Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa
File:                     8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa (raw, json)
Hash identifier:          iyZXb3NoQPLDOJQt50m1uqmReklT7aevWjDBWuyxilc=
Subject key identifier:   D6:D1:99:9A:C7:77:FD:C2:CB:6E:CA:6E:1F:A3:25:6D:60:5E:41:56
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584DF4DB3E8BCF179E839E24FB00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     40466
IP address blocks:        170.186.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:3e:8b:cf:17:9e:83:9e:24:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=467138b3-2452-42db-994e-9e648a806fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:48:b7:ba:74:56:cb:40:0e:f5:5b:0f:f4:92:
                    af:d0:5a:d5:18:77:22:ab:49:49:07:e3:4a:27:e7:
                    7d:15:2d:a0:b1:30:48:55:4e:67:f7:64:13:1a:34:
                    22:cf:ef:0c:52:a3:c6:a5:85:03:3e:57:12:2f:81:
                    b3:9f:d5:58:33:fc:76:29:ed:dc:0e:b3:82:13:bd:
                    92:a7:0b:2d:f2:f5:4f:74:72:ea:78:d0:91:93:02:
                    bb:1d:b2:19:c9:9f:5a:37:a0:e0:3c:f7:8d:a1:94:
                    cd:1d:ef:15:00:0f:0d:ec:5b:83:bc:eb:cd:9f:80:
                    d1:98:66:2d:17:d8:f1:f4:58:55:cc:9a:3e:67:af:
                    7a:d7:ff:bf:53:58:2f:53:50:9b:0b:be:be:28:2f:
                    81:dc:63:7d:e7:3a:9c:24:e4:47:f7:f0:1d:58:c5:
                    c6:93:f2:f3:01:f3:07:e2:61:56:1f:d0:8d:2e:9f:
                    e5:82:35:c1:49:1d:cb:02:1d:76:fa:5f:14:a7:4c:
                    57:80:5d:5b:26:b3:8c:79:df:c4:ad:cd:47:af:d6:
                    d7:e2:e2:43:a1:72:3f:16:6b:33:9f:cf:76:a5:a2:
                    7a:16:2c:d7:f9:6d:92:b9:c1:6e:87:f9:df:be:bb:
                    54:8f:5d:2c:85:db:c7:e5:7c:a6:5d:4b:b6:43:4b:
                    14:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D1:99:9A:C7:77:FD:C2:CB:6E:CA:6E:1F:A3:25:6D:60:5E:41:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:86:6c:53:32:36:42:81:13:b2:76:f3:d4:4e:89:22:66:
         7d:04:28:19:6c:64:cd:df:8d:6c:83:99:53:75:24:35:58:f3:
         65:d3:c0:ac:d1:5d:e8:c2:51:b7:52:5b:cb:2a:81:9b:db:20:
         31:0c:f2:ea:24:f1:40:eb:b9:51:7c:2d:0d:1a:3e:8a:67:8d:
         67:4d:9f:8b:ea:85:71:44:0e:ef:3f:9b:15:2f:9c:93:47:5f:
         00:42:56:be:c9:96:b5:3e:b7:6b:06:73:26:b1:c1:f8:1d:1e:
         42:b2:c5:95:ed:fd:8a:32:0e:88:0f:9b:1c:54:2e:b1:46:a8:
         69:55:7e:30:2d:db:a4:dc:4e:1f:ec:77:c2:31:23:9d:ce:da:
         d0:63:7e:4c:0b:ee:77:e2:48:7c:c6:4b:d9:50:70:cc:b1:02:
         4b:23:cb:37:e2:2f:bb:3f:c5:d6:d0:1d:d7:0f:52:68:71:fd:
         6e:da:73:a5:b7:9c:03:41:da:f3:f2:3a:28:33:08:70:9f:4c:
         dc:f1:78:dd:06:f6:b2:53:55:7f:62:35:84:3c:59:b9:b5:e6:
         61:41:42:e2:84:a5:56:4f:15:73:03:f4:71:3e:85:e1:2e:1b:
         62:ba:37:8e:f2:3e:dc:c5:44:ff:ec:a5:57:57:ac:0c:f6:39:
         47:fb:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:26:15 2026 by rpki-client