Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1b62a2b5-5355-3baf-a6c0-e14d69049583.roa
File:                     1b62a2b5-5355-3baf-a6c0-e14d69049583.roa (raw, json)
Hash identifier:          Kic85yfnYFhNTWT8bgorAiEGJsYKz0iUD9O8W87ZtHE=
Subject key identifier:   20:B4:66:0B:B8:79:76:35:8B:98:55:E3:82:F7:8B:00:46:8A:6B:B3
Certificate issuer:       /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
Certificate serial:       010D0C9F4328584F4F07F9CFC3260D6192EE7500
Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1b62a2b5-5355-3baf-a6c0-e14d69049583.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     26077
IP address blocks:        142.147.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f9:cf:c3:26:0d:61:92:ee:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=ceb37104-0c55-4011-b6ea-5b24f0aa3d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:20:33:f6:b0:2d:f0:cb:0f:47:44:2a:7a:
                    a7:89:3a:8e:7f:c3:82:4a:0d:66:28:89:dc:d6:a0:
                    1e:23:29:05:db:dc:9a:a0:29:5d:45:14:a3:bf:8d:
                    3e:bd:f4:69:12:2c:ad:ae:4c:c7:be:9b:c7:78:81:
                    fe:f7:10:a2:4c:07:b5:33:e1:f7:f9:65:85:1d:92:
                    42:dd:de:55:af:36:6c:ed:78:2e:04:91:ba:c9:c2:
                    d2:c3:1a:c9:5c:b2:fc:27:88:20:30:da:7f:27:27:
                    15:a5:69:f3:65:c7:fa:d8:6c:7e:4d:8e:29:14:a3:
                    c9:47:05:2a:c9:16:bd:65:7c:ff:df:4a:61:ba:75:
                    e4:60:08:f7:09:ca:93:ff:da:f2:1c:d1:91:f2:73:
                    54:4b:f5:89:9a:8d:d0:a3:be:4a:fd:f4:a3:5b:a1:
                    e9:0b:be:2e:13:98:dd:75:98:e7:59:ed:1e:da:af:
                    fa:78:ad:c3:09:0c:d7:09:d8:8f:46:fa:fb:93:c8:
                    77:11:d6:e0:cc:8c:5c:2d:71:c3:da:d1:73:13:50:
                    a1:dd:6a:da:d5:07:19:c3:05:4d:cd:83:0a:41:55:
                    af:b0:95:ff:5d:63:a5:d8:ec:2c:df:79:fc:64:70:
                    f0:48:4f:ba:e3:ed:5c:cf:62:c9:da:1f:d4:e6:78:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:66:0B:B8:79:76:35:8B:98:55:E3:82:F7:8B:00:46:8A:6B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/1b62a2b5-5355-3baf-a6c0-e14d69049583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:90:dc:ef:16:ed:dd:a0:f3:29:d6:c3:10:d2:55:ce:5f:9f:
         86:f9:b4:07:df:6a:76:48:0b:0d:fe:73:98:02:b3:33:9d:92:
         b1:98:e7:8a:6b:87:ba:44:37:4c:19:06:e8:2d:ba:d3:a9:b7:
         b7:58:50:04:5e:e7:c4:b0:36:0f:bd:e5:3c:a0:39:e8:db:d9:
         ee:66:38:7c:44:43:38:52:db:d5:7d:f2:31:fd:7f:69:c0:9b:
         f7:19:2d:34:8c:61:93:ff:15:c1:01:c2:7e:bf:c6:44:dc:1d:
         0c:83:e9:66:dc:46:4a:03:ba:f6:35:7e:fd:1c:97:e6:c3:bc:
         c1:a1:24:04:00:4e:75:38:c6:26:1a:71:7f:f9:68:40:49:23:
         23:3c:d6:af:b5:00:98:6f:ef:5d:7b:fd:64:57:3b:e7:fb:9d:
         81:dd:c6:93:de:b9:de:8d:ff:a2:eb:67:bd:b5:1f:df:8d:21:
         af:87:00:68:1e:63:35:0b:36:69:12:34:fb:a0:b1:16:43:23:
         89:0f:5f:90:b2:66:3e:bd:dd:1a:15:60:68:ac:43:45:d0:15:
         d2:32:40:9f:ad:d2:ff:6a:58:83:ca:bb:84:a5:0d:ab:98:2f:
         6a:26:43:d6:4f:bb:6d:43:bc:44:1a:4b:58:b2:6c:3a:b8:12:
         15:68:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:35:27 2026 by rpki-client