Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/fa9d3924-067d-340a-8eca-545c13686f1b.roa
File:                     fa9d3924-067d-340a-8eca-545c13686f1b.roa (raw, json)
Hash identifier:          Dc0S3ACkOrgsNqFvh108cDzbFWGNE4ML1yw9KhCWns8=
Subject key identifier:   D5:16:20:3D:1C:26:32:C1:10:58:0D:EE:C2:77:25:9B:EB:E2:DA:09
Certificate issuer:       /CN=81b6f65d-ba30-4275-b918-46ded7381174
Certificate serial:       010D0C9F4328584D8EF5567EFEAFB3CE583DC900
Authority key identifier: 08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/fa9d3924-067d-340a-8eca-545c13686f1b.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     399214
IP address blocks:        142.202.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:56:7e:fe:af:b3:ce:58:3d:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b6f65d-ba30-4275-b918-46ded7381174
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=50318544-3d1a-4bc9-97fa-144add2448cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:18:db:54:41:e5:f1:15:9f:15:f5:2f:a6:
                    c8:9c:af:22:d0:7b:d1:6e:72:84:25:e6:17:26:2d:
                    ba:70:1b:0c:fd:dc:7a:53:dd:63:43:ad:5e:87:51:
                    d2:08:e7:ff:05:41:62:25:fc:d8:35:70:2f:2c:c8:
                    44:82:ee:18:32:da:db:7a:db:93:72:af:20:87:f2:
                    5a:8f:a4:07:9d:7e:8a:38:74:da:27:13:0f:61:63:
                    91:c0:3d:f2:b9:4b:34:7e:d0:20:f7:7e:c1:5b:86:
                    4b:ee:c3:28:2a:e6:0c:25:50:26:fc:95:15:ed:66:
                    b3:f9:e4:79:9f:39:8f:6a:36:00:bf:dd:4c:8b:44:
                    e0:54:68:78:b9:64:8f:27:88:c3:e3:cb:41:aa:6f:
                    52:6a:35:b6:b9:a6:bb:0f:75:96:81:00:00:83:95:
                    77:de:c0:7f:3a:43:15:91:ac:e7:3d:96:a6:17:14:
                    97:db:24:27:f3:aa:0e:4c:5f:fe:46:e1:19:3c:c9:
                    58:3f:3e:26:35:92:04:41:b4:1f:87:08:31:0d:3a:
                    18:85:14:14:09:e4:34:8c:65:69:e9:40:02:d4:5e:
                    b9:e5:65:b2:81:26:4c:ed:a6:7b:a9:7d:3f:a7:1c:
                    0f:97:5a:02:cc:f0:ce:9c:3a:97:1b:24:c2:ed:31:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:16:20:3D:1C:26:32:C1:10:58:0D:EE:C2:77:25:9B:EB:E2:DA:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/fa9d3924-067d-340a-8eca-545c13686f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl

            X509v3 Authority Key Identifier:
                keyid:08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:55:e8:20:2e:ed:17:fe:c0:1a:e2:ba:1c:6a:b2:de:c5:79:
         01:60:85:97:d6:e8:bb:b4:3a:30:23:8b:af:37:70:04:17:14:
         bb:ef:dc:f5:5b:97:be:64:c2:68:11:58:93:33:0e:a9:77:20:
         4a:91:f1:5b:6c:7d:8e:ea:5e:8e:b1:74:2d:94:a4:f1:83:f3:
         c7:0e:5d:59:35:71:8d:59:91:9f:12:b1:04:c3:3c:93:9e:8f:
         1b:64:98:7a:aa:4a:85:1b:26:07:45:19:09:d2:81:fc:2e:3d:
         93:a4:27:b0:8e:fe:7e:01:c9:39:3c:fe:03:18:52:9d:cb:a9:
         74:40:fa:09:d4:12:80:aa:d8:42:40:0f:5f:5e:be:de:94:a2:
         c7:bf:51:c9:ae:f8:21:17:22:28:d3:f6:67:bc:1c:31:2a:a0:
         49:81:d8:1f:58:41:d5:ca:77:04:9d:d6:f6:f4:65:4d:39:5e:
         1e:b8:b6:65:9a:d8:b6:5d:0e:78:eb:6e:f9:17:82:a4:b1:f9:
         7f:94:79:eb:93:a8:0c:f6:31:65:d8:3a:45:4f:55:ec:c0:89:
         9d:fa:55:ca:0b:65:04:c4:4e:e2:3e:e7:0a:60:96:f7:a7:35:
         1a:94:ea:81:66:f9:9e:3c:8d:03:71:54:7d:74:7c:16:e1:da:
         99:93:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:41 2026 by rpki-client