Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/72f341ef-947d-3ff6-91fd-952b7395e01c.roa
File:                     72f341ef-947d-3ff6-91fd-952b7395e01c.roa (raw, json)
Hash identifier:          r+eD2LgcxywMVhYSx/Op0SImA30Fvph4CtWJ9rpd/m8=
Subject key identifier:   E4:26:19:DF:87:B8:F2:81:D8:CA:9C:98:4B:52:5C:00:E4:F3:1B:DF
Certificate issuer:       /CN=6e15809f-b3e5-4fe0-8b06-34bb98746e6b
Certificate serial:       010D0C9F4328584DE1506FAF8CE925C70BA3A430
Authority key identifier: AE:37:B0:7D:8E:42:6A:A2:D2:32:E9:BD:D0:A4:1F:00:7A:C9:3E:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/72f341ef-947d-3ff6-91fd-952b7395e01c.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     401522
IP address blocks:        142.248.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:6f:af:8c:e9:25:c7:0b:a3:a4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e15809f-b3e5-4fe0-8b06-34bb98746e6b
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=04b0da89-42c2-4ada-83f2-932396345f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:64:b3:d4:4b:ad:d0:cf:89:fa:6b:12:8f:
                    b0:76:af:bc:c7:f1:91:7f:76:e6:2b:8a:64:80:85:
                    ea:1c:91:ee:a9:f3:fc:89:6d:fe:4a:30:62:f3:e2:
                    c8:6c:37:78:29:f2:55:ed:dd:3e:b2:f5:de:0b:1b:
                    3d:35:02:21:b5:7c:ec:9e:fe:2c:41:32:be:41:03:
                    9a:b4:8b:00:53:a0:46:78:16:b2:b8:d5:4d:66:ff:
                    bb:43:47:2a:24:a1:d5:0f:25:3b:6c:e7:9a:8a:b8:
                    ff:9f:27:ac:10:34:c9:1b:d0:45:e6:58:d2:81:d3:
                    f9:30:0d:be:7d:46:1b:c5:fb:1c:b4:b4:a4:56:71:
                    a6:50:0e:d7:c8:92:69:1c:04:7c:72:0f:b8:7d:6d:
                    16:6e:f7:5f:44:16:5a:f7:ba:99:23:9a:ff:3c:d7:
                    e4:d3:89:d3:92:97:31:9b:07:7c:e9:31:a5:1a:96:
                    f5:62:a0:44:cb:5e:91:ed:07:e1:1d:67:f0:00:25:
                    e8:12:b4:7a:4f:8d:55:ad:3e:45:5f:2d:d9:12:cb:
                    58:d1:b7:46:9d:b9:ff:22:d8:ea:4f:00:56:6c:c4:
                    c1:17:fc:6f:1c:a4:97:85:65:ee:61:4b:04:28:ec:
                    40:2a:bc:d1:47:b7:30:73:38:f7:dc:3c:1b:77:0a:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:19:DF:87:B8:F2:81:D8:CA:9C:98:4B:52:5C:00:E4:F3:1B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/72f341ef-947d-3ff6-91fd-952b7395e01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.crl

            X509v3 Authority Key Identifier:
                keyid:AE:37:B0:7D:8E:42:6A:A2:D2:32:E9:BD:D0:A4:1F:00:7A:C9:3E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:64:b5:bb:ab:57:00:9b:99:c2:94:e0:26:92:77:11:88:f1:
         17:50:2a:69:7b:77:1c:9a:de:8e:88:cd:fa:6b:7a:8f:6b:63:
         66:ca:77:ab:9c:6f:ae:a8:23:45:b4:f8:47:8c:81:c6:1a:d1:
         bb:78:39:ad:99:20:18:94:7e:05:e7:86:88:4b:c8:0a:30:50:
         c4:65:b2:d3:f9:75:ee:b1:55:a7:de:aa:2c:24:b9:5b:01:37:
         70:9c:bb:2e:6e:3f:f3:8e:73:19:b2:b2:81:88:9f:4d:d8:d9:
         1a:c7:b8:1b:5a:59:ea:cc:d4:b2:b3:60:89:cb:ee:05:5f:0e:
         26:cc:bb:44:79:1f:27:15:34:d6:68:cf:88:8f:a6:30:a3:9e:
         7c:f6:e4:51:aa:1f:b9:78:b7:bc:cd:43:fe:84:47:9b:32:54:
         27:4f:28:cb:f8:3b:3a:67:48:df:10:1b:90:7d:14:f5:6b:aa:
         0e:6c:93:61:9f:b8:87:6a:30:07:a7:b1:41:14:e4:07:5b:32:
         6c:97:7e:d0:85:6f:68:f9:c8:41:a5:b1:ad:fb:1b:85:fa:5c:
         23:5d:8f:34:a8:df:e7:66:4c:6d:3c:4c:40:20:47:74:16:58:
         db:db:17:3e:f1:4d:71:24:4e:2d:ab:e9:1a:8d:6e:b7:57:3e:
         c7:32:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:41:16 2026 by rpki-client