Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/486c762d-468b-3683-b187-79e803c0b3fb.roa
File:                     486c762d-468b-3683-b187-79e803c0b3fb.roa (raw, json)
Hash identifier:          3M3LIuy8zO+arJsrs8EZU5amOsJkn/ivzLfqdsBmqsc=
Subject key identifier:   0A:3F:D2:2B:AE:B7:1E:32:C7:3D:36:AB:23:6B:16:EE:2C:44:36:47
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584DC40063DD094DE9269B2A9580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/486c762d-468b-3683-b187-79e803c0b3fb.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     577
IP address blocks:        142.166.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:63:dd:09:4d:e9:26:9b:2a:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=036e81d7-6558-456b-a77a-9d7c6cc28c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:fd:68:b4:37:a9:ad:54:a4:1d:46:32:e2:
                    56:45:09:ba:e6:09:23:5e:aa:29:a2:00:e8:18:8a:
                    c8:59:91:94:56:9f:98:e5:27:6a:f8:c1:d1:80:ff:
                    ad:5f:15:47:b0:d6:62:b9:b7:fa:97:88:ac:ff:35:
                    5f:da:62:75:0b:cb:c7:5f:0f:82:d1:b8:e0:d6:d0:
                    3c:d4:b7:87:ec:8c:5a:17:bd:22:88:f4:53:3d:d4:
                    63:93:11:27:b9:cb:c9:ed:6e:34:9a:da:d8:52:b8:
                    58:71:1c:d9:74:d2:99:d7:d4:1c:fb:5b:ef:53:0a:
                    55:e7:e8:89:44:b7:b6:5a:de:3c:93:f7:07:d8:5d:
                    a2:34:d3:4b:25:60:44:f4:37:d5:29:eb:e8:d1:57:
                    ff:68:33:ba:88:a3:6d:82:7d:7f:57:29:d2:68:1d:
                    56:9e:22:d2:f6:bd:18:a0:b2:55:b8:d0:be:31:e9:
                    1b:d5:0b:74:34:10:f3:cc:2e:a3:70:00:8d:e7:0d:
                    c1:33:fa:63:c7:d6:63:6b:f6:24:72:9b:38:79:98:
                    f5:c6:25:03:52:ec:85:1b:3e:22:05:ca:e5:6f:5b:
                    66:ec:35:01:b0:46:c5:dc:5e:b9:28:95:9c:51:9a:
                    f3:ef:07:5c:27:5a:1d:0c:2e:81:46:28:98:40:43:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3F:D2:2B:AE:B7:1E:32:C7:3D:36:AB:23:6B:16:EE:2C:44:36:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/486c762d-468b-3683-b187-79e803c0b3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:3a:4a:16:46:0d:b0:0a:41:9c:3d:55:d0:5c:9b:7d:32:
         03:3e:9f:fa:6c:7b:df:18:f1:69:2c:46:30:e7:bb:d5:65:f6:
         80:37:d1:d6:d2:a6:3c:8d:17:b8:32:57:a6:ea:70:a4:4d:cf:
         21:94:83:70:9b:28:51:d8:9f:ff:91:97:fa:d2:23:d8:8d:06:
         f2:61:56:07:ba:98:bb:e7:1c:fb:86:69:51:85:3b:b7:ff:5b:
         bf:18:d4:87:d3:d9:9b:fb:c5:e9:38:d5:94:23:39:0a:1d:87:
         3b:e8:f2:b1:ed:ec:c9:1d:c5:8a:56:e8:e1:7e:cd:3f:a6:74:
         23:34:16:bf:0e:ed:b3:04:f1:7b:2b:61:6e:cc:9f:24:02:92:
         93:6f:06:e0:24:42:0e:94:5f:32:a2:9d:97:fc:9a:fd:df:1c:
         3e:ce:d2:a5:56:14:db:fb:4d:c6:af:6a:5a:93:b5:b0:88:38:
         62:7e:e8:da:eb:0f:05:4b:e7:86:e8:4f:af:25:c6:92:1d:86:
         a1:39:2b:d4:15:23:42:78:eb:02:40:31:45:55:b7:61:0b:1b:
         fd:10:c3:46:84:5c:45:52:bf:46:b5:2f:2d:e8:fa:d4:f4:2f:
         9e:0d:41:e9:be:9d:41:88:e9:de:f3:b0:d7:1d:50:ef:f6:8e:
         05:45:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:32:30 2026 by rpki-client