Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7cd855f-bff7-3695-ab73-c764d08164d8.roa
File:                     e7cd855f-bff7-3695-ab73-c764d08164d8.roa (raw, json)
Hash identifier:          1dD4YNzAN+SjnVilPptnoLNrw7QlNMkDWR3VZf0X4+M=
Subject key identifier:   2B:66:5C:A4:2C:B3:B8:B9:7B:72:A6:99:78:82:67:9B:A4:99:50:20
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06723875473D918CCD34B040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7cd855f-bff7-3695-ab73-c764d08164d8.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        142.188.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:38:75:47:3d:91:8c:cd:34:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=2ffea665-41a3-4dad-ab7e-c5806c560342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:6b:b6:cb:3e:18:73:8b:23:fa:04:39:bc:
                    d0:bf:ef:86:a4:d4:94:8d:c2:4c:67:f4:24:e4:e8:
                    52:25:e4:b3:88:0b:1e:a5:27:f0:df:47:87:43:83:
                    f4:29:c4:e8:f4:aa:ea:82:d5:7e:fe:cd:73:35:d4:
                    d4:d6:97:b5:e1:7c:a4:62:60:0a:74:90:53:0a:53:
                    0b:88:91:6d:87:3f:f1:33:6a:81:e6:b9:34:cc:3d:
                    bc:43:5c:b5:87:33:15:e5:23:91:da:c6:71:e3:56:
                    51:f7:a6:52:65:ca:db:80:aa:95:79:b8:ae:a1:63:
                    ff:9c:b2:ad:69:b3:bc:80:3e:89:7b:ce:c1:5f:08:
                    bf:d8:2c:51:47:38:7b:21:31:78:6c:d2:8f:f4:16:
                    0c:89:66:7a:47:5e:bc:cf:81:f1:cd:21:04:09:1e:
                    d4:1f:c6:1d:9f:e0:31:9e:2c:4f:87:25:47:47:02:
                    16:6c:e1:d0:7c:b5:78:7c:3b:09:26:b4:4b:71:6b:
                    82:77:4a:5c:77:2e:46:c0:68:d7:e0:1f:b5:ba:e6:
                    1d:b5:13:d7:9f:22:98:e7:bd:86:04:50:4c:ae:fb:
                    2e:fe:54:be:e4:6d:53:53:40:e4:80:2a:6f:26:9f:
                    8c:9d:4a:d1:e8:43:62:0a:8e:db:bf:b8:4a:d1:02:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:66:5C:A4:2C:B3:B8:B9:7B:72:A6:99:78:82:67:9B:A4:99:50:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7cd855f-bff7-3695-ab73-c764d08164d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:d5:50:51:4d:56:23:3f:7e:d9:71:25:d6:f7:98:5f:25:
         69:cf:8e:c6:5c:90:10:14:d5:d0:aa:2c:e3:aa:18:22:15:2c:
         15:44:d9:0d:dc:97:61:2f:80:4f:c0:f8:5f:2e:1e:6a:93:2e:
         38:a6:bd:11:32:a5:eb:18:4b:19:0a:da:62:c2:9b:92:60:56:
         38:08:10:0d:59:c8:6a:15:06:54:51:33:37:88:7e:82:d6:eb:
         f6:6a:27:eb:55:3f:7d:84:8f:fa:43:9c:64:43:9c:98:65:2e:
         29:8c:af:3b:44:f2:95:4a:1d:9f:2b:aa:60:7e:28:12:74:c9:
         9b:e4:96:69:73:ed:fb:47:e1:4e:8d:7c:33:88:24:06:fa:b8:
         1e:a2:6e:e7:21:9e:ed:95:94:85:00:93:39:44:95:66:eb:8a:
         c9:8c:d9:0c:5d:90:78:8e:54:8c:44:18:ee:10:a0:f9:8a:ac:
         54:b4:80:73:f0:23:c5:8a:96:08:d3:de:5e:54:02:1f:dd:be:
         b8:43:87:5f:4a:85:dc:3d:b6:b4:e6:c1:ea:a1:76:14:71:40:
         33:77:b2:60:71:64:27:4e:a2:ee:93:b0:fc:3c:6c:df:04:1f:
         f1:36:4c:73:e5:df:3e:44:02:50:77:d6:9a:c0:fb:0d:6c:51:
         b8:9d:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:33:33 2026 by rpki-client