Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/354357f2-9a2d-302a-9d31-98cf17920f85.roa
File:                     354357f2-9a2d-302a-9d31-98cf17920f85.roa (raw, json)
Hash identifier:          8W7UraxxjylxqUrOywcYgDlnqwhCj8bWeiw4xrEtFnM=
Subject key identifier:   AA:70:4A:41:B9:09:5F:04:6F:AA:B5:E3:D0:CF:72:7E:5F:B4:0D:B6
Certificate issuer:       /CN=0d419888-80a0-4fd9-90ba-6342b677f849
Certificate serial:       010D0C9F4328584EABB6E9F6C44383C95E4948E0
Authority key identifier: 41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/354357f2-9a2d-302a-9d31-98cf17920f85.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     7029
IP address blocks:        142.248.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:e9:f6:c4:43:83:c9:5e:49:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d419888-80a0-4fd9-90ba-6342b677f849
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=e62fa65e-334a-4373-9df3-add72a54dd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2a:6e:19:82:b9:26:48:70:e3:7e:e6:f4:cb:
                    f1:0e:e2:b6:47:52:a0:78:4c:49:70:af:de:f1:21:
                    bc:9a:79:bb:60:d5:d9:fa:5b:fe:f8:b8:a2:ab:ac:
                    4e:d9:d1:35:54:55:1b:42:f3:26:86:d8:02:0a:b9:
                    af:91:d4:fe:14:f6:fc:8e:a7:30:32:3d:35:25:49:
                    e0:1d:45:d9:a1:a3:58:6c:ea:a5:c9:e8:f6:ec:01:
                    1b:8c:42:15:72:2b:22:0d:e7:b3:c7:3f:dd:35:73:
                    73:79:f7:80:06:52:8a:9e:b8:e2:ee:12:4c:f2:81:
                    e3:1f:d6:0a:77:d6:a5:61:31:57:4e:41:f9:45:8b:
                    07:c6:a1:a1:b0:af:fd:55:24:36:6d:63:bc:5c:bc:
                    9d:58:f6:a4:56:08:34:26:dc:e6:75:a5:0b:94:da:
                    80:cc:6f:ca:fa:1f:79:43:de:2b:eb:0c:59:b5:3d:
                    c1:87:cc:5f:9c:64:f2:1e:4b:a0:33:60:b2:ef:1c:
                    05:79:bf:be:a4:57:85:ea:6c:a5:2c:03:3e:31:03:
                    36:e9:f5:e0:a9:bc:39:82:a1:6a:28:04:94:f2:09:
                    29:40:5e:44:b7:75:13:4a:0d:c9:96:a5:b0:9d:9b:
                    e1:71:99:79:e9:c7:0d:d4:5b:65:96:3c:df:9f:31:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:70:4A:41:B9:09:5F:04:6F:AA:B5:E3:D0:CF:72:7E:5F:B4:0D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/354357f2-9a2d-302a-9d31-98cf17920f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl

            X509v3 Authority Key Identifier:
                keyid:41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:36:cc:c2:2a:8d:06:54:a0:aa:0b:e1:79:ad:6a:fe:17:3e:
         ff:86:a4:50:45:fd:01:06:01:ef:43:db:33:1b:78:fb:30:62:
         b5:ba:0c:f4:03:43:d3:ac:de:47:7c:5b:f4:e6:c3:a3:fe:66:
         9a:a4:33:c8:60:9d:39:0f:52:55:b8:9c:43:fe:ab:e5:7c:64:
         9c:01:60:84:53:2a:9b:38:37:9b:5c:86:66:6a:00:ad:fe:66:
         18:45:0a:48:9d:eb:23:36:ca:9a:e7:c9:d6:d6:72:0e:72:8a:
         35:1e:90:b8:83:15:6c:1e:fd:d7:3a:05:54:f4:37:f6:93:57:
         9f:49:78:54:3c:5f:1a:5c:78:fa:26:1e:e0:d1:70:38:3e:a1:
         f4:39:8e:3c:69:4a:b3:03:88:0d:bd:c7:69:43:db:b9:94:f9:
         da:aa:59:c0:74:7e:68:10:f4:7c:bf:79:94:f2:0e:79:ba:2e:
         ed:25:8b:e1:1e:6b:8d:6e:dc:bb:3a:59:e8:df:cc:d0:c5:77:
         32:aa:83:4f:35:21:79:5a:68:48:64:7e:c6:43:86:bb:d3:e3:
         08:76:b8:2d:15:37:59:31:de:8a:80:7c:ea:92:71:bb:ed:b0:
         e0:40:df:85:62:18:8d:83:bd:e5:bf:77:13:02:37:24:33:c3:
         a2:61:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:18:13 2026 by rpki-client