Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa
File:                     28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa (raw, json)
Hash identifier:          N5UiVRssYi2NbdSAHYxkm4M2Dwy3+BjVkRnPMnkTKvw=
Subject key identifier:   0E:7A:29:17:0E:18:15:70:B9:B9:AA:75:CE:1F:29:19:32:ED:38:20
Certificate issuer:       /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
Certificate serial:       010D0C9F4328584F5E62E52591620AB7F4355100
Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     30671
IP address blocks:        142.249.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e5:25:91:62:0a:b7:f4:35:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=9e8b5feb-1e10-4cc0-8a0c-a3bc70b4f275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:64:bd:9f:04:c5:e6:03:50:6f:07:c6:5b:
                    70:5e:a0:f6:48:a3:77:8d:2b:dd:cb:ad:70:43:8b:
                    48:a2:a3:7e:55:f8:60:74:b0:1b:d8:fc:2b:ff:5a:
                    28:ef:b5:33:39:ba:a8:7c:ea:26:6e:8d:07:39:9f:
                    f5:3e:80:7c:ca:12:0a:9e:ec:74:6d:b8:a1:96:38:
                    94:e1:ba:0e:34:fc:1f:86:27:23:fd:8d:cb:b1:d5:
                    0b:cc:02:e7:f4:ac:96:77:90:62:cd:bc:0c:15:1c:
                    3d:c9:71:b1:ce:a5:fc:e9:75:bb:11:c6:c5:03:c8:
                    c4:af:ec:fc:31:e2:32:a0:75:72:bd:57:cc:4f:99:
                    7a:e6:21:bf:6d:00:70:26:cb:64:86:a8:8b:cf:df:
                    9b:06:91:71:a1:26:40:fb:71:5d:55:a9:fb:68:da:
                    67:fd:f9:82:5f:69:85:da:58:15:25:31:28:c2:e1:
                    2e:a1:f6:89:3b:96:4e:ba:95:93:a1:7a:1f:9f:1e:
                    1c:9e:8e:40:29:bf:01:98:ae:7b:e8:08:80:93:83:
                    2e:3a:45:4d:93:d4:22:9f:0d:17:ba:df:50:2f:0f:
                    c4:51:c1:48:0c:7e:76:a7:31:c9:67:ba:1c:d4:c2:
                    ea:45:bf:ef:d7:f2:1f:cf:a2:0a:09:78:eb:25:54:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7A:29:17:0E:18:15:70:B9:B9:AA:75:CE:1F:29:19:32:ED:38:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:14:80:7f:fa:08:e1:67:b1:b1:a7:18:7b:f3:99:9d:74:
         53:20:22:7e:02:7d:6e:10:93:e5:26:03:47:04:65:22:a7:c6:
         73:fb:6f:a9:e7:69:50:43:1f:ae:95:4a:e7:ab:1a:d4:fb:10:
         74:81:0e:a8:bd:d3:14:2d:87:a3:d0:2f:8b:22:b6:de:49:04:
         0e:27:0b:3b:89:de:d2:e0:c7:12:49:b0:8c:ad:7a:67:af:6e:
         1d:84:06:de:a8:81:8b:9b:eb:87:70:24:4a:76:f2:61:5d:fe:
         16:78:73:b7:56:06:7e:19:a7:08:73:dd:71:19:01:79:25:7a:
         a9:1b:06:65:ff:10:a4:72:a0:ab:50:b2:d7:8d:12:0f:3c:f4:
         d1:38:7b:66:1b:14:c0:0f:ef:13:e4:32:f9:18:a4:95:8a:95:
         b4:e3:5d:9c:99:f5:1b:e5:85:31:1c:3f:17:f0:8a:c0:49:b5:
         2b:1e:1d:46:57:df:df:d8:bd:98:2b:5f:73:8a:29:f0:a5:c3:
         73:c7:15:d0:c4:7a:fe:3c:ae:df:a7:bb:61:bc:89:4a:1a:94:
         f2:51:10:b1:b7:56:e5:a8:b4:c8:08:b8:5c:cf:13:5f:a9:8e:
         4e:3d:7d:28:c4:f2:fc:b0:76:d5:2b:bb:b0:31:89:59:c8:9e:
         11:3f:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:57:19 2026 by rpki-client