Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/71cf390b-cfdc-366b-bf3f-12ce2754fd95.roa
File:                     71cf390b-cfdc-366b-bf3f-12ce2754fd95.roa (raw, json)
Hash identifier:          XuWo+2ZFpzzFh+31XlMm9fSYMUnhXkn6fTqUHv4sW8k=
Subject key identifier:   FB:E3:C6:5F:2D:9B:EB:F4:A3:9F:03:20:3A:90:FD:B8:5F:C5:AB:46
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F4328584CCFD738B6600A5A3884FD7A00
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/71cf390b-cfdc-366b-bf3f-12ce2754fd95.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     395222
IP address blocks:        142.249.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:38:b6:60:0a:5a:38:84:fd:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=f2932b68-5042-4257-82ae-912528400cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:2a:8a:6e:c9:c5:a7:0f:b3:32:2b:d8:be:
                    88:9f:89:7c:61:07:06:b6:81:34:72:d9:d6:c4:15:
                    24:d3:63:90:77:4c:4d:fa:92:cb:79:34:60:f4:f6:
                    4c:57:47:be:ea:17:c1:f7:a3:ae:77:dd:e8:ff:c1:
                    72:a9:b0:8d:0f:dd:3f:67:20:40:30:0d:55:b7:0e:
                    11:e8:46:f8:98:33:df:6b:cb:f7:48:ff:e8:5e:cf:
                    b9:66:ce:20:9a:51:ab:a8:30:16:c8:45:9c:7b:b8:
                    ee:11:c3:e7:77:5e:49:86:5b:63:7f:79:c5:6f:d2:
                    e6:67:74:4b:87:18:ce:81:72:32:1d:94:fe:d6:10:
                    cb:1b:f1:5c:5a:c4:a8:bc:4d:c5:9a:0f:49:72:cf:
                    cc:cd:02:66:1f:ed:a1:87:75:18:2f:a3:f9:97:45:
                    f6:7c:dd:2e:2c:30:17:35:5f:b8:dd:f7:d2:fc:57:
                    e5:52:8c:b9:4a:a9:d2:26:a9:66:5b:b2:fe:bf:55:
                    dc:7c:70:90:57:cd:ba:b2:39:a2:77:49:12:e1:14:
                    7e:1d:c7:08:b4:db:37:8f:ce:b5:2e:a9:05:4a:bd:
                    2d:26:79:ce:7d:f4:34:46:37:8f:dd:47:e8:10:3e:
                    e0:ae:f1:09:1b:76:63:0d:74:67:54:49:f0:75:03:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:C6:5F:2D:9B:EB:F4:A3:9F:03:20:3A:90:FD:B8:5F:C5:AB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/71cf390b-cfdc-366b-bf3f-12ce2754fd95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6f:2d:54:6d:0f:b4:76:6d:37:72:06:f2:ec:72:2e:fc:77:
         f8:1c:0c:0f:fa:3f:cc:a6:12:8c:86:fc:dc:e3:36:d5:47:19:
         7d:3b:84:28:be:99:5d:cc:36:e1:62:56:65:e0:86:8d:c2:c1:
         c4:69:61:94:5f:8f:05:a6:a9:1a:3d:30:74:ba:ff:19:d1:c8:
         13:a4:36:ea:a2:b7:c5:3a:14:cb:a0:c4:db:9f:dc:27:0c:7a:
         3b:a7:db:a3:f4:f0:9b:8d:39:27:16:49:a1:83:18:94:6f:5c:
         4d:34:a6:19:2b:8f:ba:0f:0d:32:b9:af:f5:97:02:65:7d:bd:
         99:ac:1d:c0:a8:ba:91:da:93:49:54:10:f3:be:06:7b:b3:f9:
         2b:32:51:71:9e:37:90:8a:09:a1:23:56:42:9f:97:85:81:31:
         0c:36:31:2f:e1:23:14:76:fa:5c:f3:f0:d8:a7:89:1c:ea:d3:
         de:8e:14:a4:92:30:84:09:79:f5:f9:df:c0:e5:81:e7:c3:90:
         07:dc:bc:4c:de:28:8f:9a:17:02:23:b0:21:ff:e4:40:09:05:
         f1:fb:aa:09:d4:fa:4f:35:95:1a:31:fd:7c:d0:09:8d:9f:3e:
         2d:6a:2c:23:b9:6e:f2:2e:7c:16:34:e4:a4:b9:2b:e6:30:94:
         12:fa:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:24 2026 by rpki-client