Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa
File:                     6ebeb817-6095-3446-9a11-b67c1f10a982.roa (raw, json)
Hash identifier:          INwFF56g7UM1lOd3ZRWFtp0O7AaZ3OOPWTPW48VltWk=
Subject key identifier:   9C:73:4D:B8:B6:1C:A6:49:6A:20:23:23:D3:C9:71:63:4F:2A:2D:7F
Certificate issuer:       /CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4
Certificate serial:       010D0C9F4328584E22744BE7CC56A0C6B198A340
Authority key identifier: 63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     401656
IP address blocks:        142.248.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:4b:e7:cc:56:a0:c6:b1:98:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=1f1eb396-4eb2-4002-bbe4-07de7d699436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:74:e2:13:ab:1a:8c:c8:0a:5b:b2:a6:57:
                    db:a0:06:7c:6f:92:eb:03:6a:04:e5:c9:9a:a3:79:
                    a8:fb:2d:0f:1b:c1:34:1c:f3:a6:d4:4f:23:a5:46:
                    5a:c3:0f:57:4f:fd:cd:71:27:de:d2:b7:48:61:4f:
                    c2:37:f7:26:51:73:d5:c0:60:8f:a2:2d:7a:09:12:
                    19:dc:11:56:2f:9a:53:a3:e3:60:67:9b:8b:04:85:
                    cf:db:94:82:38:07:30:33:25:bc:7a:5b:f8:cf:d1:
                    38:81:d8:e9:13:f6:33:2c:f6:1b:91:32:d0:d3:cc:
                    a0:2e:c3:8d:48:13:10:f9:05:09:30:bc:af:0d:10:
                    ea:ce:cd:d9:da:3e:bb:03:42:0f:da:df:d2:36:27:
                    56:59:8d:1b:8d:85:9c:e9:8a:95:f3:57:96:65:cc:
                    f9:66:9c:39:0d:27:6a:f2:f1:ef:86:b0:9f:a6:fd:
                    a4:ae:d4:af:70:37:5c:31:88:29:d7:f9:ff:32:27:
                    6c:65:23:79:f4:c4:9a:c0:8e:68:07:d6:b1:8f:21:
                    1e:22:c1:e3:6a:e7:81:dd:1d:c4:bb:6a:38:38:46:
                    6e:65:46:5c:95:df:2c:8c:85:4d:5b:c4:a0:50:91:
                    12:dd:a3:6e:c1:f5:09:36:24:c3:af:a4:c1:6f:99:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:4D:B8:B6:1C:A6:49:6A:20:23:23:D3:C9:71:63:4F:2A:2D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.crl

            X509v3 Authority Key Identifier:
                keyid:63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:06:96:9b:76:5a:c8:e0:6b:50:12:48:28:49:8b:9d:db:05:
         d3:88:d6:6d:a9:3b:8f:23:26:8e:f0:d6:9d:91:53:78:7c:23:
         37:94:6d:2f:ab:ea:bf:29:59:71:7c:ea:55:80:01:b8:e0:99:
         fc:62:7e:17:6b:b1:cc:ba:dd:4c:e8:cc:f8:b4:7d:fe:b8:95:
         d7:93:a5:5a:64:26:a5:30:af:27:5a:f0:d3:69:00:9b:69:e2:
         ea:13:54:65:5c:3a:29:bb:0e:dc:4e:bb:4d:f2:ec:aa:13:66:
         36:02:c2:07:1f:fd:f9:6e:3b:6f:ff:0f:6e:ae:63:29:20:57:
         60:73:a4:d9:ea:f9:90:6a:59:92:66:20:8b:e8:b3:e0:35:54:
         ec:f4:8a:0e:94:f5:e8:4f:fd:05:04:f7:c2:5a:e4:1a:b6:83:
         1b:34:e6:4f:3e:fc:4b:59:ed:aa:01:93:a1:78:65:a9:c1:78:
         48:ea:e8:4b:fe:39:54:79:1a:ee:57:91:b1:c6:62:fd:3e:ba:
         76:99:12:33:0b:cc:ab:94:fa:4b:f4:13:77:58:33:65:92:a5:
         14:9e:4e:9e:e4:15:d0:bd:1e:70:d6:1f:48:dc:ff:23:80:2d:
         23:aa:fa:9b:73:a4:39:e9:81:05:66:3c:bd:4f:df:06:b7:74:
         29:f1:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:32:10 2026 by rpki-client