Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f7a52c30-30b7-3530-9b24-c629baf08098.roa
File:                     f7a52c30-30b7-3530-9b24-c629baf08098.roa (raw, json)
Hash identifier:          UKPCB5CBwmVIKFsRr4buauc2ZtoXjxOtdNS5W7u5HlI=
Subject key identifier:   86:9C:23:22:84:5C:28:DC:2F:FC:AE:D6:2C:0F:08:82:41:82:C6:DB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F067234EA5A37D4B28DC84D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f7a52c30-30b7-3530-9b24-c629baf08098.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     855
IP address blocks:        142.134.224.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:34:ea:5a:37:d4:b2:8d:c8:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=0a5e0de9-b021-408a-b14b-c355b1efd797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:27:2c:1e:d9:db:e5:87:1d:2b:40:2b:7a:
                    70:e6:48:d7:ed:29:65:54:71:1f:cb:73:66:2a:5d:
                    f9:17:39:cd:18:78:be:e9:f4:73:99:7d:17:58:75:
                    91:3b:56:5f:e4:08:22:55:4e:56:0c:0c:50:13:5e:
                    d6:14:31:ab:10:56:50:50:a3:f0:d0:ff:9f:a6:07:
                    72:82:c5:27:27:2f:fa:4a:2b:49:b9:94:a7:f0:6f:
                    6a:cd:2f:71:21:6b:5a:71:02:8b:dd:74:28:d9:98:
                    30:0c:f4:5e:93:81:35:35:e5:fd:47:f2:37:33:82:
                    4f:c5:45:60:82:05:85:2c:58:e4:60:67:02:ba:e7:
                    28:a2:1d:80:fe:a0:6d:2d:eb:39:2a:98:8f:bf:71:
                    d1:e0:bf:45:14:fa:2a:7f:e3:91:1c:31:72:fa:04:
                    cf:c7:d8:35:6d:f6:40:61:d7:e8:11:20:e2:d0:60:
                    c1:9a:54:d8:a2:81:19:17:f9:4f:af:99:3e:43:a1:
                    43:e9:74:00:c9:12:8e:9e:de:14:d8:f8:97:69:44:
                    f9:c4:c7:d8:52:41:3b:92:37:24:a2:d2:5f:5d:ba:
                    d5:ac:d6:64:4b:67:3b:59:ce:8b:4c:08:ec:d9:15:
                    aa:e1:d2:05:80:5c:07:3a:9b:ab:44:8a:5f:92:0a:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9C:23:22:84:5C:28:DC:2F:FC:AE:D6:2C:0F:08:82:41:82:C6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f7a52c30-30b7-3530-9b24-c629baf08098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:a2:63:0e:d3:55:22:d8:f5:aa:a5:e1:02:9f:c9:14:6e:
         09:77:f6:5d:34:c1:8a:f0:56:b1:df:9d:d8:81:fb:7d:57:18:
         ba:f3:22:79:b3:02:c9:17:b2:5a:6e:6b:84:b2:d5:32:e6:af:
         48:30:95:ef:9d:b4:b6:0e:09:2b:e9:2b:b8:35:6d:4f:4d:77:
         dd:dd:e9:f9:28:26:e1:b5:52:a0:5f:b3:da:4b:98:f7:3e:9a:
         95:48:48:90:c9:c8:cd:af:46:db:c0:40:88:c8:cb:01:09:ee:
         39:2f:76:88:63:bd:41:3d:f1:f5:27:e7:ce:d8:3b:ff:1f:f3:
         6b:c1:d5:e0:4f:4f:91:ee:c0:68:50:12:cd:f9:5a:fd:9e:70:
         a4:8f:05:04:70:72:ac:9f:61:08:fe:0f:4f:51:f4:78:23:f9:
         0f:66:fe:6d:5f:64:01:87:33:de:a3:19:34:fb:cf:52:81:2f:
         d6:d5:1c:11:3b:ed:da:bf:9d:45:05:20:58:d2:e4:a6:16:a3:
         fb:97:f5:2b:45:a9:c1:08:d5:b2:bf:5f:2a:aa:9e:ad:c8:7d:
         05:57:22:c8:bb:7b:c5:6c:e6:fd:5c:1d:b0:1b:d1:fb:11:06:
         4a:10:ba:3a:6b:ec:1a:4e:5c:a0:44:eb:c7:02:82:a6:3a:e7:
         6f:8d:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:27:45 2026 by rpki-client