Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/8df91947-b536-33c6-9ae0-b52e0ecd5341.roa
File:                     8df91947-b536-33c6-9ae0-b52e0ecd5341.roa (raw, json)
Hash identifier:          INfKmjL+AwZqNL5j+CapeKEPJC8fGyx4L0/StgapCag=
Subject key identifier:   F2:5C:84:ED:A1:4C:B9:05:24:FE:9E:B5:E2:E0:64:43:DE:27:CC:16
Certificate issuer:       /CN=51dcdcba-3766-4509-a479-bbf02514719f
Certificate serial:       010D0C9F4328584CCA41D5B072575F8730C7A080
Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/8df91947-b536-33c6-9ae0-b52e0ecd5341.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     13347
IP address blocks:        142.249.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:d5:b0:72:57:5f:87:30:c7:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=c7921a07-3a85-4bf3-97a9-4fc005b85708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:2e:56:e8:75:8a:6c:42:27:63:5f:38:92:
                    7c:78:33:1e:1d:af:75:d8:3e:63:7c:c2:e5:56:56:
                    e5:14:b7:3d:78:bf:c0:53:f3:93:d0:e8:67:6d:54:
                    af:1d:ee:b2:82:8c:23:f9:97:09:27:e6:d2:7d:d8:
                    37:d8:41:38:d9:f1:fe:1f:a5:c4:02:62:15:86:41:
                    88:fa:91:46:c3:a2:33:6a:bd:9f:d1:f8:33:7e:ab:
                    55:07:97:5e:d9:12:36:8a:b2:e1:31:48:13:ae:26:
                    15:dd:5c:30:9a:3e:72:41:c6:ef:8b:6b:78:24:3f:
                    01:62:42:74:52:71:56:d8:94:2e:ed:5c:bf:e1:41:
                    2d:a2:1b:fc:7a:97:5e:a2:71:e6:e3:c8:2d:50:dd:
                    42:fd:44:b5:a7:84:be:91:06:a0:a8:1b:50:94:af:
                    d1:8f:69:e6:85:4f:8b:ec:d1:ad:0d:7a:65:70:84:
                    49:f7:5d:99:bb:a7:3f:eb:d5:fb:af:ae:62:83:56:
                    e2:d5:8f:07:30:3f:4f:c7:ef:b2:38:be:20:06:71:
                    09:7f:7d:76:d5:81:84:66:65:cd:64:18:66:48:78:
                    6e:78:b9:d7:27:a2:a9:5f:88:15:e9:07:7d:62:bc:
                    d6:e2:bf:02:fa:23:2f:3e:63:21:1f:df:81:78:d9:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:84:ED:A1:4C:B9:05:24:FE:9E:B5:E2:E0:64:43:DE:27:CC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/8df91947-b536-33c6-9ae0-b52e0ecd5341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:a2:32:70:74:ca:04:6d:0b:89:77:1d:2f:d7:ca:74:fe:
         50:00:b0:fd:de:67:31:4b:39:ff:6e:9c:b8:a4:72:9d:2d:11:
         b3:f7:1d:1b:f6:b5:cf:00:36:02:c5:8c:5a:fd:6c:25:ba:58:
         a8:61:fc:d0:21:50:4d:88:a9:14:ce:80:e6:50:fd:9a:72:29:
         bf:6b:3e:18:b3:07:04:b4:47:54:84:19:39:fc:0f:9e:3a:96:
         8c:a0:73:63:d5:aa:bb:a6:6b:97:2e:b2:78:8a:b9:49:8a:3d:
         41:e6:09:85:67:77:4f:a4:b1:14:0a:e5:d4:10:91:df:cc:3c:
         f0:22:db:9e:db:47:57:3f:31:b0:d5:c5:50:fb:13:aa:a3:0a:
         80:02:ec:5a:80:98:46:02:85:25:bf:b1:7f:9f:c2:22:5b:05:
         0a:ca:d4:f6:d8:ca:0a:7e:34:4c:57:60:59:0a:4f:70:5d:4e:
         84:1e:7e:4a:c6:1e:6a:f2:c1:a9:3d:bd:32:d6:d9:48:8e:1c:
         57:db:f4:51:52:9f:a2:b1:48:3a:fa:3c:86:e9:75:69:dd:ec:
         63:3d:06:bc:6b:41:73:e9:09:31:e7:a4:7d:42:e7:9b:82:72:
         86:9e:03:26:d2:2e:92:b9:25:e0:06:b7:5c:9e:06:c6:e8:77:
         0c:6e:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:21 2026 by rpki-client