Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/25e8bd13-adef-3fab-87ac-8ef2bf48bc83.roa
File:                     25e8bd13-adef-3fab-87ac-8ef2bf48bc83.roa (raw, json)
Hash identifier:          JyNbXLOJ/XPH+mG6SHqpnLbnTJBDLkQOtFkxpsG/8lE=
Subject key identifier:   8D:A6:91:A6:0A:ED:A7:5A:D2:8E:43:73:B2:AB:94:EB:4A:FF:10:15
Certificate issuer:       /CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
Certificate serial:       010D0C9F4328584F3E4802C859B135D656211080
Authority key identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/25e8bd13-adef-3fab-87ac-8ef2bf48bc83.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     13437
IP address blocks:        142.248.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:02:c8:59:b1:35:d6:56:21:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=9f15683c-bb40-41ee-adf4-71fda8419a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:c5:91:72:80:1a:4a:7a:e2:b4:25:f6:ba:
                    ed:e2:a7:7b:14:7c:ec:d3:91:18:2c:d2:94:69:dc:
                    83:51:53:7e:0a:d0:53:10:71:b1:f9:91:e7:38:87:
                    1d:12:b3:4b:9e:0f:ae:67:45:54:4a:ff:ff:3c:1e:
                    3a:2e:41:47:b6:02:fe:75:f8:22:63:0d:95:21:0d:
                    f0:3c:88:05:7e:fb:b5:3d:e2:33:75:35:02:08:b7:
                    ff:68:cd:b2:a1:de:54:a0:05:cf:94:72:86:fc:81:
                    32:dd:66:32:fe:77:8e:f6:f9:4a:e8:33:9a:0a:e1:
                    6a:f4:0e:4f:79:f5:13:5f:5d:e7:e6:fe:72:a6:1f:
                    e6:26:2a:8c:87:fb:0b:35:db:1e:d3:fd:56:ff:2c:
                    75:14:6e:3f:d6:fe:67:bf:db:99:5f:10:aa:76:15:
                    d2:2e:b7:44:0c:08:69:82:79:a0:f5:85:ac:38:16:
                    2e:cf:a7:a7:d7:a6:b7:ac:85:c6:ff:df:8f:63:d4:
                    24:c2:16:17:94:2c:b6:2c:25:ca:01:cf:4c:6d:7f:
                    c9:34:e2:1b:56:f4:91:18:c4:2d:30:ff:7c:d3:a6:
                    62:3f:19:96:54:8c:35:1f:f5:c7:7a:8f:60:9a:01:
                    e8:aa:d9:8c:74:3b:0e:1b:92:29:9b:fb:a9:55:e7:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A6:91:A6:0A:ED:A7:5A:D2:8E:43:73:B2:AB:94:EB:4A:FF:10:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/25e8bd13-adef-3fab-87ac-8ef2bf48bc83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl

            X509v3 Authority Key Identifier:
                keyid:27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:42:9e:c9:b9:9e:b4:22:48:6f:b7:f3:3a:5b:16:ea:d9:
         c0:32:4e:f3:d3:61:72:f5:6e:bc:69:ea:c9:6a:10:4f:0f:82:
         ca:f2:2c:f0:a2:9b:28:cf:53:94:db:22:bb:4e:b3:23:22:86:
         5d:d4:b9:8c:0f:69:75:c4:f8:49:c4:fb:d7:63:5e:5b:04:d3:
         a6:7a:d4:16:8d:ae:4c:5d:c6:0e:f3:af:4c:b0:f0:48:b4:08:
         79:3e:51:3d:99:22:67:b2:ce:85:37:d8:cb:23:8a:12:ca:68:
         fd:e8:fa:61:09:52:f5:87:a2:95:66:9c:10:41:bc:1d:3f:ad:
         8b:2d:b3:49:5a:e6:59:ee:b1:48:75:a1:5d:2f:91:b2:8e:48:
         cb:b4:ad:49:3b:68:65:56:b9:6c:4f:d3:c1:d0:4f:80:8e:94:
         62:ef:7b:ad:76:c5:a1:ae:c1:12:3f:59:e4:ad:05:07:75:1d:
         ab:01:ef:02:8c:ff:e4:ca:01:78:f0:9b:1e:d3:55:0f:14:b2:
         57:bd:14:b3:c6:12:d6:06:80:d7:ea:97:c6:b9:94:f0:b8:8d:
         e6:e2:de:05:85:50:8b:9b:7c:cd:d4:fa:3c:7e:84:50:f0:6b:
         75:a4:60:09:39:f5:45:05:a2:ed:ca:09:f7:73:58:5f:2c:08:
         f7:97:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:13:18 2026 by rpki-client