Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/57fef851-b812-3910-8438-f6cd28bc5f46.roa
File:                     57fef851-b812-3910-8438-f6cd28bc5f46.roa (raw, json)
Hash identifier:          E31RQ+/UMkbHo9K+ER3BhHMen7vEhMmus/eP3VEtB94=
Subject key identifier:   7E:A8:11:D4:BA:F8:B8:B4:D7:C1:7C:1F:80:FC:D8:A6:57:B6:C1:1B
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584D773A6D061B669194FD813280
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/57fef851-b812-3910-8438-f6cd28bc5f46.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        142.248.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:6d:06:1b:66:91:94:fd:81:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=183cdab7-9cea-4bce-a282-8c5e56e83e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:26:0c:62:9b:ee:1f:3b:ef:e3:ea:35:fb:
                    dd:fd:93:e1:13:bd:bc:16:12:d2:ab:19:ff:93:b9:
                    17:65:1d:62:f4:92:9f:3b:6b:10:d5:8d:77:1e:6e:
                    03:6e:47:7b:bb:97:7a:25:07:6c:a6:da:bc:ae:d7:
                    85:5b:61:4a:5b:1c:5c:63:4a:9c:15:d4:92:92:d4:
                    17:ba:8d:d5:0b:8e:50:8e:17:43:0f:90:a1:e2:55:
                    3d:7c:08:47:72:9d:7b:76:d0:06:6c:86:eb:33:53:
                    48:2c:be:21:7b:85:88:56:d3:57:13:5a:62:a8:ee:
                    16:ef:f7:61:46:31:ed:85:c1:5f:18:e4:0a:78:2e:
                    fa:67:a4:d8:9f:0d:62:36:5e:43:e5:75:32:c2:1d:
                    80:df:8c:0d:ce:87:a6:ae:bb:d1:be:cb:06:de:e5:
                    a2:d4:91:80:47:15:48:20:a9:f7:be:4a:3e:73:8c:
                    93:8e:9b:3a:74:76:d1:ad:9f:ca:54:0d:59:c8:cb:
                    21:8e:d0:d7:bd:e9:49:b4:a1:bd:cf:75:46:82:02:
                    d8:0c:40:d1:ee:a0:b6:56:3d:8f:38:fe:cb:ff:0e:
                    cd:f5:05:18:5f:12:b9:40:58:65:cf:cd:52:04:44:
                    14:49:89:54:b7:23:22:cd:21:b0:1e:66:da:9f:16:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:11:D4:BA:F8:B8:B4:D7:C1:7C:1F:80:FC:D8:A6:57:B6:C1:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/57fef851-b812-3910-8438-f6cd28bc5f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:77:8b:9c:b0:41:81:ea:df:8f:bb:f1:62:c2:55:17:65:
         b7:aa:84:3c:56:ad:b9:61:a6:de:ff:e2:84:78:4e:6a:9a:1e:
         c6:e4:d7:36:22:ea:49:a9:3f:87:7a:77:18:0f:16:6b:dc:17:
         c5:52:20:74:69:c5:ab:11:03:f2:75:9b:3a:71:29:0b:cd:f3:
         ee:14:90:e9:c6:28:df:2f:52:bb:03:a0:8e:7b:e3:9d:f7:ca:
         40:e7:33:32:21:70:8b:85:3c:2e:ab:2e:62:ce:6b:d5:a4:1d:
         cf:28:83:c4:5d:97:fd:0b:3c:c9:55:0f:5b:3b:5f:2d:59:55:
         bf:90:8f:a8:ff:46:a1:5e:6d:d4:98:13:1b:e2:10:fa:e2:e3:
         80:fc:b0:bf:aa:f2:1d:b6:7d:20:29:84:61:95:06:02:da:71:
         7d:1c:f7:bd:df:6d:51:34:f7:50:10:cb:37:fd:07:60:5d:b2:
         42:a0:85:b0:ed:63:87:87:e8:e3:52:a3:0f:81:25:dc:39:f6:
         8c:1f:31:fd:d4:2a:f6:a8:60:b4:32:68:0d:c3:19:0d:be:0b:
         3d:e7:3d:68:e5:bc:00:01:e7:c2:08:06:55:ed:ba:47:cc:32:
         3c:e5:fa:2f:6c:80:a3:39:a4:1c:f0:53:f2:4f:25:82:19:70:
         3e:ff:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:24 2026 by rpki-client