Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa
File:                     0f6e9928-9ffa-30e7-acfa-934318138962.roa (raw, json)
Hash identifier:          czDVPAtVhUPHhM4sWWrQ/9wzmtsYORdBTUv1yc6SUIE=
Subject key identifier:   FB:BD:EB:62:03:3F:71:D6:9B:ED:7F:22:82:AE:3C:29:1B:8B:DC:D1
Certificate issuer:       /CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
Certificate serial:       010D0C9F4328584F5B9805361F14634D37FF6400
Authority key identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     26042
IP address blocks:        142.249.164.0/24 maxlen: 24
                          142.249.165.0/24 maxlen: 24
                          142.249.166.0/24 maxlen: 24
                          142.249.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:98:05:36:1f:14:63:4d:37:ff:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=c02f3de0-1a17-4867-b77f-5afe411f8dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:f6:14:09:b9:9a:95:86:f6:ff:f6:38:66:
                    e1:ff:d6:b2:c5:12:f7:96:33:ad:d7:24:b1:fc:9c:
                    e8:40:e3:84:3b:3f:52:14:d7:cb:c7:36:50:2d:f1:
                    67:1c:56:75:57:d0:8e:d4:80:af:ca:ca:36:fd:b0:
                    92:38:71:67:b0:67:85:71:76:6d:10:77:1b:63:cf:
                    6d:53:dd:9a:7e:fa:ba:82:9b:25:08:7f:ee:08:aa:
                    f5:3f:0f:ca:58:e1:4e:37:33:3f:30:d0:6d:98:5f:
                    65:44:09:23:3b:65:af:91:40:ae:ee:6a:30:eb:f2:
                    c9:1d:21:dd:5d:92:ac:e2:2f:fe:8e:9b:33:94:6e:
                    8b:e2:50:64:2a:2b:9c:f5:14:5d:98:f7:54:18:0c:
                    be:83:ad:0e:52:a0:62:f8:4d:e5:27:21:95:e1:10:
                    22:8f:69:9b:01:b9:18:86:3e:4b:45:45:8a:b2:34:
                    91:ed:b9:12:c7:52:f1:70:e4:8f:a2:14:ae:41:cf:
                    e4:c4:91:6b:07:3d:1a:d3:59:cb:30:04:ce:12:af:
                    33:34:75:f6:7f:10:35:f6:f1:7a:57:21:46:bf:2b:
                    74:b3:9c:11:24:2b:7a:89:a9:ed:6d:fe:37:82:05:
                    d6:0f:c3:2b:7d:a3:f8:07:4d:69:01:75:73:cd:eb:
                    80:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BD:EB:62:03:3F:71:D6:9B:ED:7F:22:82:AE:3C:29:1B:8B:DC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl

            X509v3 Authority Key Identifier:
                keyid:50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:83:2e:ed:40:fd:69:48:07:b4:44:fe:b2:56:76:23:c8:fa:
         cb:44:75:cb:a6:9c:5a:40:8f:15:a6:12:5d:5d:e8:d6:90:78:
         6a:46:b1:64:c8:c9:65:79:35:07:df:16:09:82:62:d5:bf:e8:
         07:0e:4e:81:5c:74:2a:5b:ac:a7:17:d8:da:97:81:e9:99:0a:
         32:8e:60:f1:b7:38:f5:0a:8d:c5:56:07:17:86:ca:2d:2f:89:
         92:a3:4c:86:0e:30:ec:9a:a4:bf:4a:fc:fd:8f:d7:8d:64:04:
         4d:c6:7b:d2:67:8c:82:7a:8b:bb:0c:d1:da:5c:be:5f:1b:48:
         4b:4b:6f:be:02:2b:b2:d6:ea:0a:17:7d:08:04:30:bf:96:a0:
         5c:17:35:45:1e:45:95:12:f8:5e:f6:56:d6:a3:33:d2:13:6e:
         5b:67:70:dc:c4:90:95:99:8a:e2:82:fc:9d:d1:ff:40:21:2c:
         83:12:a0:7a:5a:1b:44:86:df:39:9f:e0:3e:ab:03:dc:3f:fe:
         94:d4:18:bf:79:3f:e9:06:b4:72:73:6d:35:55:98:21:90:8a:
         f9:ba:25:74:79:43:52:69:85:51:c7:5e:9e:79:f4:b0:18:c8:
         df:2b:d1:b3:0c:59:f7:ac:77:76:89:30:01:7e:a6:3e:a1:46:
         ab:f1:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:29:12 2026 by rpki-client