Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/a403d848-c695-3e71-845c-4a6e8a6f440c.roa
File:                     a403d848-c695-3e71-845c-4a6e8a6f440c.roa (raw, json)
Hash identifier:          0+BR3ave6tEHWk1ZIdXDriR37TYKrMeSSE7+XH8ofOM=
Subject key identifier:   3F:5A:0C:A1:7E:C3:59:82:89:43:44:45:9F:00:41:87:E8:BF:F0:A1
Certificate issuer:       /CN=4e639667-2398-443b-9142-a0e6c46a369c
Certificate serial:       010D0C9F4328584CDB01F45E2DF55A064AB57300
Authority key identifier: 84:60:F4:8A:A2:5B:9D:7A:19:4C:69:5E:AE:DA:AC:EF:62:F8:81:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/a403d848-c695-3e71-845c-4a6e8a6f440c.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     399461
IP address blocks:        142.248.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:f4:5e:2d:f5:5a:06:4a:b5:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e639667-2398-443b-9142-a0e6c46a369c
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=3c669d81-904c-44e3-b92f-313a6dca14af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:e6:da:53:46:55:17:dc:ca:eb:3b:00:41:
                    4a:90:90:24:bd:eb:19:15:fa:0a:48:88:5d:25:5d:
                    80:b0:7b:4a:e9:1c:37:06:49:74:c5:38:57:b5:21:
                    fd:c1:bb:fd:76:51:31:cf:11:9a:79:09:46:0c:ae:
                    74:2d:d8:b2:93:a9:67:1d:0a:4f:6c:9f:67:16:ec:
                    80:21:fb:d7:d3:6e:8f:23:54:61:4e:ae:5a:13:98:
                    db:7e:9f:a0:77:d4:a8:87:98:b2:cb:67:e9:b0:ad:
                    81:47:da:8f:18:c0:34:4d:42:34:bf:8e:2e:bb:3d:
                    7d:20:40:e4:48:a5:46:43:9b:c9:ba:7c:2d:cd:58:
                    ac:f3:c8:8a:77:1d:f2:7e:cd:3e:7a:94:55:92:7a:
                    7e:1f:f8:46:ba:d8:62:2f:52:0e:9b:cf:8c:ae:f5:
                    f0:03:e8:f2:7d:c6:e5:a1:fd:be:35:51:0e:e6:20:
                    d8:4c:ea:4d:42:7a:c9:8e:a2:af:b0:67:32:0d:7b:
                    ab:2e:59:d7:f7:9f:f0:74:01:67:a0:d2:73:13:9c:
                    e9:d2:2c:5a:49:1f:fc:7b:0f:f2:b3:db:20:cf:b3:
                    3d:e8:28:34:f5:60:d2:2d:ff:6c:bd:41:3d:50:77:
                    fd:90:9e:89:79:4e:05:ef:4e:4a:1a:58:1c:b7:11:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5A:0C:A1:7E:C3:59:82:89:43:44:45:9F:00:41:87:E8:BF:F0:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/a403d848-c695-3e71-845c-4a6e8a6f440c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.crl

            X509v3 Authority Key Identifier:
                keyid:84:60:F4:8A:A2:5B:9D:7A:19:4C:69:5E:AE:DA:AC:EF:62:F8:81:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:4d:23:1e:55:be:cd:59:22:70:6d:59:c6:c8:d7:28:9c:
         f5:36:f5:bc:08:d8:2f:66:f8:b0:2e:d6:25:4f:76:60:c3:3f:
         6d:9d:53:a7:1a:19:e4:6b:4c:b3:51:e6:d8:e7:43:9b:9c:19:
         e5:b7:75:be:f2:fc:e4:6a:b0:97:35:11:f9:51:0f:c6:f8:9a:
         a9:f7:f0:ae:11:bd:c6:21:d2:30:26:33:04:93:3f:09:53:d6:
         31:98:a5:12:25:5a:8c:ce:91:96:e3:4f:b3:6d:4b:dc:ab:53:
         17:f0:f3:6b:28:3b:e0:a7:91:8b:51:42:38:d2:64:6d:57:5c:
         6c:38:02:33:db:d4:67:4d:7a:69:14:fa:41:98:e6:1d:2c:fe:
         d5:0c:24:b3:2a:10:b6:1b:d9:e4:4d:d8:d4:98:e7:11:4d:9d:
         cd:39:12:12:ab:0f:44:80:3b:d1:df:5b:99:d7:a2:97:15:1f:
         bd:5d:d4:02:d5:84:ee:63:25:48:98:e2:11:05:73:15:aa:48:
         e3:79:56:2c:db:fb:cc:dd:ad:9e:8c:0e:56:4c:05:d2:d8:91:
         73:74:c3:dc:7f:01:61:1e:a6:64:6a:9a:d3:93:cd:0f:e4:b8:
         7f:9c:a9:44:60:4e:17:70:42:b0:f1:d4:1a:ac:84:7c:77:7b:
         a2:00:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:27 2026 by rpki-client