Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
File:                     f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa (raw, json)
Hash identifier:          nayP8dsq8vTecL0gv08KZ5iftB7Pxbg0GPeonSHwKWo=
Subject key identifier:   9D:11:E9:F9:F5:43:DD:43:61:71:98:44:45:78:54:05:49:E5:1A:E6
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584D4A8FA21081C17D959AD21A80
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        142.202.36.0/24 maxlen: 24
                          142.202.37.0/24 maxlen: 24
                          142.202.38.0/24 maxlen: 24
                          142.202.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:a2:10:81:c1:7d:95:9a:d2:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=f1af6927-4015-4122-a27a-b880c474652b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:2f:4d:1f:a3:ef:4a:b4:31:20:79:29:ae:
                    90:7c:86:a0:57:11:da:ae:87:72:52:41:a8:33:69:
                    de:ef:43:9a:ef:9d:5d:16:4a:18:39:1e:2d:83:e1:
                    c7:7a:73:21:1d:b1:a1:84:59:ba:a3:c6:e2:a1:ff:
                    04:8e:0a:99:d5:e3:3e:7c:e4:3a:97:dd:05:71:f0:
                    95:35:29:a7:09:2a:32:f6:4c:6a:e3:5b:c8:77:75:
                    c1:49:5a:6c:26:1e:d9:ed:e3:79:a1:93:5a:e3:80:
                    78:ef:6e:88:0e:c0:2f:60:af:74:0e:85:e4:92:43:
                    a1:1a:0e:fe:3a:f0:aa:0d:18:79:44:b6:cb:dc:e5:
                    b4:2d:75:95:e5:b6:86:c4:16:89:4a:36:3a:37:c5:
                    ba:1f:30:82:2a:3d:57:78:77:51:46:0d:b3:6d:81:
                    be:0f:ee:a2:90:c2:f8:65:2e:6b:89:89:5d:9f:a9:
                    ee:b4:9c:1c:cf:18:91:9b:56:9b:74:97:ba:e0:b4:
                    be:57:0a:61:6f:89:cc:64:0b:66:11:ad:62:e3:48:
                    13:82:91:2f:de:2b:30:57:4c:05:05:74:e6:45:37:
                    cb:33:9f:35:3b:69:13:ee:8f:ef:fd:ec:15:7a:22:
                    92:15:75:81:9d:73:63:8a:3d:3d:b0:49:24:e6:04:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:11:E9:F9:F5:43:DD:43:61:71:98:44:45:78:54:05:49:E5:1A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:21:e1:c8:20:9e:8d:23:b9:c9:ab:16:d2:44:52:c9:fa:bc:
         b7:1b:4c:1e:48:cb:9a:9a:d2:8a:e3:c0:2e:e3:ac:8e:11:c3:
         51:0a:2d:a8:9c:fd:f9:a0:c5:64:38:26:46:37:ee:28:56:79:
         0b:d6:80:ab:62:db:1d:b4:a7:7d:00:df:05:6b:80:df:33:f1:
         ae:96:85:5f:0f:6e:01:b0:c1:64:64:30:96:37:23:21:85:71:
         8f:b6:a7:5c:cc:b9:c7:db:bb:72:b1:d4:89:9d:f1:b6:b0:42:
         dc:87:e0:ac:a2:a7:9b:b9:7e:84:75:a5:45:ed:9a:c3:48:5e:
         42:6b:2c:1a:11:42:df:1d:d6:50:29:85:89:db:57:e0:56:01:
         44:30:ee:34:0b:c0:af:d5:ed:ad:8d:7c:9a:d7:c7:25:8d:2e:
         8e:8c:32:0c:47:df:96:6e:45:6a:ef:55:f8:f0:72:2b:01:da:
         63:c6:a2:39:c4:0e:0c:c1:81:3b:d6:fc:4e:56:90:0e:fa:93:
         97:12:fe:d1:e5:cd:9b:b3:31:cd:75:a4:71:b4:02:60:bb:49:
         ac:61:1a:c7:dc:28:bd:ac:4d:a5:65:ef:3f:02:44:2a:75:fb:
         ec:da:82:b0:91:e2:44:ec:68:b7:1f:04:c6:cc:fe:3b:6b:f5:
         d3:fc:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:30 2026 by rpki-client