Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/f1e1ad5a-4fd1-3243-a275-3207d54ad257.roa
File:                     f1e1ad5a-4fd1-3243-a275-3207d54ad257.roa (raw, json)
Hash identifier:          GY+3/FmgPw27NKxcVc5TVaYT581UnhRtqAsKz9mR8Rs=
Subject key identifier:   4A:CD:49:B3:4A:6E:3A:31:B3:77:D1:0E:6D:CD:E6:40:5E:EE:96:39
Certificate issuer:       /CN=4783e783-66a6-4b00-92dd-b4f5070c6029
Certificate serial:       010D0C9F4328584D6AAA65112E15E2241E000CA0
Authority key identifier: AC:82:67:8B:FE:50:81:A3:84:19:CA:03:6A:3C:49:9C:63:7E:15:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/f1e1ad5a-4fd1-3243-a275-3207d54ad257.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     23156
IP address blocks:        142.248.221.0/24 maxlen: 24
                          170.39.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/4783e783-66a6-4b00-92dd-b4f5070c6029.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/4783e783-66a6-4b00-92dd-b4f5070c6029.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:65:11:2e:15:e2:24:1e:00:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4783e783-66a6-4b00-92dd-b4f5070c6029
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=8696ea5d-4f0c-4aac-90c8-ca2fa45e1937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:04:6e:f7:b8:31:89:f4:a7:20:b2:99:4b:
                    af:f8:37:f6:bf:b2:c9:fc:39:9f:d4:0e:7b:c8:8c:
                    c9:08:2e:58:8c:9a:5e:e9:1c:0c:ac:a3:29:dc:49:
                    d1:df:c7:7d:79:d1:3e:97:42:9d:ce:97:80:c4:8b:
                    4d:c7:42:97:fd:3c:54:83:e3:e6:ac:48:74:0b:4c:
                    63:3c:bd:66:5e:80:1b:2a:e8:32:64:87:ac:27:e5:
                    86:37:2e:6b:c8:25:fd:93:c7:0d:f4:1e:78:a7:7e:
                    c7:55:34:88:8e:f6:0d:06:29:3b:bf:66:c7:80:77:
                    02:fa:75:94:28:cc:6f:83:cf:7a:67:f4:fd:8a:8e:
                    f9:68:ef:af:43:80:04:4d:a9:31:b8:f5:7a:04:60:
                    e8:76:2d:27:60:06:30:8f:fa:6b:20:f8:b9:cc:12:
                    5d:ea:e8:b0:ca:f9:46:35:22:ad:ba:bc:b4:00:f3:
                    30:0a:1a:22:59:f6:91:c3:32:55:94:e1:ee:76:1e:
                    a0:ae:c1:6e:cb:d6:14:72:6b:f7:d6:dd:e1:f3:10:
                    8d:9f:2b:47:16:06:42:ff:04:b3:3c:e8:7f:5b:81:
                    a8:2e:24:85:6b:4f:44:d4:c9:a5:74:55:63:1f:5f:
                    e7:11:b4:e5:46:10:74:3a:f1:e6:07:65:51:f8:ef:
                    31:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CD:49:B3:4A:6E:3A:31:B3:77:D1:0E:6D:CD:E6:40:5E:EE:96:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/f1e1ad5a-4fd1-3243-a275-3207d54ad257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029/4783e783-66a6-4b00-92dd-b4f5070c6029.crl

            X509v3 Authority Key Identifier:
                keyid:AC:82:67:8B:FE:50:81:A3:84:19:CA:03:6A:3C:49:9C:63:7E:15:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4783e783-66a6-4b00-92dd-b4f5070c6029.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.221.0/24
                  170.39.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:71:69:ad:71:18:6f:88:0a:4b:a7:f4:83:30:bf:a6:4a:ff:
         ee:d3:e6:4c:9f:29:52:aa:05:cd:30:e8:b9:05:09:fc:59:d3:
         0c:97:a5:1c:1b:b2:86:c9:c3:ff:93:53:cc:ab:ca:7a:3d:26:
         c5:7d:c7:e8:c6:52:43:9e:3b:d7:d2:a7:04:bc:05:63:2e:9b:
         bb:ca:9b:ee:ad:11:1b:78:1f:eb:80:aa:7e:16:1e:70:1f:96:
         35:f7:8a:db:e0:16:58:2e:4c:85:b7:2f:fa:53:5b:26:91:2a:
         06:1d:47:a8:ff:bf:05:97:37:63:96:7c:83:b2:38:48:d5:8b:
         1b:c5:99:e0:94:a1:05:2c:54:28:b5:af:65:ec:e8:17:a8:1d:
         03:c5:83:c3:79:18:cf:8f:ad:88:cd:d3:b0:87:8e:06:14:93:
         c4:f0:37:46:82:66:99:9e:b5:50:cd:17:f5:f1:20:2a:c2:90:
         b7:00:97:8d:5f:00:ef:c5:b5:68:da:35:bd:f8:e9:39:37:1f:
         e7:61:e8:f6:a0:67:4f:cd:50:f2:da:dc:cc:50:c7:cf:a8:9f:
         e5:54:f7:73:57:57:07:dc:33:3a:72:6b:2d:7e:04:5a:2e:90:
         d5:12:24:40:89:63:37:a0:4c:4c:a1:49:8d:bc:46:85:03:e1:
         4a:e5:6c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:28:39 2026 by rpki-client