Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/0f5e4f56-f2dc-36c0-8326-e6a3259718c4.roa
File:                     0f5e4f56-f2dc-36c0-8326-e6a3259718c4.roa (raw, json)
Hash identifier:          0rjALjOA7xMWSTYCEdOm+NWKN7CGBEPNjPL2UtDrNLY=
Subject key identifier:   3E:07:2D:56:66:42:EA:BE:2E:BC:B9:85:74:E2:21:03:5E:04:C1:35
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584D826523CD70468F786CE42C00
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/0f5e4f56-f2dc-36c0-8326-e6a3259718c4.roa
Signing time:             Wed 15 Apr 2026 01:00:24 +0000
ROA not before:           Wed 15 Apr 2026 01:00:24 +0000
ROA not after:            Tue 14 Jul 2026 01:00:24 +0000
asID:                     1004
IP address blocks:        142.248.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:82:65:23:cd:70:46:8f:78:6c:e4:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Apr 15 01:00:24 2026 GMT
            Not After : Jul 14 01:00:24 2026 GMT
        Subject: CN=b5a452d1-fca6-4198-a457-1341b010e225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:77:80:46:23:c3:e2:98:25:6d:87:bc:cf:
                    2d:3b:8b:54:2e:b2:a2:1b:3b:61:7c:ca:fb:64:49:
                    50:1d:0d:8e:27:0b:6b:07:de:ff:f7:c4:26:6e:b6:
                    3c:be:14:a9:1d:1d:3a:72:ca:6a:1a:63:3e:bc:a9:
                    e1:01:13:7f:04:81:4f:25:ac:84:e6:f9:67:25:dc:
                    35:88:43:35:fa:fb:cf:94:cc:86:d4:70:59:46:3a:
                    f4:10:b1:a8:21:8e:35:4a:28:74:42:a0:2c:dd:a9:
                    54:73:f4:fa:0e:56:99:79:14:32:7c:1b:8d:9f:8a:
                    1c:f7:9e:bc:84:52:45:a0:7b:3a:9f:3e:74:5c:f2:
                    35:18:4c:fa:a2:16:5f:43:98:89:cf:4f:f2:14:72:
                    4b:fe:73:6d:df:7a:df:01:7a:2d:83:0f:62:38:7f:
                    0e:43:f1:9a:6a:65:82:9e:ff:40:78:a1:4f:d5:a4:
                    94:f7:d6:14:0a:5c:95:1f:5e:3e:80:0f:25:61:d1:
                    f2:de:f7:b5:6f:d8:39:e8:ea:25:67:52:8c:3d:65:
                    5e:d4:57:f2:57:fa:48:0f:22:a2:23:50:66:b4:9f:
                    7d:c0:a6:73:e9:96:bd:e9:ec:71:85:c4:53:6e:ac:
                    25:06:f4:a0:c0:e5:28:ee:5a:32:c9:14:d5:3f:12:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:07:2D:56:66:42:EA:BE:2E:BC:B9:85:74:E2:21:03:5E:04:C1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/0f5e4f56-f2dc-36c0-8326-e6a3259718c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:1e:f8:b0:78:b5:54:bc:5a:2c:83:48:3d:96:b5:04:aa:
         43:52:df:e1:3d:28:50:67:4b:c3:68:59:fb:1c:48:87:35:b8:
         5e:d7:62:34:e0:f0:2f:23:9b:4d:a5:df:34:77:09:a5:ea:f4:
         92:68:45:d9:fd:e5:6f:98:75:a7:b5:ca:7c:9d:6e:01:a6:5f:
         37:4e:33:5f:13:21:49:3f:c9:e9:42:ee:e2:02:58:0d:97:a9:
         22:cc:25:04:da:80:ef:73:d3:0a:88:ee:76:e3:85:67:52:82:
         00:2b:a3:cc:68:dc:d9:00:c3:32:20:8f:8d:df:f8:66:e4:6f:
         c9:6f:40:4e:2a:8b:e5:21:9a:4e:a4:44:04:42:b3:0c:93:c5:
         df:85:20:03:4d:3c:6d:62:af:88:f1:3b:68:45:54:ac:5e:1f:
         bf:21:e9:93:e4:f4:78:e9:26:d9:a9:e9:99:6d:8d:d3:e0:24:
         91:7d:c0:c0:9d:ba:cb:e5:a9:0d:d3:8d:8c:85:6c:ac:05:f9:
         26:72:cf:7d:11:7f:e3:d7:34:58:fb:06:d5:54:b0:06:c2:92:
         6b:a1:c8:9c:e6:49:e3:cb:6a:9f:c9:65:9c:98:1c:57:10:3c:
         90:af:49:5d:5f:f9:10:c1:32:33:f4:80:05:48:1f:41:80:a2:
         8e:20:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:20 2026 by rpki-client