Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/0bc8b80a-9fc2-3fb0-821e-098ead48379a.roa
File:                     0bc8b80a-9fc2-3fb0-821e-098ead48379a.roa (raw, json)
Hash identifier:          vVce2NhslY/iUa9vWJda/xD1lFr0jUYnLhtbsNhbsDo=
Subject key identifier:   3A:33:FD:3F:B6:DA:1F:69:E8:00:9C:26:60:9C:54:BC:F7:0A:62:FF
Certificate issuer:       /CN=d1043217-41b2-4089-81fc-42bf08d56223
Certificate serial:       010D0C9F4328584DFBD624F37B17A0B23AC54080
Authority key identifier: F4:14:AD:6B:33:7F:59:4C:9F:0D:B0:10:E0:A9:A9:C3:FE:96:73:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/0bc8b80a-9fc2-3fb0-821e-098ead48379a.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     401798
IP address blocks:        199.241.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:24:f3:7b:17:a0:b2:3a:c5:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1043217-41b2-4089-81fc-42bf08d56223
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=7937449b-1002-4480-a779-e1b6f83ec817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:2b:cb:d1:5e:b4:5d:b5:ca:5c:ec:9f:f5:
                    a2:75:68:55:c3:ca:d1:66:91:34:de:83:6a:7a:d2:
                    8f:c2:b1:54:42:89:8d:b4:1b:1a:ad:db:4b:bb:16:
                    aa:7e:76:cb:c9:fc:9a:bb:6b:bf:06:d1:c4:5d:3a:
                    90:73:68:0c:2d:77:8d:ed:f2:a3:e2:61:e3:83:34:
                    3a:70:de:d3:82:02:5a:e5:1d:a8:f2:a0:e4:55:a6:
                    6e:31:88:ee:f5:48:fb:e0:c8:3c:19:a2:ca:27:db:
                    0b:60:a2:cc:0e:ca:33:2c:94:4e:f9:4f:93:40:52:
                    81:96:b8:b3:ad:84:86:46:76:25:06:78:4c:ce:79:
                    4e:8e:07:9b:35:bd:34:b6:9e:55:a8:1e:13:6e:d5:
                    c0:33:2b:21:77:17:79:ff:39:7c:aa:b8:12:ae:b2:
                    12:ef:48:f7:af:fa:5a:78:25:bd:a9:86:71:b7:da:
                    f0:6e:a3:b2:4d:42:60:6b:05:a2:2f:9e:6f:f7:17:
                    1c:70:24:33:ba:2f:e3:10:f9:85:8c:b7:e2:4e:89:
                    04:51:cd:88:75:b6:61:34:ee:07:7a:2e:59:d6:cf:
                    d2:e9:cd:dd:67:c4:e6:0b:f9:9d:b6:46:b5:f1:7e:
                    33:a4:8e:ab:dd:bc:3c:da:26:4b:be:f4:8c:0d:6a:
                    98:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:33:FD:3F:B6:DA:1F:69:E8:00:9C:26:60:9C:54:BC:F7:0A:62:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/0bc8b80a-9fc2-3fb0-821e-098ead48379a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.crl

            X509v3 Authority Key Identifier:
                keyid:F4:14:AD:6B:33:7F:59:4C:9F:0D:B0:10:E0:A9:A9:C3:FE:96:73:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:dc:38:ca:b0:74:e7:14:db:8b:73:91:bb:c0:3d:f2:2d:
         b6:29:6e:5d:6d:f7:2a:92:d3:36:0d:e7:41:2e:8e:ee:53:cc:
         70:d9:7d:9e:6f:53:53:ac:70:73:2d:de:a4:97:67:f7:c8:1d:
         37:c4:b2:f9:07:3d:e6:6f:55:49:ec:7e:c9:28:d9:44:e9:6b:
         b1:0d:9a:b4:0a:57:fb:df:de:bc:74:87:44:b6:f7:fe:92:ac:
         7e:1f:8c:cf:61:4d:d0:0b:aa:88:91:f5:f3:0a:a6:a9:fa:2e:
         24:5d:c8:f3:82:cf:21:64:43:18:d8:a1:9f:ee:c2:95:9f:ef:
         e3:d3:50:67:ae:a1:55:57:cb:0d:7e:2a:cb:bd:09:a7:ca:e0:
         1f:de:28:41:9a:b2:37:d2:44:fe:d3:c7:29:d9:d6:ff:7f:f7:
         14:f9:0c:45:74:99:47:5c:76:d1:48:ad:9b:80:f0:75:08:a7:
         4e:86:09:48:7e:66:5c:1e:6a:80:33:25:02:d1:a5:7d:78:17:
         2c:64:e2:a9:72:a2:4b:94:c9:6a:f2:e1:c1:8e:77:5b:8d:eb:
         ae:61:30:25:08:78:69:03:07:61:b1:77:45:1f:41:de:8d:3e:
         cf:fb:80:f3:fd:b5:bc:b7:7e:c6:7d:80:8a:db:56:0b:63:52:
         ec:4c:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:42 2026 by rpki-client