Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa
File:                     0f6e9928-9ffa-30e7-acfa-934318138962.roa (raw, json)
Hash identifier:          qMxCdWuIOJ7QigdK0O9HCDa8g50DANQVioRc+EgOrJY=
Subject key identifier:   46:15:41:1D:C4:F9:FB:29:9A:78:1D:20:D9:5E:8E:0D:FB:66:51:6A
Certificate issuer:       /CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
Certificate serial:       010D0C9F4328584E17498B4EC15F3384C9941B80
Authority key identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     26042
IP address blocks:        142.249.164.0/24 maxlen: 24
                          142.249.165.0/24 maxlen: 24
                          142.249.166.0/24 maxlen: 24
                          142.249.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:8b:4e:c1:5f:33:84:c9:94:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=9c59fec9-1a08-4c91-b4ad-d2c0ac2d41a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:0d:7c:30:f1:af:ee:6b:d7:2f:37:b0:ed:
                    b9:28:94:ef:04:b5:5f:01:16:68:a9:10:0b:a2:5a:
                    1e:9b:7f:f7:c4:12:95:84:a2:c8:e4:f3:a8:0d:88:
                    92:cb:34:95:4e:54:ab:f5:5d:f8:e8:37:cf:76:34:
                    67:36:ce:b7:79:41:d7:ae:d3:b0:a4:0f:5d:16:d7:
                    61:8a:a2:ae:5c:30:47:a5:87:01:f7:6c:9d:ca:44:
                    c0:3e:f7:03:67:1f:67:42:70:bd:2e:55:d4:0e:86:
                    3b:74:7c:26:b5:21:50:3e:40:1f:06:91:95:85:38:
                    1e:c0:59:27:fe:55:46:6a:44:9a:22:e1:aa:ad:18:
                    ed:5e:7d:a4:03:a5:4b:13:84:6e:06:67:3a:a1:c4:
                    88:cb:a8:85:33:63:e0:63:51:96:ad:d8:b4:53:ad:
                    c0:ee:da:e1:00:96:20:46:a1:bc:57:1c:6a:22:88:
                    e6:45:ae:f6:c0:1a:7f:79:75:53:b9:ba:0b:9c:16:
                    a2:e9:20:ab:6f:6e:f8:76:9e:c0:56:8f:51:53:e8:
                    b2:67:fa:78:e1:89:57:b4:86:47:40:98:9f:54:97:
                    51:c5:4c:8a:58:d9:e1:93:f6:72:10:4d:c7:fb:c7:
                    0c:56:c9:cc:df:38:8e:2b:06:bb:0a:c0:74:26:2b:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:15:41:1D:C4:F9:FB:29:9A:78:1D:20:D9:5E:8E:0D:FB:66:51:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl

            X509v3 Authority Key Identifier:
                keyid:50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:45:ca:17:96:6c:29:ec:da:16:f9:b7:4f:19:25:55:de:d8:
         c2:dc:a0:2f:df:b9:f3:68:ee:f0:50:cd:d1:fb:fb:aa:ae:7f:
         f3:5d:1c:14:f6:8a:ec:e6:b2:f0:bb:96:ea:97:13:f1:a8:ab:
         7e:31:eb:27:b8:e5:f5:a0:c6:dd:eb:41:b2:e1:c7:5b:b6:91:
         72:50:ff:7d:25:1a:32:e7:d2:11:f1:6a:da:3f:ae:35:f8:78:
         8a:91:ab:f8:fd:64:71:62:e5:67:19:6d:1c:20:65:8a:e2:c1:
         58:89:e6:99:2e:7f:7a:7b:25:42:ae:67:3d:e8:fa:c9:97:46:
         a2:65:cf:ae:8f:d5:84:cc:15:6c:23:24:db:89:4e:91:56:da:
         95:a1:6c:59:ce:51:d1:56:db:bb:49:ad:45:5d:c8:43:04:46:
         be:7b:5a:13:08:c6:91:a4:42:32:17:3a:d8:10:a9:ed:2b:32:
         d0:6e:28:23:64:1f:30:9f:6f:cd:fa:73:87:d5:d9:04:f9:da:
         b6:18:5d:cc:20:69:3d:4e:64:68:ea:e5:6d:23:17:f2:63:7d:
         f7:ca:05:a3:c9:63:4f:c8:0f:c5:21:7e:a6:4b:3f:d4:55:16:
         56:1b:84:66:18:d9:f2:77:e3:2d:b7:fe:c5:71:2b:e8:2a:34:
         b2:59:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:33 2026 by rpki-client