Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8bd9e57f-1fcf-37e7-9f5a-0a6497324f78.roa
File:                     8bd9e57f-1fcf-37e7-9f5a-0a6497324f78.roa (raw, json)
Hash identifier:          7ruhlxNVA9tziRWQKrOlYvCoWzZz62uv+2Qu/kmt0To=
Subject key identifier:   A0:68:30:EE:89:93:BF:27:32:69:36:D9:0E:32:B6:5F:2E:09:56:BE
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F4328584F612D5B280B83C6074ABFD380
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8bd9e57f-1fcf-37e7-9f5a-0a6497324f78.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     401746
IP address blocks:        142.248.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:5b:28:0b:83:c6:07:4a:bf:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=a43aa8f7-f1a2-41af-9a5e-0c8291c6ac20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:f4:ab:a2:1c:21:2b:7a:a4:8e:1e:1d:89:
                    73:d1:ee:45:ce:db:81:ce:45:71:23:dc:7d:0a:c5:
                    88:8a:be:1d:ca:40:c8:2b:5c:0d:52:bf:7f:82:4e:
                    fb:4d:ae:c8:c4:6b:9b:2e:19:35:b6:54:fe:d3:18:
                    59:a1:bd:3f:97:20:7e:c4:a5:48:8d:95:bc:db:4b:
                    7b:2c:16:7c:54:29:6e:96:fb:4d:e3:37:a6:6f:ae:
                    45:ea:27:8b:dc:2d:bc:75:89:01:31:e5:c1:de:16:
                    8c:82:fc:7a:39:58:a5:ca:e9:e6:d4:a9:22:1d:38:
                    ca:17:c0:c7:5e:d9:22:96:cf:ab:ea:aa:6d:91:f5:
                    b1:74:80:c0:9b:e0:55:95:59:a8:f8:62:af:95:ee:
                    c0:dd:c0:86:e2:8f:8b:77:c0:51:c6:37:83:ee:4f:
                    17:cf:4f:db:da:9f:3d:a7:83:8b:91:06:c7:b5:03:
                    13:56:c2:97:03:9d:53:e8:63:06:8d:29:7a:26:bd:
                    0f:46:b6:82:1d:69:9a:c7:ae:7d:bc:62:d9:01:a7:
                    7e:72:68:ea:32:0d:1d:20:2f:97:3a:f4:70:7d:d2:
                    f3:74:81:28:57:40:b1:0f:69:96:e1:c3:13:90:83:
                    e9:cb:77:ae:54:b6:9a:45:9a:bc:1f:90:34:40:89:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:68:30:EE:89:93:BF:27:32:69:36:D9:0E:32:B6:5F:2E:09:56:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8bd9e57f-1fcf-37e7-9f5a-0a6497324f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:50:9c:79:fd:39:e1:f6:87:30:3a:6f:18:07:74:60:90:10:
         1b:18:a3:62:d5:64:c8:1f:53:86:9d:9c:bc:f0:d9:2b:ba:d4:
         67:fb:e1:b0:fb:59:f8:4b:d3:4c:63:40:cb:1c:cd:95:f1:a2:
         17:a3:4b:d1:21:70:5f:e2:42:c4:fb:60:85:10:e6:4c:c0:f7:
         8d:63:a0:7b:58:69:50:f6:91:76:fe:3f:1b:f1:ef:e9:c7:08:
         a8:4e:31:dc:77:19:d4:10:cf:9e:0a:ab:f1:ee:4e:59:47:40:
         4e:7a:2c:f5:78:bc:a0:9b:92:ed:bb:a2:e1:0f:73:fe:f5:78:
         02:3c:b1:c1:7e:65:37:87:80:e5:bd:0e:30:92:26:5e:37:58:
         b8:47:3b:3c:5e:1c:20:4c:cc:66:79:03:25:5d:a1:37:59:7f:
         8e:f8:72:70:7c:6c:a8:89:1e:f6:ec:d5:2b:9a:6b:ce:60:98:
         12:5f:78:a6:30:a8:e9:9b:57:d0:c3:5f:63:d7:60:1a:d6:97:
         de:fc:c4:6e:40:10:8d:20:6b:45:ee:2d:9a:d0:f3:b3:78:5b:
         80:b7:45:19:72:3e:8d:a4:16:69:a9:f9:3d:df:2e:c7:ff:cf:
         8f:e4:77:f9:b6:6b:5f:83:8f:a8:4c:c1:86:bb:75:da:47:68:
         be:d7:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:12:00 2026 by rpki-client