Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04906f0f-7fa0-3613-ba97-043ddae2854e.roa
File:                     04906f0f-7fa0-3613-ba97-043ddae2854e.roa (raw, json)
Hash identifier:          1NKf5ED6LZEV5ruGzKB909MEbBUwskyNSk0XSyqe2Y0=
Subject key identifier:   06:85:C0:C7:F1:DD:2C:C4:D9:83:B6:A9:7C:27:0F:03:10:21:AC:34
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F46A7F70B0E80645BF78F65A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04906f0f-7fa0-3613-ba97-043ddae2854e.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     577
IP address blocks:        142.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:f7:0b:0e:80:64:5b:f7:8f:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=2a046450-851f-489e-8d4b-a1d74498a250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:9b:36:6a:c4:fa:0f:93:14:2d:c9:23:8f:
                    c5:80:ff:74:ed:58:7a:d9:68:20:88:91:cd:c6:d2:
                    dd:7f:50:06:90:db:21:e5:5e:6f:cd:8a:ae:51:b5:
                    98:f6:1b:98:be:10:be:72:34:c3:f8:50:17:f1:62:
                    99:ba:48:04:bc:74:15:5f:2d:6e:ff:f2:45:d7:43:
                    bb:98:87:c3:65:e0:ca:50:0c:e0:71:ee:42:2d:8a:
                    5d:10:c8:23:9e:6c:30:23:ac:42:ea:75:37:7c:f2:
                    2e:0c:a7:6f:8b:82:75:86:bc:29:2f:a2:55:05:4d:
                    30:0c:b7:63:2e:a3:ee:eb:5c:3c:9f:9a:34:a4:62:
                    22:24:c9:11:f8:fe:ed:d6:f1:c9:0a:c3:24:9b:5f:
                    d6:c5:5f:43:88:f4:85:7f:73:a8:10:01:9d:e0:e4:
                    67:c5:3f:45:45:c0:50:d1:e8:18:9e:7b:d2:9b:61:
                    d9:78:83:20:17:8f:1a:47:82:39:c1:bb:f7:66:05:
                    e8:01:e8:39:d6:33:9c:0d:4a:6d:de:c0:01:4c:1b:
                    e9:f7:10:bd:95:39:31:3c:4c:4a:fb:c0:61:29:74:
                    65:ed:96:67:07:e4:c9:3e:c9:d1:ec:b3:67:df:16:
                    a7:7d:9a:b3:8c:64:f2:77:54:d6:a6:1a:29:bc:aa:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:85:C0:C7:F1:DD:2C:C4:D9:83:B6:A9:7C:27:0F:03:10:21:AC:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04906f0f-7fa0-3613-ba97-043ddae2854e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:cc:f5:bf:f1:70:a3:88:ec:52:8a:2f:ad:1c:1e:be:c4:a1:
         14:e5:37:f4:84:fa:e5:59:37:64:b3:e8:b7:91:67:8f:bf:1f:
         ce:7a:29:ab:7d:48:bd:96:ac:25:fa:5b:fd:8a:f9:dd:d0:03:
         20:2c:2d:50:72:78:e0:e8:d3:15:e7:2b:80:90:23:05:75:19:
         bf:97:80:80:11:b8:4a:ea:f1:84:48:7e:3a:1e:31:b8:37:9a:
         48:12:fb:46:8d:7f:df:84:94:5a:99:c4:e1:1c:2b:e3:a7:e8:
         bc:3f:7b:9b:95:49:24:93:55:f8:da:f4:5b:c4:77:03:e9:99:
         95:8c:a3:4a:c0:75:e3:1e:95:72:7a:c9:51:34:a7:15:47:23:
         b3:a9:3d:da:e3:21:75:1b:bb:a0:5a:07:3b:90:bd:d0:8b:d4:
         fc:d3:b9:67:fe:4b:90:ea:d9:8f:f5:55:76:61:33:7b:36:41:
         b1:8d:ed:22:2a:f0:92:0e:da:88:d1:5b:50:4a:9a:16:23:ab:
         c1:b6:b4:61:cc:a4:cd:cf:b7:51:6b:65:dc:b7:95:10:02:bb:
         1a:27:ca:62:a2:a7:59:dc:18:fb:d6:25:55:5b:10:d7:d9:33:
         9a:d6:34:5a:5d:92:47:53:1a:da:88:d8:bf:26:b9:f4:66:22:
         5c:26:74:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:19:13 2026 by rpki-client