Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa
File:                     d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa (raw, json)
Hash identifier:          tNXj6mGCZmwMUp/AN0A30em/qEKNxcmXugH8QSfgGrY=
Subject key identifier:   6C:9D:14:8A:3E:53:6E:9B:D0:03:32:9D:A3:2D:A6:D5:C3:32:4C:5E
Certificate issuer:       /CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Certificate serial:       010D0C9F4328584D95EFF9E2BFF7F04BD8CE5160
Authority key identifier: 7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     396045
IP address blocks:        142.202.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f9:e2:bf:f7:f0:4b:d8:ce:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c39fb8-4da4-452b-a86f-8d28342d9446
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=7457d757-3f7e-45db-bf71-726108770656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:69:71:fc:c4:32:06:93:21:d7:2a:d1:3b:
                    07:1d:cf:d5:71:fc:0c:da:bf:ef:5a:e0:15:25:6f:
                    3f:69:4b:74:ac:ff:5d:4d:d1:8d:83:ec:f1:ef:f3:
                    25:78:d5:a5:23:c4:7a:32:e0:e7:5c:52:c0:0b:ca:
                    b3:5f:b3:1e:a4:a2:3e:81:dd:83:0d:87:2c:7e:ea:
                    1a:87:04:fd:57:6b:bf:f2:68:f4:d0:45:32:2a:84:
                    cc:e7:f3:1d:52:51:17:be:c0:f1:17:34:e1:6f:cd:
                    48:c2:d6:de:80:ba:1e:df:c2:05:27:ca:7b:3b:a9:
                    7b:47:44:05:c3:66:fb:2b:55:f8:ef:40:b3:25:a6:
                    8e:f4:51:73:1f:02:47:95:f3:57:cd:d6:06:ee:ea:
                    84:51:3d:38:23:7d:20:12:4b:77:be:0e:be:b8:51:
                    d2:f5:9c:0d:1c:81:43:ed:00:d2:3b:2d:73:93:e1:
                    eb:dc:09:33:97:9e:3b:d1:ed:93:80:61:36:47:0f:
                    77:49:01:87:80:13:fb:95:b6:17:a4:27:fd:27:ee:
                    2e:40:58:68:a4:2f:1d:5f:7a:7d:90:21:97:f2:45:
                    34:58:7c:6d:0a:a4:35:32:ef:7f:ff:9b:20:17:4e:
                    2f:fe:c3:99:14:e3:1b:8c:3d:3a:cc:a7:f9:00:36:
                    ce:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9D:14:8A:3E:53:6E:9B:D0:03:32:9D:A3:2D:A6:D5:C3:32:4C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl

            X509v3 Authority Key Identifier:
                keyid:7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:0b:13:79:83:ae:58:e9:09:85:16:1d:4c:e0:43:06:a6:e5:
         6b:98:48:5d:3a:07:92:87:84:10:69:5d:a6:34:ff:67:2a:fb:
         01:3a:3e:a9:bd:b7:dd:f9:ed:13:78:2a:68:3c:be:57:69:2e:
         55:73:40:25:2a:60:9e:f8:f6:bd:94:81:97:18:c8:98:0f:63:
         81:ad:75:46:29:bb:ba:36:dc:61:aa:ae:19:86:5d:47:8b:9b:
         cd:cc:08:3a:ec:2b:81:a4:bb:01:28:02:1f:58:29:01:2c:f1:
         f3:91:86:3d:9c:4d:97:10:86:bf:0c:31:e3:59:e7:27:27:de:
         16:27:e1:10:bd:55:51:ff:a0:12:43:fc:4d:db:de:fd:31:b2:
         18:1a:14:7e:1d:3e:32:f9:86:fd:6f:90:5d:0f:77:d2:17:21:
         d4:a3:ba:bc:4f:9f:82:c8:b1:f3:e3:39:fe:da:30:ec:24:17:
         9c:d7:81:f5:28:59:9f:22:4a:bf:94:ce:19:d1:a6:15:18:fa:
         c2:49:c3:d7:5d:90:03:27:32:bf:7a:94:42:b7:74:95:06:18:
         49:02:d8:fe:a8:a8:49:44:1a:29:85:fc:f7:24:c2:91:7a:f9:
         16:3e:7c:a8:76:22:48:a0:c8:45:d8:7f:cd:af:ad:cd:62:00:
         61:3f:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:26:01 2026 by rpki-client