e5:1f:36:fe:65:dc:58:44:13:89:1e:
         91:35:25:73:c1:10:f3:90:17:96:3b:4d:e7:7a:3e:3b:a4:13:
         9e:2b:10:a2:ee:fd:97:3f:52:2b:38:2f:2a:6a:0c:66:75:67:
         e6:05:5e:e5:71:0b:f7:e4:aa:e5:38:4c:58:1f:84:f5:f2:25:
         26:c3:39:11:19:42:54:79:dc:2d:7e:a6:eb:f6:d1:56:60:f7:
         54:dd:76:a0:18:04:f5:29:8e:26:f0:d3:5e:74:12:36:93:e0:
         dd:b1:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:51 2026 by rpki-client