Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb8d36e9-7100-333a-ad6d-487a68661d9e.roa
File:                     bb8d36e9-7100-333a-ad6d-487a68661d9e.roa (raw, json)
Hash identifier:          GE2gJXrkRXpqbcEH5cG0rAQP/X0WgaB+h2X4GEWxjkA=
Subject key identifier:   FE:14:63:83:B5:D8:57:F9:BD:ED:62:4A:F5:A2:E8:B0:74:01:A8:CD
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584EEA875803CC4D849BBEDD4F20
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb8d36e9-7100-333a-ad6d-487a68661d9e.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     271
IP address blocks:        142.231.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:58:03:cc:4d:84:9b:be:dd:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=c6864df9-bd76-4a48-9ccf-e3de319d7f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:ac:85:ec:6a:22:a8:eb:51:5a:6e:7f:33:
                    99:db:f6:06:2f:33:a5:80:6b:25:79:3c:6d:7c:f6:
                    cd:1c:c8:61:ad:e3:79:77:93:b0:25:50:21:ae:4b:
                    bd:d5:c9:1e:9e:fa:58:97:24:bb:b7:cb:81:4e:89:
                    d2:98:68:af:8f:10:d1:07:3d:6b:05:cf:01:ba:ff:
                    3c:aa:62:c0:7c:ae:c1:43:24:07:7d:5a:86:00:13:
                    e8:2f:6a:84:e7:6f:c4:c6:4c:87:95:d2:57:5e:90:
                    d3:5f:0a:ff:85:5a:6a:90:cd:45:86:6a:48:1e:d4:
                    38:0d:70:fc:49:07:49:67:c1:03:22:4a:1c:a7:68:
                    c1:4c:bc:ae:01:95:39:ac:1e:71:0d:2e:46:0c:38:
                    49:2c:5b:67:e0:88:0c:7a:69:2e:d3:d0:c8:24:cd:
                    8e:45:da:aa:c2:79:a3:52:a6:e5:cc:35:35:31:c6:
                    cb:87:5e:8d:12:b1:6a:27:39:57:3d:df:87:ea:82:
                    20:4c:b7:dc:2c:77:91:4d:e8:f1:58:f1:48:62:f5:
                    01:03:1a:94:6b:f4:3e:f2:3c:1a:9a:13:34:9b:dc:
                    8c:e5:ed:bc:de:c7:8f:bc:27:8b:e6:9e:21:5d:84:
                    0c:1b:9b:99:a7:0c:a6:dc:ee:dd:1b:c6:85:fd:12:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:14:63:83:B5:D8:57:F9:BD:ED:62:4A:F5:A2:E8:B0:74:01:A8:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb8d36e9-7100-333a-ad6d-487a68661d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:10:60:99:1f:d2:d6:51:15:89:fd:a5:cf:4a:df:e0:52:48:
         7f:f5:8c:19:af:82:02:65:9a:df:c6:29:ff:f9:b3:f9:a8:cb:
         71:9f:c3:19:79:44:0e:55:b1:48:05:10:e7:d7:bd:b9:fd:77:
         97:ca:1e:d0:6c:60:c7:cd:ac:87:cd:1e:27:35:f0:1b:f8:f7:
         9b:a5:90:4e:9f:b5:e6:ee:54:bd:52:b3:76:b9:83:02:b2:f6:
         b3:10:40:d4:24:04:d4:87:98:e2:e3:4f:7e:1f:ad:fa:4b:3a:
         e8:63:b4:d0:da:7f:ad:cd:fa:21:b1:2b:2b:2f:61:21:2b:3d:
         ca:91:c7:da:a9:73:af:93:a0:c9:e5:22:9b:e5:4f:c5:e0:f7:
         c1:89:28:9f:8f:71:db:9b:17:d3:f1:4b:e1:40:84:e6:f0:51:
         5d:8d:3f:b7:6f:af:ee:2b:a0:50:f4:fd:a3:76:5d:e2:62:f7:
         86:7b:e3:55:2d:09:d7:e9:d4:70:ac:45:69:bf:b6:dc:1e:6f:
         0c:03:d5:f9:2d:0d:fc:2e:a5:d2:41:38:d8:1d:c7:f6:5d:4b:
         b8:15:ac:81:8c:c4:9f:71:0b:1d:37:30:07:eb:ae:2c:dc:14:
         3c:bc:ff:8d:06:6f:03:d5:51:42:75:f2:5a:21:2a:5e:eb:51:
         8a:cd:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:56:35 2026 by rpki-client