Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/7be81d92-8583-3cc6-9516-da5af3f567c1.roa
File:                     7be81d92-8583-3cc6-9516-da5af3f567c1.roa (raw, json)
Hash identifier:          P7hLhOGDLW71GWxJm4Ns1bAV0/6w6U6Zl+STBZGoy8c=
Subject key identifier:   78:CB:D0:C9:E3:EA:D2:0B:E0:37:7E:E1:F9:A6:0D:22:AC:9E:02:A0
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584EBC7713C4B91AEB4D7B155500
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/7be81d92-8583-3cc6-9516-da5af3f567c1.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     152878
IP address blocks:        142.248.228.0/24 maxlen: 32
                          142.248.229.0/24 maxlen: 32
                          142.248.230.0/24 maxlen: 32
                          142.248.231.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:13:c4:b9:1a:eb:4d:7b:15:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=10dc8f34-a6fa-4cf5-9f76-5820c66afc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:f4:eb:3c:38:fa:1c:4d:07:78:53:47:e6:
                    a0:e7:9f:fb:b6:a5:62:84:bb:97:9a:f0:14:27:45:
                    bc:46:74:f2:3b:8e:9a:76:2a:49:07:0c:02:7b:b7:
                    96:a9:a8:2e:5a:23:4c:f9:7b:c1:a8:4c:65:56:a5:
                    93:84:39:74:d5:b8:57:e2:ae:25:42:48:70:f6:31:
                    0e:25:7b:81:58:2d:05:83:28:8f:10:51:89:6f:a8:
                    98:15:28:4b:32:58:ba:e5:06:32:29:2f:59:89:7f:
                    a7:a2:88:49:f8:78:3e:ce:67:e9:5a:75:8f:1d:6e:
                    51:fe:30:38:ca:cc:a2:08:2e:8e:06:fe:36:9b:b9:
                    7d:83:18:16:c5:d8:9f:ad:ec:aa:24:08:ad:92:c6:
                    bd:9b:d4:e0:86:46:a2:8f:2e:d6:78:f3:44:e4:83:
                    62:ca:cc:02:ee:a3:a9:10:23:26:03:db:35:e5:e0:
                    85:7b:d7:da:c5:8f:02:5d:ef:05:64:93:7e:89:5b:
                    2e:0d:b1:95:0b:8e:fa:9d:07:11:f5:f5:d6:7b:5b:
                    e5:67:ba:c5:a5:ad:35:32:a8:35:4d:3b:28:82:2a:
                    c1:20:eb:df:57:02:fe:05:67:3e:03:7e:9a:ba:ac:
                    69:7d:f5:a7:22:bf:45:d4:43:db:de:ac:1c:1d:dd:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CB:D0:C9:E3:EA:D2:0B:E0:37:7E:E1:F9:A6:0D:22:AC:9E:02:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/7be81d92-8583-3cc6-9516-da5af3f567c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:44:cd:d7:8b:18:91:60:11:ea:8b:bb:75:91:71:fa:7c:3b:
         2e:d3:0b:4c:5a:e7:b4:db:a8:f1:c1:b8:ee:d9:07:24:68:04:
         44:1b:d4:71:a4:1a:61:f6:1c:65:e6:54:ec:63:ba:36:16:3b:
         66:15:2e:01:d9:aa:87:73:fd:36:97:bd:50:dc:5b:76:c9:b0:
         b1:dd:8a:1b:7b:b1:9b:03:a5:0e:3a:79:c8:7a:97:1f:95:28:
         ff:fa:7a:00:cf:ff:c4:45:0e:9e:11:1e:b5:44:67:a5:db:b5:
         d1:7c:26:83:0d:ac:3d:78:ad:6e:3d:fb:60:f0:70:98:da:b7:
         1b:a9:90:b9:f1:19:2f:dc:41:92:90:6b:aa:48:bc:8c:f4:a2:
         5f:35:7c:60:1e:b6:b4:ea:c2:13:f8:8b:bc:86:37:ff:3b:ce:
         6f:34:ea:af:09:ae:7b:c2:91:4d:42:ca:97:f8:41:2b:21:41:
         55:05:68:92:ea:78:f6:fe:be:38:91:0c:2f:3c:ff:13:3f:66:
         04:0c:39:1d:94:8b:b9:4d:c2:cc:10:7d:fb:5a:ba:fb:2f:0d:
         4c:0a:17:24:6f:e5:43:f8:8f:6c:72:33:a4:9c:12:8f:5c:f2:
         1f:f0:a3:d9:a0:8a:a8:81:b7:f5:a7:44:7c:9e:f1:aa:dc:f9:
         b5:62:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:42:50 2026 by rpki-client