Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/6e655139-bd80-3230-8825-550d6ea12171.roa
File:                     6e655139-bd80-3230-8825-550d6ea12171.roa (raw, json)
Hash identifier:          MU5jeALkrp4JaJa1KUg3Jn0XLMdya7RbpUr9ZryA0AU=
Subject key identifier:   16:7B:70:F2:94:F9:A8:C0:33:18:E1:18:B9:74:42:C0:3F:01:26:28
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328584EF9EE832F40A2D5F648174F40
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/6e655139-bd80-3230-8825-550d6ea12171.roa
Signing time:             Thu 27 Aug 2026 13:25:22 +0000
ROA not before:           Thu 27 Aug 2026 13:25:22 +0000
ROA not after:            Wed 25 Nov 2026 14:25:22 +0000
asID:                     40124
IP address blocks:        142.249.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:ee:83:2f:40:a2:d5:f6:48:17:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Aug 27 13:25:22 2026 GMT
            Not After : Nov 25 14:25:22 2026 GMT
        Subject: CN=2b188014-1806-484e-ba2d-36d9bdcd6e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:46:70:1f:f2:0f:4d:7f:09:25:22:f6:1b:
                    96:ee:a3:d1:8c:27:31:e9:aa:8e:c3:1a:02:21:08:
                    3e:19:05:32:61:37:3e:80:98:26:0e:43:a5:3e:33:
                    91:3f:63:45:9b:c8:91:8e:5b:0f:08:b7:a3:d8:91:
                    29:7a:b3:e1:c8:8b:92:2e:bf:66:fd:6e:4c:4f:81:
                    f4:2b:4e:ce:9f:b1:3f:13:c5:c9:e7:00:bf:b6:10:
                    d5:dc:a2:40:ab:a9:f5:53:05:3f:f8:94:3b:40:7b:
                    40:53:ed:89:09:15:ff:72:4b:ad:b1:46:60:5a:a6:
                    03:8f:c9:f5:6e:d1:c1:0d:1d:fa:96:1b:9c:b2:0f:
                    5e:3c:86:0a:be:6c:bd:82:c3:7e:3c:91:f5:a1:bb:
                    df:05:bb:1f:0e:36:05:88:8d:28:2a:d7:ed:28:d9:
                    3c:ba:24:2e:f0:b7:9b:1a:4c:fe:4f:4f:59:25:c0:
                    f4:f9:4b:82:d6:73:b3:db:22:19:ff:a5:75:80:b4:
                    44:36:7d:11:61:d9:d1:1d:06:b2:3e:38:78:11:b6:
                    30:7b:c3:3a:e4:39:1b:34:a2:bf:b3:b0:84:88:58:
                    89:c9:99:31:c7:ea:67:0b:c1:c8:0f:9a:48:e5:61:
                    6d:e0:b5:55:8b:cd:b3:63:87:a0:61:8e:9e:9b:b5:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7B:70:F2:94:F9:A8:C0:33:18:E1:18:B9:74:42:C0:3F:01:26:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/6e655139-bd80-3230-8825-550d6ea12171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f1:54:7b:8b:a6:fd:27:40:f5:c4:43:4d:35:7b:d4:43:19:
         c7:a5:4a:f1:68:67:69:e6:05:ae:3e:31:cb:10:40:c1:41:e5:
         3c:86:97:30:eb:68:54:aa:4f:3b:43:6c:c3:c6:01:1d:76:47:
         75:f0:03:47:ed:97:c6:c5:9f:d7:6e:27:98:3c:1b:3b:83:61:
         81:06:6e:ac:7e:af:ef:04:81:fa:0e:15:ee:53:9a:7b:4b:a7:
         cf:06:a0:d5:db:1e:c5:c9:12:84:6a:9b:1a:cd:93:49:70:f6:
         ba:23:a5:d3:aa:4d:fe:35:ff:32:4b:05:6b:10:f2:ea:63:2a:
         cb:f5:ec:fd:6f:fd:a4:38:3b:ac:47:ed:29:17:1c:12:5b:ec:
         8a:f4:cd:c8:ef:7b:78:11:39:d0:5b:96:b9:b4:f0:1d:95:4e:
         3e:a3:40:09:e5:47:27:44:ec:4e:6d:8e:47:5a:f1:fb:bb:5d:
         ec:c2:b3:0e:a9:29:4d:d8:9b:9c:83:be:da:df:41:98:34:8c:
         65:d8:0e:ec:c5:1f:9e:41:be:77:ea:c6:5f:60:f9:de:96:a5:
         38:eb:a0:7a:c8:da:a4:19:d5:d9:65:58:61:f5:9f:d8:e3:26:
         fe:c8:ef:be:e9:f8:9b:e4:2c:a2:82:4c:3d:db:99:de:e1:9d:
         4c:b1:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:20 2026 by rpki-client