Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/4c311621-e919-3130-8cc1-4b1e9355a9d7.roa
File:                     4c311621-e919-3130-8cc1-4b1e9355a9d7.roa (raw, json)
Hash identifier:          zGMGKFWZeYbKcFiBphVRxJoTdMYsGDy3KfEvrK8Hx04=
Subject key identifier:   6B:92:26:F0:39:DE:20:35:B6:36:3B:4E:4C:1E:AA:04:A8:0D:22:D0
Certificate issuer:       /CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
Certificate serial:       010D0C9F4328584EF2E762232EFD8A4B3A799200
Authority key identifier: 4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/4c311621-e919-3130-8cc1-4b1e9355a9d7.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     40676
IP address blocks:        142.248.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:62:23:2e:fd:8a:4b:3a:79:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=9fcf682d-d88a-4018-a017-d3e09e8ada41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:9b:34:b3:4b:74:fc:55:b0:35:50:f2:81:
                    cf:df:32:83:cc:d5:d0:a0:aa:50:a0:5e:bd:12:80:
                    b7:a4:d9:9a:51:b9:de:4a:32:51:e7:08:f0:f4:4f:
                    fe:47:c2:e0:fe:5a:27:25:59:e9:d5:62:e7:e4:e4:
                    62:2b:80:6b:a9:3e:5e:8d:b8:f2:f8:64:66:af:02:
                    1b:5b:be:df:56:1b:f7:e9:c2:3b:ea:c0:6a:3a:81:
                    74:06:3a:18:0e:24:b9:e8:56:3d:75:b3:ff:d3:cc:
                    57:ce:ec:2b:a3:e5:a9:70:fd:8c:ae:7c:e6:c3:22:
                    1e:71:80:39:69:5c:12:74:36:e3:e0:09:b2:a6:9b:
                    7e:cf:d1:cf:74:4f:d0:80:6d:dc:db:07:af:33:64:
                    db:06:b6:c8:06:90:d0:5f:b5:fb:e7:30:0a:03:b0:
                    4c:85:f6:0c:f4:25:b1:cb:ae:fd:c2:9b:ea:eb:fc:
                    8d:88:e3:c6:27:f5:4e:86:47:ab:28:bf:9d:74:10:
                    1c:99:51:a7:9c:10:aa:04:4f:f3:3e:13:61:8e:b2:
                    15:12:2e:6e:80:5d:f1:a8:37:25:d9:2d:c6:33:f3:
                    a1:17:6e:68:03:e6:0c:b6:3e:1f:bf:53:02:7e:5f:
                    2e:75:29:dc:4f:5c:fc:d8:71:e0:77:31:6a:e8:29:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:92:26:F0:39:DE:20:35:B6:36:3B:4E:4C:1E:AA:04:A8:0D:22:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/4c311621-e919-3130-8cc1-4b1e9355a9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:03:a5:af:05:04:e1:a3:9c:63:8e:12:ab:10:13:19:b2:
         37:a7:1e:3e:61:8f:dd:55:a1:b2:ab:24:93:79:d7:df:7d:02:
         07:7a:86:d5:82:04:f2:8d:dc:37:4b:b6:9b:74:d6:a7:c7:f8:
         08:d5:54:29:70:ed:dd:29:6b:d6:94:d4:d9:96:b1:75:c9:a0:
         d6:e1:94:c5:bd:ad:d1:1e:93:63:bf:54:6f:ad:7e:7e:41:06:
         32:30:23:d8:f2:18:a4:e8:fb:5b:a9:4a:38:d7:11:db:ce:5d:
         26:56:4d:07:48:8e:1f:2e:5e:87:79:17:84:10:d6:59:3c:37:
         74:c3:38:b5:72:21:b2:0e:99:f7:0b:0f:2d:b4:a2:c0:bd:4a:
         4a:22:91:17:bd:39:63:39:a6:6f:63:22:3e:37:83:69:90:73:
         20:70:35:0f:aa:c7:f9:96:a9:11:90:2c:e6:a0:79:da:39:d2:
         9f:87:3f:78:a8:27:0f:9d:7a:a3:cc:6e:6c:51:28:7f:f6:56:
         38:50:8e:60:1f:e1:18:e6:ee:6a:91:da:e3:00:27:44:c2:b3:
         3a:21:76:41:70:7e:c9:b2:de:45:77:ad:5c:ba:da:80:11:87:
         bc:9e:21:f4:6a:c9:3f:6f:f5:3b:39:d1:c3:01:16:47:28:02:
         5a:8f:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 22:10:02 2026 by rpki-client