Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/83a57ebb-7d86-3951-9f58-5297e5879557.roa
File:                     83a57ebb-7d86-3951-9f58-5297e5879557.roa (raw, json)
Hash identifier:          l9Q8FIBR4mc3D7NW1rAqzDl4JpYlfPQSKSZixRw6O/c=
Subject key identifier:   E9:B8:9B:E3:06:B7:AF:6D:6D:75:6F:9E:90:3A:FA:E2:D9:1D:B3:64
Certificate issuer:       /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
Certificate serial:       010D0C9F4328584E253EF08A45AB116173404180
Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/83a57ebb-7d86-3951-9f58-5297e5879557.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     400556
IP address blocks:        142.248.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:f0:8a:45:ab:11:61:73:40:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=6fefcb30-a2c1-48d5-a586-d841b53dc3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:94:bb:14:06:91:5d:41:c3:61:d5:69:31:
                    20:b2:1e:ae:c5:6f:1a:a2:db:76:59:37:44:b8:79:
                    1b:02:bd:a0:21:3c:41:64:9b:26:7e:81:cc:4b:09:
                    89:01:1d:28:fc:46:d9:0d:4d:ac:3a:9f:7e:8e:bb:
                    70:09:fc:19:d5:9a:7b:52:3e:8f:3e:5a:02:9f:6e:
                    45:05:ac:e4:5d:3f:ad:9e:0d:0b:b0:93:66:ae:1d:
                    1d:f0:2d:ea:6f:e2:f8:53:60:08:06:7c:36:3a:97:
                    9d:09:a1:49:83:70:77:8b:71:d9:09:2f:66:64:f5:
                    9a:a2:a1:51:10:73:ed:9f:6d:85:71:3b:41:8c:60:
                    70:54:58:a2:ce:8c:92:42:7e:fd:ab:a7:b1:fc:dc:
                    a1:2a:8f:39:71:8d:f0:03:10:79:14:d5:89:81:18:
                    09:cb:d6:28:55:a4:d2:48:ca:8a:df:17:01:c5:d9:
                    e1:07:7c:92:b4:94:b7:92:31:66:81:b3:d2:30:99:
                    25:54:a8:a3:aa:6e:cb:c4:25:7d:0d:3e:6e:5f:9f:
                    5c:b7:3e:e7:5d:f2:14:d4:11:9c:66:72:89:97:31:
                    60:37:e2:73:d9:84:85:11:51:18:fc:77:70:27:26:
                    57:f6:d8:66:be:f9:07:88:97:31:14:21:c5:81:62:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:9B:E3:06:B7:AF:6D:6D:75:6F:9E:90:3A:FA:E2:D9:1D:B3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/83a57ebb-7d86-3951-9f58-5297e5879557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl

            X509v3 Authority Key Identifier:
                keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:aa:25:da:6e:5d:72:2f:70:76:0e:54:4f:69:7f:53:21:
         a8:0c:74:0e:e7:ec:e1:c4:65:ea:0c:97:b4:d0:a6:ed:b0:cb:
         8f:0f:20:a5:07:a9:78:22:f6:b9:ea:20:a8:a2:3f:1d:d1:87:
         1d:bf:20:18:35:19:63:6f:d4:3c:23:70:6b:51:c6:ca:cb:82:
         bb:19:37:b6:91:34:ee:49:22:5e:4d:45:9a:cd:04:d8:ad:bb:
         ad:7e:a7:37:1b:f6:a1:f6:ac:77:dd:e8:78:ca:43:bf:ba:ae:
         16:7b:5c:be:18:18:3f:7a:73:60:cb:a7:57:df:5e:34:38:9b:
         b2:b0:70:b8:e3:90:9f:bd:1a:95:3b:45:ff:24:79:40:33:9d:
         48:82:e2:6a:dd:0e:0b:45:a2:72:0e:1a:40:97:c6:27:58:0d:
         cc:69:64:e0:47:02:57:e1:cc:ba:7a:24:9f:41:06:9e:34:0e:
         31:ab:8a:b5:27:ae:e9:89:d2:d1:52:5b:0f:2e:de:ee:98:45:
         01:56:e9:b6:92:03:09:3b:ef:be:41:30:0d:0b:44:11:75:3a:
         c9:fe:36:51:8e:6a:b7:73:7f:85:b0:ab:5e:ee:57:d5:53:c5:
         8e:c8:6c:98:c5:93:67:af:d7:4f:82:da:e1:6e:13:d6:f3:e9:
         32:25:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:07 2026 by rpki-client