Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/72486940-ed8e-3956-9daf-c428205c5ce1.roa
File:                     72486940-ed8e-3956-9daf-c428205c5ce1.roa (raw, json)
Hash identifier:          MQDRaJu0/DooqJezERHfbHAbKUBz+yDKJhbPZeQWDY0=
Subject key identifier:   EA:DD:B3:82:32:38:CF:DD:7E:5D:A4:32:6D:32:03:13:ED:70:B9:28
Certificate issuer:       /CN=32652e19-5988-41fb-a45a-66b23c523f3b
Certificate serial:       010D0C9F4328584EF6286DB19654335A217DB880
Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/72486940-ed8e-3956-9daf-c428205c5ce1.roa
Signing time:             Wed 26 Aug 2026 04:58:49 +0000
ROA not before:           Wed 26 Aug 2026 04:58:49 +0000
ROA not after:            Tue 24 Nov 2026 05:58:49 +0000
asID:                     219394
IP address blocks:        142.248.112.0/24 maxlen: 24
                          142.248.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f6:28:6d:b1:96:54:33:5a:21:7d:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b
        Validity
            Not Before: Aug 26 04:58:49 2026 GMT
            Not After : Nov 24 05:58:49 2026 GMT
        Subject: CN=775a3d24-74f7-4b2e-86d0-3db1a0cf3d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:27:4d:bd:8f:a5:0f:b8:00:b5:5d:5b:0f:
                    88:83:f1:c2:a1:e6:a1:23:6d:c1:43:05:18:3b:91:
                    2b:a3:2c:0c:43:68:b9:c8:d7:88:ea:aa:1c:02:84:
                    4b:01:e1:70:a7:5f:81:66:fe:e6:fa:30:bd:b7:80:
                    e6:8b:2f:fa:21:18:f6:e5:fd:84:92:97:61:74:d3:
                    79:1d:80:a3:71:2d:c7:e2:2a:0b:43:bc:57:2e:1a:
                    b1:4b:f9:50:78:d8:51:22:dc:24:cb:e3:e7:2d:46:
                    e1:dc:7e:07:01:72:ba:6a:02:1c:f2:8b:87:d9:63:
                    b1:6f:46:d9:42:86:b7:df:56:07:0b:73:16:3b:21:
                    bd:06:3e:b5:54:6a:bb:50:91:b4:30:c4:89:68:6d:
                    7f:38:ac:b5:46:f7:e7:61:5b:87:1e:bf:1a:c4:f3:
                    3c:2e:1b:d2:39:3f:ba:2f:3b:f5:50:21:c6:e9:ed:
                    6e:73:fa:ad:77:9b:bb:db:db:59:d5:cd:11:92:56:
                    7c:cd:38:bb:53:21:24:e9:b8:ac:43:10:88:a3:f0:
                    6e:de:1d:89:49:e3:da:d6:27:4b:b8:f7:04:04:ab:
                    9e:73:7c:51:31:02:37:fe:c4:bb:6d:e3:6e:15:48:
                    d9:63:0e:08:46:df:13:c0:c6:7c:dd:d3:7b:95:0f:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:B3:82:32:38:CF:DD:7E:5D:A4:32:6D:32:03:13:ED:70:B9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/72486940-ed8e-3956-9daf-c428205c5ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl

            X509v3 Authority Key Identifier:
                keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.112.0/24
                  142.248.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:c2:fb:a5:52:3d:c4:97:e7:38:ec:3d:3f:01:72:fc:da:
         80:ea:03:a9:88:50:18:ca:98:62:3e:d2:72:6f:6b:b2:b4:3c:
         c2:ac:b1:98:31:93:93:23:e2:ed:95:16:b3:b4:1d:2a:c5:c5:
         ee:96:8a:72:b0:81:6e:5b:76:73:19:47:1b:cd:5c:5e:dc:96:
         ef:47:c8:ef:02:96:98:b4:5d:ea:67:76:3a:d3:49:1a:1c:b5:
         c3:8b:3f:3c:f8:96:f3:53:a8:72:ad:53:ea:67:a9:55:d0:b1:
         1a:a2:58:21:dc:a8:ea:8f:37:d7:9b:13:e2:ff:2d:e2:36:cd:
         c2:fa:f6:42:1e:69:40:e1:be:f6:9a:4d:09:12:9a:2b:b3:da:
         47:4a:f3:cb:37:0c:e3:25:24:57:07:89:18:db:bb:02:87:d3:
         97:b4:ba:d0:dc:f6:ba:c8:ae:c5:aa:ac:b2:2e:59:80:e0:d9:
         3b:7f:2a:5b:dd:35:06:d5:af:29:ad:a8:2d:03:a0:84:25:06:
         9c:6b:c9:6c:fc:cf:b3:c5:49:ce:fa:87:c4:1a:b1:9f:04:df:
         1e:8f:75:93:b8:4a:ba:84:19:42:0e:ed:24:cf:17:6f:10:d3:
         75:f9:2f:85:f3:5d:6f:e8:fd:e3:bc:46:25:e2:29:55:cc:0a:
         6c:2f:f8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:14:49 2026 by rpki-client