Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa
File:                     28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa (raw, json)
Hash identifier:          jteWzeVwcWAUdWFSIR2sVH/t6VITyJorBXdxJ9PAUx8=
Subject key identifier:   08:92:58:38:8A:B2:41:F1:58:E2:A1:CA:A6:DB:E5:27:F5:D4:9D:05
Certificate issuer:       /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
Certificate serial:       010D0C9F4328584E1A143CC061301620E66EE900
Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     30671
IP address blocks:        142.249.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3c:c0:61:30:16:20:e6:6e:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=0a42afbe-2438-4c7f-b7f6-76ff1d29b180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:90:7e:d1:4f:2d:78:a7:f7:f4:14:84:38:
                    95:8b:8f:0b:ba:36:8c:61:ba:fc:55:5c:ed:17:27:
                    7c:3e:dd:f2:b8:3f:72:f4:36:18:ec:59:97:79:f8:
                    54:a0:6d:b0:11:55:7a:21:5d:7f:0d:9e:fd:2e:31:
                    5f:0c:2a:40:ca:44:2e:f6:e4:b4:7d:d7:19:85:c5:
                    7c:a3:c9:21:aa:cb:bc:4c:12:70:52:af:be:2c:b4:
                    99:2d:84:66:1a:04:a1:76:f4:84:d2:41:5a:25:ae:
                    e4:3a:19:96:ba:78:f7:48:8b:fa:5d:e6:bc:d1:50:
                    02:d9:dd:de:f4:72:57:5e:55:c6:4d:2b:54:30:55:
                    27:a5:c1:25:6d:1a:6a:cc:5e:9f:1a:ba:93:50:a2:
                    b6:ca:49:cb:9e:66:14:35:6f:2c:42:dc:85:bd:5b:
                    df:86:ee:1e:40:9d:82:00:17:94:7a:db:2e:07:cc:
                    40:e3:41:05:cb:f6:3e:93:d9:ac:82:9b:06:18:b1:
                    6c:e4:36:74:f1:67:73:3d:cb:86:d7:6c:d3:c3:60:
                    c5:7d:21:15:38:47:2b:8d:fc:2a:9a:53:bd:eb:1f:
                    7b:b2:af:41:75:14:4e:8b:3a:bc:9c:74:5f:9f:d1:
                    05:08:a7:c7:00:5e:3f:e4:1d:a2:f6:25:5d:c0:0f:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:92:58:38:8A:B2:41:F1:58:E2:A1:CA:A6:DB:E5:27:F5:D4:9D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:4f:b3:ef:d9:05:83:5c:f2:8e:82:a1:30:e2:72:b2:1e:
         26:23:b7:26:35:49:7b:d7:4f:67:fd:83:c3:51:81:2a:a6:4b:
         f3:0b:9d:41:14:61:e7:22:d3:16:09:d7:af:75:c1:d0:c8:1d:
         4e:1c:1d:6f:3e:b2:f8:df:ac:9c:5b:f2:6c:ff:c8:07:d7:70:
         b7:28:b2:a3:f2:a2:42:69:3d:03:53:8d:ab:e3:9f:57:50:86:
         62:50:63:92:ed:70:d4:f1:61:b9:c2:69:a4:1d:d8:0f:21:e7:
         91:d4:c6:e5:6e:20:22:9d:30:43:65:ca:35:74:8c:03:29:75:
         e9:bf:fd:b0:6a:fc:85:b3:3f:e1:37:7c:f9:f6:be:01:01:62:
         ec:75:ea:b2:49:0e:aa:fb:4d:37:88:7e:9e:1e:38:99:62:20:
         8b:1b:2c:0e:a3:29:db:04:10:7c:7d:29:d2:1b:b8:62:6e:ce:
         e5:b4:d8:12:40:97:ad:26:78:70:5d:ab:69:c2:5f:2d:b6:6a:
         62:d2:0c:e2:8a:73:c2:43:78:23:cc:e2:b3:7f:59:ee:90:d0:
         c3:ee:62:07:40:80:d6:00:ff:ed:84:75:0f:cd:48:f2:d1:01:
         0f:e1:ff:cb:d4:b9:8d:1b:e8:9f:e2:2c:e6:a8:a8:5f:2c:2b:
         6a:8c:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:30:59 2026 by rpki-client