Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa
File:                     d52ea58c-e29f-3a43-840a-2f77aba702be.roa (raw, json)
Hash identifier:          6oQKxIt/7xGav1/w5fRSP7eSJ9A628qQAdq+uzAV63c=
Subject key identifier:   8D:C3:E3:39:A3:AF:76:10:C2:63:85:71:1D:96:1F:BF:AA:F5:DB:98
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584D55BCB993FB83CC15ACA472E0
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     12198
IP address blocks:        131.143.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:b9:93:fb:83:cc:15:ac:a4:72:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=13622b1c-2d83-4d50-a2c8-51e33a26242d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:12:35:50:20:c3:04:03:82:95:7f:76:82:
                    ae:53:5d:14:49:14:24:ee:28:c3:c1:8e:b4:6f:94:
                    a4:47:be:d8:38:02:fc:ea:fa:f5:3d:5e:70:54:02:
                    59:96:98:55:eb:03:8e:3c:f3:50:a7:e4:8c:2b:8f:
                    75:0e:b0:ee:b0:d9:5a:43:7b:53:f5:3b:38:75:d4:
                    da:d0:1f:47:15:53:e5:02:2f:8c:64:3c:77:a1:72:
                    35:fd:45:08:c7:fe:ed:67:74:4e:04:44:04:81:f6:
                    94:ad:d3:62:9b:7e:51:11:f0:92:81:e0:2d:80:2d:
                    f4:d3:d8:5f:7e:be:b0:1c:53:a9:09:87:02:e7:e2:
                    fb:6e:6c:11:b2:ab:d9:7d:70:79:35:e2:40:8b:d4:
                    61:f7:a1:43:ba:2e:61:f9:80:95:f4:7f:67:65:3a:
                    fb:cf:5c:a1:5f:68:ef:b4:d0:9d:87:f6:32:7c:e5:
                    69:c3:63:28:76:ca:d2:3b:79:79:da:b9:46:fe:3e:
                    3d:6d:07:62:01:77:06:58:34:82:82:31:bf:f1:bb:
                    bf:9e:bf:8c:6f:ff:46:f9:8f:18:4d:88:a5:fc:89:
                    1c:33:5e:32:ac:2d:14:6e:d6:c6:b5:79:a8:f9:8d:
                    59:9e:f5:8b:93:70:3f:80:6d:b4:6e:7a:f1:f9:21:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:E3:39:A3:AF:76:10:C2:63:85:71:1D:96:1F:BF:AA:F5:DB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4a:2d:08:35:c8:4e:0a:6b:b2:4c:51:62:18:1c:a3:93:ba:
         d4:ce:79:25:94:0a:35:91:19:74:de:e3:26:20:11:1e:da:c4:
         a9:99:9e:fa:bf:dd:ed:ed:c6:7f:88:9b:06:98:21:02:84:83:
         cd:42:ff:66:6b:50:ee:68:20:4f:40:8b:be:a8:44:fb:60:fd:
         90:af:dc:ae:65:f4:0a:66:4a:7e:5e:5c:7b:2a:9a:4a:78:28:
         b6:54:f9:8c:5d:90:b1:13:05:5a:eb:df:a0:5b:73:37:fc:24:
         8f:d7:d5:02:d4:70:3a:91:98:c2:73:bc:af:a5:d5:57:e5:a6:
         ba:3f:53:b1:67:a4:ba:b8:1d:f9:4a:a7:3a:6f:50:36:1b:81:
         f8:18:9b:75:0e:c0:0f:3c:bb:2c:58:98:b3:cf:e0:ea:69:21:
         de:1b:18:02:d4:ea:8a:de:64:6c:3a:71:83:67:d3:69:5b:58:
         0c:03:4f:d3:f0:d8:6a:11:f4:78:eb:ff:07:5f:75:c5:2a:2c:
         f9:81:e8:8e:7e:de:fc:a0:b7:5a:42:88:9a:fa:c6:69:ff:c0:
         b1:56:21:60:9e:38:c9:83:79:87:8d:7e:42:d1:6c:7d:91:a1:
         85:24:60:c1:da:f9:44:a8:50:ad:ba:37:4a:9c:1b:ce:4c:e4:
         54:7c:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:21 2026 by rpki-client