Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bac619d-9282-30da-a865-8061eb3bd301.roa
File:                     1bac619d-9282-30da-a865-8061eb3bd301.roa (raw, json)
Hash identifier:          D/xzILhTXiwEKf8njFw+q2hhNo3PBi2HvjVMpZ4F8AA=
Subject key identifier:   FD:15:D3:C5:66:68:F5:02:9E:B6:21:83:46:7D:20:D2:F4:F0:E4:1E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D7F9A83B8834C83A19D871880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bac619d-9282-30da-a865-8061eb3bd301.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     2914
IP address blocks:        129.250.42.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:83:b8:83:4c:83:a1:9d:87:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=2801b3ac-57b9-4ee0-825b-e8921867841c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:f4:20:5d:4b:56:79:79:82:14:e2:8a:56:
                    95:ca:de:b6:9c:8e:0b:ae:ec:ff:1a:72:5f:b3:b5:
                    6b:cd:2d:be:3d:ed:42:0c:fe:0b:8b:75:00:de:67:
                    94:2f:c9:cc:d3:0f:85:26:0a:46:7c:86:a3:28:b0:
                    0b:1a:fe:ad:1a:9d:a5:11:6c:7a:2d:1f:37:27:13:
                    75:0f:85:7b:b6:3d:60:78:34:a1:93:6f:ce:d7:c1:
                    9c:c1:d1:64:7f:1d:05:49:26:e2:3d:bb:86:eb:8f:
                    80:61:b6:5e:b2:c7:46:66:fa:1f:78:72:9d:c6:46:
                    8b:59:e3:bb:67:67:3f:55:62:84:84:48:0e:3a:f0:
                    02:32:23:13:9f:bb:30:a7:3a:07:ae:37:c7:5c:15:
                    92:26:14:51:3e:0e:c5:54:26:9d:e4:d8:95:41:25:
                    de:b7:77:83:47:88:15:3d:a7:24:59:73:48:71:56:
                    3d:04:f4:43:81:9b:36:da:41:3d:1c:7f:f7:e8:ed:
                    93:cf:13:51:e4:96:95:41:1b:b3:b5:5a:8e:c6:92:
                    aa:2d:67:2f:de:06:0b:72:a9:c9:bd:01:8a:66:58:
                    22:08:1b:8b:8e:2d:63:d6:60:03:92:e6:29:4d:1e:
                    45:df:5c:af:f7:cc:39:2a:c3:a4:29:89:ad:15:0f:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:D3:C5:66:68:F5:02:9E:B6:21:83:46:7D:20:D2:F4:F0:E4:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bac619d-9282-30da-a865-8061eb3bd301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.42.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:60:49:c9:09:1b:92:ea:b0:e3:1d:7d:3a:ea:51:e4:60:26:
         6d:93:74:54:3f:38:cc:8d:42:fd:4a:22:a4:8c:41:f6:5b:96:
         02:ed:73:ea:b4:06:2b:7f:2e:98:f4:3e:29:19:d9:db:28:68:
         5f:1b:7f:e0:b1:c3:04:df:28:2c:b9:25:9e:68:21:29:68:d1:
         74:ba:02:72:0d:a0:a2:d6:62:fc:fd:54:a2:d5:82:4c:d8:bf:
         0c:b1:cf:e7:19:85:31:d5:a2:3b:59:6f:73:a9:32:1e:51:b5:
         49:d7:4a:b7:9b:1d:98:b1:e9:89:64:ee:9a:3c:13:40:f7:16:
         b5:41:5e:32:23:cd:60:8d:39:18:33:e6:1a:01:0c:39:0c:77:
         66:6e:cd:09:65:43:1d:a1:d9:1a:57:11:3a:5b:55:af:97:00:
         b6:7d:36:4a:a6:7c:44:b2:20:45:59:de:35:9a:04:5a:10:b4:
         78:91:36:77:06:13:5d:e1:bf:9b:a5:cf:c0:ed:b6:15:55:73:
         70:eb:b7:6b:49:0b:37:e2:d2:aa:b9:d3:4f:4e:76:f9:11:37:
         64:e6:11:b4:df:e0:72:d7:c0:75:25:b9:cf:b9:ed:e2:28:52:
         04:65:7f:fe:f9:16:d4:c8:fe:a7:e7:13:75:4d:f4:f7:03:9f:
         0c:11:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:15 2026 by rpki-client