Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9/0c44408b-b9f8-3485-b03f-973d8496e939.roa
File:                     0c44408b-b9f8-3485-b03f-973d8496e939.roa (raw, json)
Hash identifier:          UfSCbi0WcPUGx9caLScdW9uUD+COfe35neeGL1ji3mo=
Subject key identifier:   30:F3:21:BE:46:93:04:87:85:0A:22:47:C0:49:38:B3:1C:08:CB:3D
Certificate issuer:       /CN=42b03247-6da6-46e0-b80a-c4f6c6a69ab9
Certificate serial:       010D0C9F4328584D628BABF1D173032E05642300
Authority key identifier: CF:A6:FF:F8:54:42:62:CC:2B:0A:B3:F3:35:5C:FD:6C:C5:42:61:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9/0c44408b-b9f8-3485-b03f-973d8496e939.roa
Signing time:             Fri 03 Apr 2026 15:12:13 +0000
ROA not before:           Fri 03 Apr 2026 15:12:13 +0000
ROA not after:            Thu 02 Jul 2026 15:12:13 +0000
asID:                     26410
IP address blocks:        206.197.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9/42b03247-6da6-46e0-b80a-c4f6c6a69ab9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9/42b03247-6da6-46e0-b80a-c4f6c6a69ab9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:8b:ab:f1:d1:73:03:2e:05:64:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b03247-6da6-46e0-b80a-c4f6c6a69ab9
        Validity
            Not Before: Apr  3 15:12:13 2026 GMT
            Not After : Jul  2 15:12:13 2026 GMT
        Subject: CN=776c4310-1da5-4309-8b5c-ee24e106561c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:5f:69:7f:cd:ab:2e:0e:d6:8e:57:09:11:
                    db:3a:12:2b:47:bb:f1:08:31:53:38:95:a9:1b:c2:
                    0e:c1:f2:24:f2:16:56:0b:dd:e0:45:27:58:2e:1d:
                    ba:36:35:78:34:d9:bd:66:dc:bc:9f:48:6d:3a:da:
                    4e:ba:ad:8a:9e:3d:de:48:a7:1f:b5:e5:94:01:b8:
                    02:11:a6:0b:17:ad:12:9c:9f:1d:63:c5:1e:54:ed:
                    46:bd:d5:95:22:10:d8:c6:62:20:e9:64:cb:6c:cb:
                    58:b0:a8:dc:fb:f6:c2:49:30:74:c2:4f:02:55:33:
                    ad:8d:42:73:8e:3a:00:da:0c:fb:cc:a7:01:11:a8:
                    89:cf:e5:66:bc:e9:88:78:fd:4c:83:4b:fb:d5:25:
                    cd:44:e6:83:b7:f2:ab:dc:7c:3b:eb:18:61:5e:5b:
                    34:9a:21:ee:60:0f:80:f2:35:27:fc:67:60:24:97:
                    65:c6:84:c3:ae:9c:a7:86:8a:b2:e9:8b:ff:34:bc:
                    7b:a3:7f:46:d5:14:c0:ef:bf:fc:6a:fc:85:cd:04:
                    ae:85:cb:63:18:ea:d3:84:2b:ca:59:8e:be:70:18:
                    88:25:af:36:b5:1b:67:2e:42:96:16:70:fc:2b:96:
                    c8:6d:f4:8f:4a:08:6f:f1:2d:1c:d3:dc:d2:bd:23:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F3:21:BE:46:93:04:87:85:0A:22:47:C0:49:38:B3:1C:08:CB:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9/0c44408b-b9f8-3485-b03f-973d8496e939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9/42b03247-6da6-46e0-b80a-c4f6c6a69ab9.crl

            X509v3 Authority Key Identifier:
                keyid:CF:A6:FF:F8:54:42:62:CC:2B:0A:B3:F3:35:5C:FD:6C:C5:42:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/42b03247-6da6-46e0-b80a-c4f6c6a69ab9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:cc:c1:a2:02:78:66:45:c9:90:e5:8d:bd:4e:93:81:68:
         78:23:9d:43:e3:91:0f:2b:a3:a6:ca:a4:d2:32:13:e9:35:79:
         d3:b1:ca:03:ef:96:38:26:44:59:34:90:e3:7a:b7:2a:81:25:
         77:d6:41:5c:9e:db:57:2a:bf:de:9e:e1:a9:eb:a8:d3:c2:31:
         cf:48:cd:3e:ad:14:f3:36:89:52:f3:9d:7c:d6:dd:6f:c4:8e:
         6d:6e:d7:b0:96:d6:b1:aa:21:d0:1e:a1:65:48:f8:65:dd:35:
         c5:38:cd:d8:52:c3:cf:5e:4d:d1:6c:fd:2d:2e:9d:83:24:4e:
         21:95:3c:0a:79:00:67:8b:59:ce:f7:25:d9:cb:aa:89:80:91:
         8d:ce:b1:a0:50:e2:fe:fc:02:32:22:d5:50:14:4d:17:fd:73:
         40:05:61:98:7c:5d:9f:e7:2a:c6:ad:f8:7f:fd:2e:bd:99:59:
         e5:88:79:44:48:6a:d0:42:d9:9c:62:fc:49:98:1e:ec:cb:92:
         8c:13:76:a3:d8:b1:ba:0a:ba:fb:aa:c2:bc:0a:50:dd:60:34:
         f0:a0:b3:24:d5:1c:4a:70:53:82:c8:e8:38:7d:85:68:ad:ed:
         30:e8:bd:5e:69:d9:bc:96:46:97:78:31:da:5d:3f:d9:35:03:
         9e:1c:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:09:42 2026 by rpki-client