Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/354357f2-9a2d-302a-9d31-98cf17920f85.roa
File:                     354357f2-9a2d-302a-9d31-98cf17920f85.roa (raw, json)
Hash identifier:          ccz7m5oNS/lx5lvFVYRkV183flOsP+9QIt+gtLoJ03o=
Subject key identifier:   85:4B:D0:45:43:B5:C7:DF:CF:DD:3C:A5:D8:CA:47:7D:DA:62:DD:0E
Certificate issuer:       /CN=0d419888-80a0-4fd9-90ba-6342b677f849
Certificate serial:       010D0C9F4328584E09CB32AE46D7387747B53A00
Authority key identifier: 41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/354357f2-9a2d-302a-9d31-98cf17920f85.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     7029
IP address blocks:        142.248.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:32:ae:46:d7:38:77:47:b5:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d419888-80a0-4fd9-90ba-6342b677f849
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=e6b7125f-cfcb-456a-a64f-857e914f7808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:69:1b:6c:43:bf:52:99:44:c5:ac:59:0d:
                    26:3f:aa:76:0e:be:ba:d7:80:18:e7:e6:8c:14:bb:
                    b3:51:1f:c2:f3:61:e9:b7:aa:a3:2f:05:5d:2c:96:
                    74:8c:c4:87:6f:e4:d1:04:0d:58:80:e7:dc:bb:b2:
                    86:b0:04:a8:fd:28:56:f6:ab:70:bb:5b:a3:d4:81:
                    30:1c:53:28:19:aa:18:bc:26:6c:f6:f4:02:e7:ca:
                    be:6a:ce:a9:13:3a:bd:22:20:72:78:d3:16:20:cd:
                    d7:08:5e:b3:ec:50:d0:90:82:75:f8:1f:ef:e0:d8:
                    9d:b4:9d:bb:79:c6:97:7b:e3:f3:9b:32:0d:59:b2:
                    1c:62:c9:7b:75:eb:62:ee:13:5c:c4:b4:c8:28:30:
                    94:9a:05:da:22:93:e9:c7:0b:1e:fe:14:83:78:b0:
                    b5:b1:c9:e3:76:cb:28:28:ff:f2:68:95:9b:29:fb:
                    e0:ee:26:80:d0:fb:be:bb:06:2c:38:0b:bc:3e:3d:
                    29:ff:4f:98:fd:85:d3:f0:f1:cc:6b:d7:b0:f4:6b:
                    d4:e8:e5:16:43:b2:7a:8d:e2:d9:6b:37:45:26:6f:
                    59:70:58:56:30:6f:77:46:2b:86:85:f6:77:ea:13:
                    3d:d0:0e:5b:48:67:b4:62:56:4a:be:26:8a:a4:e0:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4B:D0:45:43:B5:C7:DF:CF:DD:3C:A5:D8:CA:47:7D:DA:62:DD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/354357f2-9a2d-302a-9d31-98cf17920f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl

            X509v3 Authority Key Identifier:
                keyid:41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:2c:0c:bd:d5:99:bb:5a:94:5d:9f:28:0e:9c:80:09:c0:
         2c:2d:13:92:35:69:5b:62:37:f6:7e:7f:f1:79:bd:26:30:ff:
         af:42:aa:5e:10:13:c8:5b:84:7e:fb:fd:ba:8e:5b:9c:fd:22:
         38:2d:d6:c3:4b:0a:b2:9e:4c:dc:eb:71:73:a7:3c:21:6b:03:
         6e:f7:40:63:97:72:6e:84:69:10:cd:ad:1f:d4:36:58:67:17:
         3c:4e:8d:0a:0e:93:91:b4:e5:e2:fd:2e:95:a4:ad:9b:b3:67:
         f0:f3:51:d4:57:48:43:1a:81:05:dd:28:3a:e3:87:6f:1f:c7:
         e6:2f:da:86:f9:74:9f:d7:04:ef:9b:62:96:e6:fc:39:7c:a0:
         d5:35:6b:ec:6a:24:9d:16:fe:05:36:ad:da:e5:94:c1:17:91:
         5f:cf:81:65:05:00:71:3a:f8:56:b5:08:99:ca:85:3d:d7:a5:
         21:f9:08:42:ff:14:73:85:c0:78:33:91:f3:bf:5c:4a:5f:45:
         93:61:de:bf:6b:f4:b3:71:1d:30:52:38:46:bd:05:b1:7c:ec:
         84:1a:39:90:51:4f:f9:3e:de:9c:e4:ba:ac:18:11:c9:46:9b:
         7d:5e:8c:1e:19:56:fc:25:5e:6f:7d:ad:79:6a:9a:6f:62:88:
         2b:33:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:32:16 2026 by rpki-client