Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/475e550c-fbf0-3859-a3cb-87c39eed7a0f.roa
File:                     475e550c-fbf0-3859-a3cb-87c39eed7a0f.roa (raw, json)
Hash identifier:          Rj/YBUV2T93fXK1ano3t2Y5ZHO3yRNm7HSfkr2unOoo=
Subject key identifier:   E4:7A:00:38:45:4B:FD:D3:CF:11:FB:49:D6:E3:7C:E8:9C:D5:ED:31
Certificate issuer:       /CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da
Certificate serial:       010D0C9F4328584D63AFA12863F69C21E8459FC0
Authority key identifier: F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/475e550c-fbf0-3859-a3cb-87c39eed7a0f.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     35997
IP address blocks:        142.249.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:a1:28:63:f6:9c:21:e8:45:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=ab4b2d39-c111-4a33-b458-252628b9b76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:d2:ac:15:c1:cf:51:0c:2a:c9:f4:a1:a0:
                    d4:a9:d8:f7:73:ca:a4:d2:6a:86:f5:d3:a9:f4:b5:
                    ce:66:25:30:9b:19:97:f7:e9:d2:99:b5:39:bc:ec:
                    5d:4a:01:45:1c:bb:80:a2:1b:0a:a5:68:d6:e6:c2:
                    b6:f7:bc:b1:b7:0b:05:18:c2:7b:fe:61:f8:b8:69:
                    b5:9a:9c:4b:7c:d6:fa:71:52:e2:96:a5:63:c6:e6:
                    86:31:09:f6:21:4e:0e:c0:17:24:15:96:2e:47:3b:
                    14:41:83:f5:59:de:f8:aa:9b:d2:a6:83:94:f8:1a:
                    d0:7a:07:4d:b8:75:19:ef:e6:8c:f0:7c:5c:18:a2:
                    3b:9e:cb:90:7a:44:30:9e:66:5e:04:50:26:a7:ca:
                    11:e8:4c:58:0f:6f:3f:08:d8:83:54:a3:b2:3f:7d:
                    36:93:0e:28:89:7f:ae:90:3e:4f:91:0b:47:ee:65:
                    bf:73:39:24:b6:8d:cf:38:2a:8b:f4:0f:48:36:d0:
                    2a:02:b6:18:41:a3:86:80:7b:89:ed:6a:9a:a3:3f:
                    b1:53:3c:e1:f3:96:7d:61:73:74:60:8f:9c:dd:b2:
                    63:0d:49:31:c9:e6:0c:48:b8:4a:59:3b:35:22:d3:
                    b7:c8:46:31:22:c9:e6:d3:f4:d6:b5:10:37:6d:1c:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7A:00:38:45:4B:FD:D3:CF:11:FB:49:D6:E3:7C:E8:9C:D5:ED:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/475e550c-fbf0-3859-a3cb-87c39eed7a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl

            X509v3 Authority Key Identifier:
                keyid:F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c6:2d:02:47:97:04:0d:8e:e6:ec:70:50:df:1f:c5:ec:ab:
         a8:2d:72:c5:30:65:30:4f:1d:74:3c:f3:95:ff:9e:ed:40:45:
         15:cd:f3:2f:8a:cb:87:b4:6e:47:09:77:8f:6d:6f:5b:0c:c9:
         5d:8d:b2:18:c0:e3:cc:db:6b:7f:c1:45:63:f3:a7:4d:9a:e4:
         f3:1e:48:7e:db:76:ed:ab:c6:84:da:05:fd:85:ec:2a:9e:b0:
         de:ad:d7:22:c1:32:ac:13:75:7b:a8:7f:c2:66:6a:d9:24:57:
         ca:a1:d8:7b:b7:15:0b:96:44:c3:5d:fe:02:0b:b1:2c:1c:75:
         34:24:e3:02:60:6f:0b:53:97:b1:dd:1f:77:e2:bd:b7:c7:8c:
         9f:c0:15:6c:c8:08:83:31:a7:b8:30:b0:fd:94:cd:cd:51:4a:
         62:59:18:1e:b4:7f:35:9c:d5:fd:82:49:83:1f:4c:c2:c9:f9:
         aa:cd:eb:5f:07:b9:df:c8:cc:fc:7f:ad:23:68:01:6b:33:6a:
         4b:80:39:af:f7:3c:cb:4d:e3:73:ff:ec:c4:4b:14:ea:38:3d:
         1b:7c:63:d9:74:5d:5a:c7:49:24:b8:d1:d6:82:14:d2:32:69:
         c4:d9:54:47:71:17:7b:65:71:ea:14:a6:72:2b:21:73:af:bb:
         6e:d8:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:39:07 2026 by rpki-client