Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/03efc522-b39f-3622-9a75-36cea29ac517.roa
File:                     03efc522-b39f-3622-9a75-36cea29ac517.roa (raw, json)
Hash identifier:          ubDmlgy34u6Lmq47bPkOTFlZOyPRJox4xGSiHESzCC0=
Subject key identifier:   67:90:45:A1:5A:A0:57:A3:77:22:46:B8:80:13:7E:F0:4F:66:2F:5D
Certificate issuer:       /CN=6ca48f95-35ec-4aa1-97a3-249116154b70
Certificate serial:       010D0C9F4328584CC8DC8DD395B8F73EF9E08080
Authority key identifier: 45:59:1C:04:0C:8E:95:18:61:70:D0:88:51:C6:84:C1:F4:38:3E:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/03efc522-b39f-3622-9a75-36cea29ac517.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     12036
IP address blocks:        142.248.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:8d:d3:95:b8:f7:3e:f9:e0:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca48f95-35ec-4aa1-97a3-249116154b70
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=57e88b6a-74ee-4a4a-baa0-2e5649bb9ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:57:d8:b8:38:4e:55:9b:98:a1:ef:09:9b:
                    de:3a:37:c5:b0:21:01:97:58:68:3f:a9:ec:1c:cf:
                    05:1c:ae:20:ba:1b:e7:ee:7a:ef:fa:9c:09:48:a0:
                    07:e2:95:fd:2a:59:58:1c:b4:2b:33:fe:94:6d:9b:
                    59:87:9f:dc:96:ad:6a:2a:33:71:cd:23:43:34:68:
                    19:ff:ac:d0:6b:e9:b8:85:97:0d:fc:fd:d2:58:bd:
                    b8:06:86:3b:a6:a1:e7:17:64:d3:a6:c4:c1:f4:de:
                    da:ea:87:fb:47:07:01:f0:1e:7c:48:0c:31:ff:5a:
                    f5:d0:7d:7a:ad:18:b2:b1:b2:47:22:41:e3:a8:d9:
                    20:91:71:56:ca:27:5b:2c:dc:6e:e5:c7:28:39:75:
                    c3:b0:e8:23:cd:49:fe:68:62:e8:40:6c:3b:f6:7b:
                    95:6e:67:88:0e:ca:62:d3:cb:c5:47:11:99:f2:93:
                    ca:a1:37:2a:65:c2:d4:dc:84:4a:51:d9:57:7e:fa:
                    95:c3:ef:26:98:dd:f2:b3:90:5f:c0:48:0a:af:26:
                    1f:c7:05:54:08:34:05:e0:65:46:d1:2a:23:77:5c:
                    9a:f4:07:30:ad:c2:d3:97:7a:c8:f2:4c:1b:7c:94:
                    d3:f0:7c:e0:c6:7a:90:a1:99:c0:0f:f3:fa:1c:1e:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:90:45:A1:5A:A0:57:A3:77:22:46:B8:80:13:7E:F0:4F:66:2F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/03efc522-b39f-3622-9a75-36cea29ac517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.crl

            X509v3 Authority Key Identifier:
                keyid:45:59:1C:04:0C:8E:95:18:61:70:D0:88:51:C6:84:C1:F4:38:3E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:31:56:27:08:67:37:56:fb:3b:83:9d:a3:ec:12:eb:c1:
         9f:f7:9e:7d:6f:f6:7f:fe:5f:82:54:7f:17:c6:74:33:3a:d5:
         b6:03:92:ae:a5:e6:c8:29:bc:22:bd:2f:4b:b2:c7:0a:c2:4a:
         9b:dc:eb:86:43:b5:7b:01:35:74:d8:da:a4:39:2f:11:c4:53:
         94:a3:be:70:00:2a:e5:a7:da:0e:18:0a:62:d7:64:4f:fe:db:
         25:73:a1:0f:3e:b3:2a:c3:03:d6:73:5c:68:49:b3:dd:e0:80:
         29:27:eb:ed:5a:e5:2f:8f:b1:3e:ba:ee:29:ff:15:a6:e9:23:
         49:0d:71:47:cc:4a:11:fc:6f:32:54:a3:2c:f0:0d:06:ad:24:
         e9:49:8e:ac:62:bc:ed:d9:f1:a2:fa:61:28:1c:3f:e2:62:69:
         f9:4f:16:6b:ac:58:1d:0e:90:a4:f6:11:6e:a0:e4:ad:a9:74:
         a8:32:36:88:02:f1:6e:82:e9:89:d6:47:c4:9e:cb:a1:0a:fd:
         70:dc:a6:0a:26:7f:71:1a:0d:c6:02:a1:bb:0a:e3:a5:62:f9:
         2d:86:c3:a3:61:1b:b3:cc:10:57:15:6f:1f:af:8e:e5:bf:3e:
         58:b2:d6:0f:ed:f6:8b:69:d8:18:69:48:73:6e:23:9f:be:d7:
         07:de:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:29:59 2026 by rpki-client