Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486/62471011-8e13-3bd1-b6c5-346970f4d0c2.roa
File:                     62471011-8e13-3bd1-b6c5-346970f4d0c2.roa (raw, json)
Hash identifier:          cvf9CfROYMJHBk//tbe5GhdGBnkddgCBCpiktjYiHb8=
Subject key identifier:   88:94:D1:54:1A:FB:58:41:63:89:3D:E8:EA:BA:5A:E0:F5:23:1C:57
Certificate issuer:       /CN=744b7398-6e0b-41ff-9c40-088bab61d486
Certificate serial:       010D0C9F4328584F5B9804B9F0353F735F09CEEC
Authority key identifier: 83:57:EA:E9:48:FC:A3:5F:9E:DB:99:4E:4E:2B:F1:4F:A7:51:D7:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486/62471011-8e13-3bd1-b6c5-346970f4d0c2.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     401363
IP address blocks:        142.249.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486/744b7398-6e0b-41ff-9c40-088bab61d486.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486/744b7398-6e0b-41ff-9c40-088bab61d486.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:98:04:b9:f0:35:3f:73:5f:09:ce:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744b7398-6e0b-41ff-9c40-088bab61d486
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=4b97732b-a6a8-461d-be75-523eda91503e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:c6:ce:c0:b3:f0:df:fc:5e:ea:cc:74:5d:
                    3d:09:d3:51:ee:f9:7f:c2:4c:86:a9:4d:bb:f0:02:
                    35:b8:f9:d3:e2:5d:5f:08:5e:95:49:f7:42:47:4d:
                    92:13:58:1b:00:79:ac:c6:7d:58:f9:6d:a6:2d:2e:
                    c7:4c:2c:19:07:06:5e:08:19:d3:42:0d:c8:fa:5f:
                    cb:2a:bf:43:e7:fa:bf:5e:5e:be:8c:5f:0b:85:36:
                    94:3a:64:0b:56:ff:62:c1:cd:cd:cc:a9:0b:ca:3f:
                    5b:15:fd:06:cb:92:09:6d:bf:70:21:26:aa:1e:91:
                    e0:e8:8d:db:31:07:59:7f:b7:81:c7:e7:82:62:a6:
                    99:7b:0f:12:9b:40:27:17:ed:19:37:ed:0d:6d:69:
                    fd:82:de:a4:5f:e8:88:e4:51:2e:18:a2:18:49:a1:
                    32:28:83:08:a9:12:17:4e:ab:77:26:0a:58:d5:32:
                    01:95:b9:3a:e1:db:3f:2e:75:fd:bb:9e:71:13:a2:
                    cb:7a:b7:5d:fc:7d:4f:56:a6:6f:ba:d3:3c:e1:e5:
                    b8:9d:b8:0b:98:8a:81:4c:4c:6c:b4:53:a7:b7:a0:
                    a0:5e:7e:d8:7d:42:27:cf:fc:a1:1c:e6:69:65:16:
                    d4:2f:31:f0:40:5b:7e:89:0e:cc:78:d5:3b:0d:a1:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:94:D1:54:1A:FB:58:41:63:89:3D:E8:EA:BA:5A:E0:F5:23:1C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486/62471011-8e13-3bd1-b6c5-346970f4d0c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486/744b7398-6e0b-41ff-9c40-088bab61d486.crl

            X509v3 Authority Key Identifier:
                keyid:83:57:EA:E9:48:FC:A3:5F:9E:DB:99:4E:4E:2B:F1:4F:A7:51:D7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/744b7398-6e0b-41ff-9c40-088bab61d486.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b8:1f:22:8b:33:f2:c8:44:e9:10:af:b3:d6:ea:74:29:03:
         48:f6:1d:44:13:54:db:50:58:e5:62:2b:aa:10:1a:3f:54:2f:
         90:b5:43:74:29:13:55:2a:21:6e:c3:e1:d5:4c:31:69:bd:98:
         09:3d:ef:c8:f6:35:d0:c2:18:d0:bc:44:95:7b:49:e5:9d:01:
         c4:f5:89:0a:ce:d5:31:57:49:a0:4e:be:9b:b2:d8:22:1f:fd:
         9f:5d:bc:11:9b:cb:71:85:cd:8d:13:3d:29:e0:d2:a1:e2:25:
         fc:e7:7e:48:38:39:33:a1:89:c2:04:ef:28:49:38:44:cf:3b:
         68:70:ef:a5:b5:e4:0c:b2:57:fb:38:a3:8f:d1:a8:ff:53:5f:
         a9:0c:f9:0b:84:6a:8f:59:14:0a:49:46:7d:7e:81:34:b7:48:
         98:03:72:51:80:f9:cd:f9:3e:2e:50:17:79:1d:39:5c:4a:ce:
         35:0e:7f:bd:77:55:b4:0f:a3:52:e8:61:ca:36:ce:ff:01:80:
         49:16:17:9d:e7:bd:58:76:fb:b0:42:cd:15:37:ed:af:cb:ab:
         bb:f3:13:72:08:b8:69:44:17:69:69:77:c1:14:f0:6e:79:7d:
         25:42:72:70:f8:e6:a7:48:71:55:d3:38:6c:53:52:bb:1c:75:
         a4:75:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:43:58 2026 by rpki-client