Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/5d6c3397-6fb8-3695-93e0-4d5d77ab6d55.roa
File:                     5d6c3397-6fb8-3695-93e0-4d5d77ab6d55.roa (raw, json)
Hash identifier:          FqmzeU21g/kwu//G/gzTrQPliLbFILth7HgC4/Sabpo=
Subject key identifier:   1C:E7:D7:BD:99:2A:DA:95:8D:08:C2:65:C8:65:2D:02:BA:6C:B4:67
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584F2ABD1F9BB876349CB89ED580
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/5d6c3397-6fb8-3695-93e0-4d5d77ab6d55.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     3695
IP address blocks:        142.202.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:1f:9b:b8:76:34:9c:b8:9e:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=9e47dfd1-4983-4cae-b221-b9a7ad713e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:8d:22:db:89:c2:3d:00:8e:af:c9:b6:f9:
                    40:d5:62:04:b8:86:88:58:38:d9:40:12:e5:fc:91:
                    0f:8e:8d:c9:1d:e2:24:98:a5:c2:43:18:13:90:b5:
                    bb:24:76:e4:79:bf:31:2b:e8:86:9b:2b:e5:dc:b5:
                    f4:b2:d9:39:8a:ac:0d:df:d1:df:60:4a:61:5f:6c:
                    ca:46:e7:1b:2e:96:7a:8a:f8:e5:f7:0c:58:31:90:
                    2f:cf:0c:4b:d5:6c:1e:c7:24:a0:f0:94:5f:20:81:
                    76:d5:fe:73:b9:a3:8c:21:6c:f8:80:c4:9d:56:bf:
                    ea:b5:34:d2:c1:1e:e7:e9:6e:40:ab:3c:95:b5:3f:
                    7e:62:17:68:71:de:63:95:8f:fd:61:3a:73:f5:90:
                    42:ed:fd:9a:75:a5:94:28:ae:c3:50:cc:52:2b:34:
                    1d:55:bc:4c:03:67:35:e8:a0:c5:c2:83:9c:88:11:
                    2e:c8:29:81:16:46:e4:25:ae:36:00:f4:86:a1:30:
                    00:66:8a:25:95:7a:33:88:64:b6:08:b6:21:3a:5d:
                    dc:f7:7b:ec:c6:30:0c:06:36:8a:8b:fe:54:9a:da:
                    65:df:a4:e0:d9:d3:1c:06:f4:22:4d:cd:af:99:be:
                    a9:14:c5:36:9b:9c:d6:ef:c5:ab:e3:8a:49:71:c8:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E7:D7:BD:99:2A:DA:95:8D:08:C2:65:C8:65:2D:02:BA:6C:B4:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/5d6c3397-6fb8-3695-93e0-4d5d77ab6d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:88:df:7b:8a:f5:9e:b2:c7:a9:2d:e3:27:78:63:0d:3a:91:
         11:11:1d:2c:b0:21:b0:d3:d2:43:9a:0d:30:48:f5:e5:e3:78:
         e5:39:fd:34:62:76:94:df:7c:fb:d6:c2:25:bf:f9:00:23:44:
         33:f6:a8:3f:b6:49:d1:3c:f8:dd:0c:31:1e:1e:6a:73:56:b1:
         8e:1f:d0:5c:a3:05:01:98:5b:55:5d:b0:d8:79:56:43:01:1a:
         49:3a:17:73:ad:73:1b:6e:89:61:4f:87:b8:a4:84:46:d4:11:
         08:bc:0a:87:a7:91:3a:f2:77:0e:07:e7:43:a5:71:2d:a0:6c:
         0f:9d:df:27:14:de:20:a9:9e:6f:d5:64:c3:55:e6:73:d9:b0:
         44:e4:fa:b1:9c:64:11:00:b0:00:76:95:85:26:55:29:bb:81:
         80:59:42:b9:ab:9e:ac:e6:8b:b0:99:20:32:9c:fe:87:1e:b3:
         04:14:66:c2:b6:a6:2a:2e:de:03:d6:23:49:08:93:fc:92:75:
         75:61:83:fe:a2:a6:8a:66:ae:03:18:3a:29:cc:d2:28:c6:f1:
         47:b4:3e:21:40:c1:d9:05:3e:81:b3:eb:65:7d:b4:ca:a0:d2:
         03:35:23:60:b7:e3:7a:f3:0d:e4:b6:5f:e4:96:17:82:31:27:
         2f:fa:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:15:43 2026 by rpki-client