Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/7126d399-e501-396f-a04e-aed5881adf82.roa
File:                     7126d399-e501-396f-a04e-aed5881adf82.roa (raw, json)
Hash identifier:          kdywxxWUZZ5Z7vT6/BoMQ4rVCFKpyIKVmorfKsDGu5M=
Subject key identifier:   81:7E:13:C7:32:FC:CE:C3:5F:61:3F:D8:73:F1:0A:6D:F7:C9:03:43
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584E3700B68F314836A8555C4780
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/7126d399-e501-396f-a04e-aed5881adf82.roa
Signing time:             Thu 18 Jun 2026 17:39:25 +0000
ROA not before:           Thu 18 Jun 2026 17:39:25 +0000
ROA not after:            Wed 16 Sep 2026 17:39:25 +0000
asID:                     402288
IP address blocks:        43.245.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:00:b6:8f:31:48:36:a8:55:5c:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Jun 18 17:39:25 2026 GMT
            Not After : Sep 16 17:39:25 2026 GMT
        Subject: CN=abcdd49b-f49c-44f5-a803-89a0a16166e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:77:eb:35:3d:92:4c:ac:ad:c1:08:45:aa:
                    64:fb:83:46:5b:21:6a:6f:c3:26:96:0d:88:01:3b:
                    40:2f:28:d6:72:e1:e0:41:9d:6a:5e:64:b6:ab:8c:
                    2f:42:3f:e3:cf:e6:ed:53:66:81:d3:1d:09:29:5d:
                    01:df:a7:bc:20:08:c7:1e:42:6a:da:b8:9e:74:cd:
                    0e:c8:ac:53:28:a6:56:e5:a2:1f:87:0e:33:b3:5a:
                    40:c4:5c:6f:41:71:1a:88:53:e4:af:32:16:28:10:
                    fb:f3:4b:2b:f7:b9:39:88:d0:21:40:cf:fa:3b:80:
                    65:2c:63:85:1f:82:c9:a2:72:57:3c:24:4d:1a:bf:
                    f6:e3:93:63:e6:f8:ed:12:1c:11:04:01:47:43:c1:
                    35:03:d4:b0:94:82:7e:5a:f0:df:54:0f:d1:f5:f5:
                    fa:2d:a3:21:0d:6d:4d:85:26:ca:c7:ae:5d:7e:bd:
                    b7:f9:d7:d9:26:15:81:b8:d1:68:15:ef:05:0b:49:
                    64:8f:0e:45:bc:c7:b3:dd:cf:c5:fb:5f:33:2a:a0:
                    79:bb:73:b1:cf:af:85:fd:c3:65:47:0d:98:fa:a8:
                    d8:6b:7f:35:33:cb:8c:13:6e:cd:7a:c2:e2:d7:2e:
                    6d:f1:0b:4b:1e:46:37:b8:d3:43:79:e8:c1:4d:9d:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7E:13:C7:32:FC:CE:C3:5F:61:3F:D8:73:F1:0A:6D:F7:C9:03:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/7126d399-e501-396f-a04e-aed5881adf82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:8d:f6:fa:89:81:8a:3b:94:16:b6:96:7d:cc:ff:1a:3a:31:
         21:25:1a:2b:75:a5:b5:38:03:aa:c0:c8:47:8f:b8:94:4c:b1:
         3d:0e:0d:10:38:b6:60:05:af:12:e6:1b:7c:83:66:7f:2d:b7:
         5b:bc:16:cf:a0:31:24:10:0c:b8:b9:ac:14:b3:9c:7f:1b:ea:
         c7:1d:75:cb:a2:33:82:7d:4c:95:84:e5:73:57:3d:31:fc:ac:
         27:e4:a3:3f:40:d8:4e:de:30:9e:9a:b8:a6:0b:6f:e7:6b:7c:
         3f:fb:ea:91:62:ca:d2:fc:4f:35:96:67:69:81:b5:96:da:5b:
         6a:5f:8e:ed:13:9f:e3:c5:81:d1:40:5e:36:6b:30:c0:26:c8:
         e1:ec:a8:60:44:f0:21:9b:c2:be:c2:b4:ed:46:e2:cb:06:d5:
         73:6e:27:2a:fe:c3:7b:63:7b:5b:ca:d6:6b:70:90:3e:2c:d4:
         e4:da:64:f9:7f:7c:6f:0b:5e:75:8e:b4:96:61:72:d2:f2:b3:
         a2:7d:1d:6f:b3:5c:ab:22:83:40:33:1e:8e:69:a6:3e:7f:86:
         82:4d:28:63:b1:7a:94:8d:59:99:16:3a:53:21:69:d3:47:82:
         bc:23:02:eb:d2:58:e1:a3:b1:23:e7:b5:80:da:63:54:51:8c:
         b8:97:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 14:18:57 2026 by rpki-client