Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa
File:                     c2216585-71fc-34f0-bfb6-1c152fd66dba.roa (raw, json)
Hash identifier:          9k0BRaj0We6c2T/VvXzARdjBDKS9IarTpVYLEutsaDs=
Subject key identifier:   2E:D5:F7:BA:11:DA:0F:6B:2A:70:08:FD:1B:B4:71:CC:19:99:43:82
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584CB981D083C75E955FF1BE0F80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     18659
IP address blocks:        147.249.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:d0:83:c7:5e:95:5f:f1:be:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=e159e8c2-e621-4e9a-b43b-59f4aae090b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:66:f4:1d:84:62:51:54:4c:ab:41:6b:ff:
                    3f:da:25:96:87:da:f2:28:64:41:0e:c9:c4:34:76:
                    f2:df:08:fa:d2:04:e4:53:c7:45:49:b0:bb:3e:70:
                    42:2a:c6:43:a5:c8:94:77:b7:ab:eb:d6:26:5e:ca:
                    b6:cc:5a:eb:ee:56:aa:29:af:1b:f7:34:d2:59:af:
                    c5:27:9f:1e:50:a7:18:a0:c1:4a:82:eb:ff:a8:fb:
                    c1:47:9e:cd:9d:47:9f:d9:d9:d0:34:0f:5e:ed:2a:
                    f9:8d:ca:29:88:59:d6:06:fc:2b:3f:8d:2c:99:38:
                    6e:70:3f:32:4c:0b:74:f1:51:08:71:60:03:31:ef:
                    18:25:13:78:b5:53:b1:1d:f3:d9:30:4a:eb:83:e9:
                    96:7a:cb:09:62:c6:b3:a2:40:10:d3:25:3c:92:4a:
                    e0:69:f5:67:e9:09:b8:49:c0:fe:ea:8d:fe:ca:d5:
                    e8:35:88:72:bc:6d:ec:77:51:37:9c:40:de:79:11:
                    af:5a:c8:b9:f0:a8:9f:33:bc:3a:75:0e:a7:7e:d0:
                    fd:5c:c4:2f:65:22:e5:34:a8:0f:ec:c0:fb:76:fc:
                    f3:9b:22:5a:7a:08:0c:e1:af:c3:50:44:a7:f1:ce:
                    b7:43:63:65:ae:f9:f4:e3:49:5d:a4:d4:25:53:b8:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D5:F7:BA:11:DA:0F:6B:2A:70:08:FD:1B:B4:71:CC:19:99:43:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:18:7e:cc:c4:e3:c8:58:03:14:cf:d7:0a:8a:9f:6c:61:
         0a:02:e6:ab:74:85:1f:8c:5d:46:8e:55:fa:21:55:f3:17:f8:
         6f:1c:ea:18:ef:5c:7b:2c:bb:e9:ba:c2:ec:47:0e:7e:21:9f:
         89:d0:0f:68:76:46:68:e4:cd:f1:32:c6:6d:6f:a7:cb:85:67:
         78:90:00:8c:e7:93:7e:db:c9:b9:a2:a2:2e:b6:62:ed:ea:8e:
         b9:b0:b7:8e:36:18:00:5c:6a:2f:59:22:4e:fa:7c:eb:6d:de:
         eb:14:ad:99:f9:4b:d9:1f:b1:40:c7:97:7e:d7:15:d6:73:00:
         0a:0e:54:64:c8:37:3a:06:d0:d3:6c:cc:75:cb:76:e9:14:8a:
         f1:f2:a3:78:e9:de:67:d4:c8:2c:f6:58:8e:37:b1:87:d2:25:
         8a:3b:d0:2e:96:57:b3:28:0f:8b:bc:fb:62:f7:3b:ff:ac:b0:
         f4:17:e7:41:94:1f:0e:e5:f2:11:af:06:7c:31:6c:35:60:65:
         6e:61:63:51:02:35:74:c2:99:ee:c9:97:09:3d:4a:e7:e5:f2:
         d0:9d:ea:d7:61:37:a9:8a:41:3e:70:08:96:db:b6:2b:52:e3:
         de:4f:bc:fe:c1:7e:ee:13:1d:00:ae:4f:35:46:23:0f:c8:1b:
         bb:44:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:51 2026 by rpki-client