Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c46125bc-8653-3254-913a-bbf5ba1b2a84.roa
File:                     c46125bc-8653-3254-913a-bbf5ba1b2a84.roa (raw, json)
Hash identifier:          fLgMj93szcvbIk4WDpCWqZUfsUcXFUNAqnAG0SG849A=
Subject key identifier:   60:91:CC:D3:7B:12:8C:24:3A:76:2D:63:B1:D6:7F:29:59:4F:6B:79
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFE1D3260FAB5EBEE47880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c46125bc-8653-3254-913a-bbf5ba1b2a84.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        108.162.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:e1:d3:26:0f:ab:5e:be:e4:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=b232e098-209a-4b8c-aa68-c6ba9b19fbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:6d:88:d3:c9:ec:b3:03:38:69:cf:1b:10:
                    c3:79:6e:91:74:1c:10:4b:90:d6:d7:27:7d:0d:01:
                    ab:68:23:96:28:75:67:01:e6:7e:a5:73:02:e0:19:
                    1f:71:46:fb:01:1a:25:0e:43:f4:c4:03:43:cf:5f:
                    a9:65:93:f5:35:0a:69:f3:0f:eb:10:9f:7b:ab:2b:
                    40:76:e1:59:ca:f0:4d:01:00:bb:d4:cb:47:ba:6a:
                    0f:70:8c:d6:6e:17:32:bc:d8:7a:77:16:d8:b2:d9:
                    1b:be:14:0a:0e:fa:67:e1:ff:ec:aa:dd:d7:10:d1:
                    3c:4e:51:69:86:02:ee:c4:31:f7:47:65:06:77:40:
                    97:d0:a2:dc:55:dc:a9:4a:be:c9:6b:bc:8e:b9:9a:
                    84:ef:50:e9:23:2f:42:39:35:a4:bb:b7:11:b8:fa:
                    17:a0:83:f4:e0:23:06:ea:ba:39:22:54:22:87:56:
                    2e:b3:47:f6:22:58:1d:7e:9f:d2:35:b4:73:2c:03:
                    69:32:33:2f:ab:1e:b7:ee:9f:22:e8:fd:7a:82:ee:
                    a9:b1:ab:9c:af:59:da:25:8f:d5:27:85:bc:74:95:
                    b5:49:db:99:15:74:88:e5:59:c2:c6:c7:61:69:42:
                    96:03:97:e8:7a:3c:86:af:46:a4:f3:da:15:01:10:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:91:CC:D3:7B:12:8C:24:3A:76:2D:63:B1:D6:7F:29:59:4F:6B:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c46125bc-8653-3254-913a-bbf5ba1b2a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:33:5e:32:99:bd:e8:1e:50:1d:0b:0a:a3:37:56:0e:8e:b9:
         12:2a:f6:7f:fa:f8:e3:d5:68:72:30:53:91:57:09:ef:3f:e6:
         04:fd:c6:1b:9f:6d:6a:07:f2:f7:b3:71:85:7d:5d:aa:d7:10:
         72:b5:75:ba:47:98:36:f6:67:00:1f:4a:27:d8:65:c8:c7:81:
         11:9b:b7:f4:ec:b0:84:53:c3:cb:44:26:d2:b3:e0:26:8b:64:
         ae:0a:51:30:c7:47:cb:2b:6d:ea:8c:36:7d:43:87:65:cb:3d:
         1e:7f:4a:44:60:56:41:93:0d:ab:07:95:31:95:68:cb:38:f6:
         c7:71:89:d5:6a:78:c1:bd:2f:64:53:d2:56:8f:6f:59:d0:1b:
         e6:94:ec:15:90:68:dc:fe:cf:ef:7d:5f:f9:7c:d9:7c:36:81:
         15:06:e9:5b:06:cf:71:a7:71:82:0a:fc:ad:a8:46:6e:a6:36:
         3e:0e:57:21:c5:fc:0f:34:c9:90:bc:29:f8:61:2e:60:e5:d7:
         e5:97:70:e2:5b:f9:1d:25:1b:75:93:1e:e2:71:14:c5:39:f6:
         be:cf:83:6e:d3:99:15:be:cc:10:e2:ac:40:4d:cb:4a:d7:cf:
         86:5c:a8:f7:6c:94:a9:d7:cd:06:14:c2:d6:a4:37:3f:9f:f3:
         bf:07:61:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:29:33 2026 by rpki-client