Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ac1d374a-d82c-3ab5-9600-12b1d5cc139e.roa
File:                     ac1d374a-d82c-3ab5-9600-12b1d5cc139e.roa (raw, json)
Hash identifier:          R/pf/IYAsxM1Md3jWeWPOz9zg4vRvB6SWqFWMKSCJos=
Subject key identifier:   31:AD:CB:D1:25:9E:8A:1B:79:07:57:7F:29:B7:E3:88:40:4E:4A:09
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584D87FA947335F5F2FF377E65FC
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ac1d374a-d82c-3ab5-9600-12b1d5cc139e.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     53388
IP address blocks:        142.248.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:94:73:35:f5:f2:ff:37:7e:65:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=7b492b65-d1fc-4727-95d5-5cadcdba68f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e3:77:5f:05:51:74:97:48:91:0a:02:ff:ae:
                    7d:80:52:7f:cd:41:9b:64:22:95:bc:24:09:4c:01:
                    4b:3f:14:c7:8f:84:ef:57:ca:2c:ab:1b:95:d1:16:
                    6a:b8:f6:fe:09:0c:5f:bf:7f:ab:2c:7c:d5:33:99:
                    3e:30:5b:6a:f6:5d:a8:b3:cb:e2:b7:58:e1:61:28:
                    98:9d:f6:86:d8:fc:e7:bd:da:e0:b4:a5:fc:f0:3e:
                    2b:dd:60:50:59:9c:38:4b:c3:b6:72:0d:47:0f:6c:
                    df:09:93:65:7c:a9:e4:60:b0:6e:48:48:dc:a1:67:
                    8c:36:1e:72:de:a5:84:5c:68:9e:61:fc:4e:1d:4c:
                    2c:50:75:ec:58:22:1e:ca:dd:78:31:2d:4a:8f:1a:
                    41:9f:ff:15:ed:e5:8b:e1:e9:f4:96:a0:ab:26:b8:
                    c7:07:2b:81:8c:10:93:e3:d3:e8:eb:69:24:f9:70:
                    83:0a:e0:cd:5a:ef:7d:e0:fe:2a:ee:11:a9:d0:4b:
                    d8:37:ca:9d:e3:c2:2e:be:67:d9:d7:38:99:3d:6e:
                    8f:99:4d:24:a2:19:08:56:34:7b:e4:87:ac:64:25:
                    95:1f:53:96:6c:58:a0:bb:c0:6c:53:81:43:e6:e4:
                    75:b0:6a:58:e2:04:a5:70:cb:a4:65:89:cc:1b:93:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AD:CB:D1:25:9E:8A:1B:79:07:57:7F:29:B7:E3:88:40:4E:4A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ac1d374a-d82c-3ab5-9600-12b1d5cc139e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:de:17:37:c7:82:2b:ae:c6:6b:21:c8:10:a7:60:88:89:
         96:a6:cb:c6:35:fe:04:df:57:f7:d1:05:5c:14:da:f5:16:69:
         37:71:7a:f1:a5:96:6a:61:8b:52:05:84:cf:a3:45:7f:aa:f0:
         b9:59:35:e1:20:6b:f1:da:88:41:55:d7:08:33:5a:25:e6:48:
         13:fb:9e:47:4e:60:d5:3a:26:d5:76:0b:a1:20:1b:17:49:e8:
         60:04:a6:61:4f:01:be:1a:33:c9:b6:c9:31:8b:b7:83:9f:31:
         86:0a:8f:68:82:f0:50:d5:59:c6:c7:05:fe:36:b1:71:d5:fd:
         a8:c8:56:a4:33:44:fb:95:d2:87:5f:03:e8:a6:fc:1a:32:38:
         1d:30:2c:65:1e:71:f9:6d:fd:3a:9c:ff:46:e7:97:52:ee:0a:
         9d:d6:de:7b:5f:00:02:e7:b6:d5:86:77:d4:ad:aa:a4:cc:fa:
         b5:44:bf:2c:26:5b:17:61:94:83:1a:82:7c:e8:6f:f0:c6:0a:
         f3:97:74:cd:ba:e0:e8:80:c7:f6:87:99:95:b9:9e:32:4b:fa:
         43:3a:be:da:a4:fe:31:ac:32:43:dd:05:26:ab:01:20:eb:b0:
         25:23:79:40:92:b9:e9:68:7d:4c:8d:7c:f9:5a:f2:cc:9a:70:
         f3:4a:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:35 2026 by rpki-client