Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa
File:                     86fece67-20b8-3986-8803-3d7ac8138185.roa (raw, json)
Hash identifier:          06ufcCvRbNPdoLMxudW2+db8EbQ3L24p8OF68FnzuSE=
Subject key identifier:   6C:4A:BC:20:6E:C5:30:3F:25:84:DC:12:60:5E:7F:88:15:8C:EA:78
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584E9D4A740CBD4789F4C9031520
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     393249
IP address blocks:        142.231.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:74:0c:bd:47:89:f4:c9:03:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=c1fa5560-bd95-4313-a6dc-a19f28ce3080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:a0:9d:9c:c1:87:23:87:21:15:7e:2d:8b:
                    36:2f:8e:ed:d3:15:1e:b2:f2:ed:ae:f2:2e:2d:da:
                    2c:22:85:e5:ef:03:39:f0:1d:fe:bf:2f:da:c1:64:
                    26:47:64:74:a7:cc:ab:19:84:fc:f1:0d:ee:3e:d8:
                    10:9f:9c:33:8a:f7:6f:fb:5f:b3:2d:6b:34:bc:71:
                    09:16:46:04:0b:5f:53:2c:56:64:f2:b1:2c:6d:f8:
                    24:31:33:80:5a:ad:a1:6f:c9:33:6a:a2:2f:70:7b:
                    54:3c:a0:2a:36:5e:b3:41:0f:04:40:2a:35:01:f3:
                    6d:2b:d7:26:70:ab:8f:ae:92:44:a2:d6:55:56:50:
                    97:71:b1:42:8e:fb:54:03:c8:98:8a:e1:dc:18:6a:
                    6d:7f:37:77:88:dd:18:9a:b4:67:29:6e:24:a8:03:
                    33:98:9e:5d:97:ac:33:dc:8c:f3:48:56:db:f2:c8:
                    57:37:03:b1:5c:0f:7e:cc:b7:ef:7c:1d:f0:b0:a9:
                    6a:01:5b:db:15:05:62:2e:3b:a1:a4:d8:26:12:ed:
                    24:fa:e7:95:93:62:a5:3c:0c:84:d4:f9:a3:1b:0e:
                    c8:15:dd:45:9e:50:e5:16:46:fb:56:7e:e6:8a:09:
                    c2:dc:4f:05:51:e8:03:1d:2b:60:a5:8d:6e:50:8a:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:BC:20:6E:C5:30:3F:25:84:DC:12:60:5E:7F:88:15:8C:EA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86fece67-20b8-3986-8803-3d7ac8138185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:ee:94:fb:bf:67:39:37:6d:c3:4c:1c:b2:74:d9:41:0c:
         03:c4:87:f9:e6:2b:a5:1a:ad:11:48:68:91:98:0e:16:84:50:
         7b:f7:44:5d:d0:da:1e:9e:3b:cd:ba:1d:c7:50:8b:14:58:96:
         12:76:9c:14:f9:d0:7f:85:a2:de:fc:ca:8e:0f:38:b7:3b:14:
         0b:c3:42:6d:a8:74:fb:ba:14:8f:c0:10:14:a0:14:b3:87:72:
         e0:6f:15:a6:ce:44:89:e6:04:35:99:a4:a8:5f:c0:b3:0a:64:
         20:6d:30:40:c2:04:7f:2c:16:bd:df:b5:5c:33:17:48:3a:02:
         ac:72:44:c6:79:64:8f:d1:06:f7:13:17:00:49:0a:b6:98:46:
         cb:42:e0:dd:69:52:7e:98:a6:9e:a5:95:82:05:19:26:ff:69:
         ce:5f:c9:73:9f:ae:a3:e7:a9:42:f9:14:21:39:ff:16:ed:4c:
         e1:e5:4a:05:df:be:21:44:10:22:c1:62:e0:4b:c7:8a:3d:29:
         13:42:3e:5b:c7:b6:8b:2a:67:aa:30:be:35:32:1c:e4:30:81:
         55:7c:12:59:b6:95:b4:87:00:c1:cf:6c:79:b2:7c:4e:d6:b6:
         d5:d2:b3:99:83:f5:82:79:2b:aa:21:bb:bf:64:87:74:c9:fd:
         93:ce:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:44:11 2026 by rpki-client