Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa
File:                     4b577272-57d8-3c62-8756-461fd87cbaf9.roa (raw, json)
Hash identifier:          KUqJr7YvT6SOM5S9KtFWzEHV445qe+Rx9H+Kk+72sAg=
Subject key identifier:   7D:E7:A3:90:9C:37:93:4D:B3:EA:7C:A2:B2:CE:35:05:9E:4A:AD:D4
Certificate issuer:       /CN=018f0304-387a-4819-8fa5-ca228a4ecf70
Certificate serial:       010D0C9F4328584BA19EB70AE799414FC36CD8C0
Authority key identifier: FF:A6:A3:E9:42:08:B9:1C:5C:AE:1B:B7:6E:BA:9A:2B:0A:41:57:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa
Signing time:             Fri 24 Oct 2025 19:52:38 +0000
ROA not before:           Fri 24 Oct 2025 19:52:38 +0000
ROA not after:            Thu 22 Jan 2026 20:52:38 +0000
asID:                     29838
IP address blocks:        142.248.239.0/24 maxlen: 24
                          2602:f78f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a1:9e:b7:0a:e7:99:41:4f:c3:6c:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018f0304-387a-4819-8fa5-ca228a4ecf70
        Validity
            Not Before: Oct 24 19:52:38 2025 GMT
            Not After : Jan 22 20:52:38 2026 GMT
        Subject: CN=5103bf69-49ce-46b2-bacd-1008f25edce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:d9:0c:a6:7b:a7:90:a7:b6:99:9c:62:09:
                    ec:04:b5:6e:4b:1b:50:f4:e5:7c:58:e9:5c:d0:59:
                    3a:0b:28:42:59:7f:39:13:a5:1a:02:1e:6d:7d:02:
                    fc:1c:3a:35:27:51:1c:03:61:b1:2d:fb:b7:ec:65:
                    38:88:51:3b:68:71:67:e9:c3:45:3d:06:58:5c:0c:
                    8e:ad:ea:00:c3:54:c9:e6:00:d0:4c:d6:0e:76:83:
                    b4:f0:00:14:59:f0:b9:f7:7e:e5:11:4c:bc:1b:95:
                    7c:e6:56:aa:2f:e4:7c:00:76:40:a5:51:6a:f5:5f:
                    2e:47:b1:c3:b4:0f:e7:80:34:74:b2:15:98:e7:65:
                    55:32:e3:b3:a1:45:15:f0:b8:92:39:e9:39:50:a9:
                    41:0c:61:ac:d6:fe:2a:de:28:ee:44:4f:1a:b7:31:
                    2b:73:82:61:1e:76:1b:66:6c:c8:16:14:d7:08:0b:
                    a6:c2:03:89:4c:12:d0:25:9f:da:d3:0f:60:8f:c2:
                    f0:45:b6:8b:8b:4b:04:f3:43:43:75:fd:72:ac:e6:
                    e1:4c:32:be:f1:1b:22:47:a2:fe:4b:1d:03:75:8f:
                    65:58:7c:5d:33:f4:9e:dd:10:d0:63:5b:33:c9:17:
                    85:a5:83:a3:2b:a5:90:15:18:f3:b3:1a:e4:25:a7:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E7:A3:90:9C:37:93:4D:B3:EA:7C:A2:B2:CE:35:05:9E:4A:AD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.crl

            X509v3 Authority Key Identifier:
                keyid:FF:A6:A3:E9:42:08:B9:1C:5C:AE:1B:B7:6E:BA:9A:2B:0A:41:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.239.0/24
                IPv6:
                  2602:f78f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:29:38:c7:a0:ed:ec:77:a5:e7:49:87:7e:7a:b2:f4:0b:f2:
         08:94:0a:b4:43:93:75:6f:88:92:f2:29:5b:61:39:ba:34:cc:
         36:c5:56:87:f1:19:d0:cc:53:35:de:01:fe:53:71:e7:e3:33:
         3e:9f:61:fa:68:3c:6a:f8:07:bb:65:ca:dc:5c:c8:ad:cf:fc:
         6c:68:9a:95:0d:3e:b5:22:22:81:ef:a1:bf:1f:7d:8c:2f:27:
         01:d8:de:8d:57:d2:a7:18:7e:fe:ad:9a:8e:4b:4f:6d:b1:ec:
         e5:53:7d:fd:89:cc:d5:e7:e4:d6:42:0a:8f:a8:ce:6e:23:67:
         1a:96:de:c8:18:b1:69:29:46:f9:6a:33:41:4d:74:3e:aa:30:
         d5:82:a4:f1:6f:ce:d7:16:5d:4f:56:97:a0:b6:d1:0b:40:83:
         16:3c:fb:bc:5d:85:ce:c9:36:bc:33:ea:b9:29:d4:91:54:f0:
         cb:f0:5f:08:51:07:44:62:57:bd:99:e7:9b:a6:59:12:e7:2f:
         76:5c:e9:f7:d6:b2:02:b0:2f:71:2c:f0:6d:d5:6b:2d:52:cb:
         01:a6:e4:fa:34:a9:a7:cf:59:ba:ac:a7:40:d1:de:7a:58:62:
         58:ce:43:60:0c:35:de:86:a8:73:cf:b7:51:4c:e4:40:76:05:
         5c:dc:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:03:50 2025 by rpki-client