Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa
File:                     30baad33-ed81-3ee8-9ad8-d03d892b9187.roa (raw, json)
Hash identifier:          SYoUMUlYA86xd1M5gzGlYUUYSl2wNKbm/Y+7nN31PMk=
Subject key identifier:   D8:49:73:11:89:72:6C:F7:CE:05:F5:39:96:88:0F:90:AC:9A:F8:F7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C8550C832FE8FA281800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        142.169.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c8:55:0c:83:2f:e8:fa:28:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aeee8632-b086-4433-a08b-ced6deb2d127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:18:d5:18:ca:39:05:d8:f9:61:59:88:19:e5:
                    84:e3:6b:90:84:74:fa:3b:02:b6:bd:40:0e:f6:d5:
                    a3:b0:d1:d8:f6:dc:97:87:e6:3d:3b:10:2b:8f:2c:
                    a5:f3:08:65:62:9b:1a:84:a9:7b:7c:16:ef:c8:2d:
                    40:cd:1f:7e:d9:80:8a:6d:dc:18:7a:3e:a8:fb:38:
                    1c:7f:b2:ac:c0:34:c9:ba:8b:73:da:bf:b6:4a:43:
                    f2:50:3c:20:6e:a2:05:71:5a:73:bb:ab:0e:15:57:
                    ec:b5:c7:9d:17:be:f2:6d:01:55:0a:d3:b9:0c:48:
                    16:d1:7d:3d:5f:68:e1:fe:aa:39:c0:19:80:48:32:
                    eb:5a:b1:bc:a7:6f:a7:b0:b7:f6:df:ec:6e:a2:60:
                    aa:84:c7:0e:0b:e6:32:3a:08:05:09:d7:d9:57:fb:
                    2b:d6:21:26:53:5d:55:5c:c4:c9:ad:a0:67:82:71:
                    45:c4:5d:38:4a:39:1e:f9:e3:03:20:04:83:3d:c4:
                    6a:d1:11:4f:0a:09:a7:08:1d:5a:ad:7a:bb:f8:69:
                    0f:68:27:74:9e:17:98:d3:66:44:06:94:a0:38:e2:
                    d1:71:e8:82:46:b9:53:78:0f:06:b4:f9:ea:12:1b:
                    0b:8c:84:6f:95:06:8f:c7:81:be:38:90:a0:d3:05:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:49:73:11:89:72:6C:F7:CE:05:F5:39:96:88:0F:90:AC:9A:F8:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.169.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:bf:1d:4c:2e:7e:b3:28:dd:ed:3c:01:d7:cc:1f:4d:f8:
         0d:59:bf:f6:b7:0e:a9:cc:4d:14:c7:14:84:22:35:79:de:27:
         4f:a6:2b:33:7c:c6:a9:46:9b:45:82:f9:e1:1e:e5:89:5e:66:
         ea:1e:4b:39:e9:e7:75:c5:53:dc:b5:e1:9d:ea:3a:d6:26:76:
         ec:b0:2d:fa:fc:20:ff:af:25:16:de:f3:67:33:7b:4d:5c:42:
         dd:eb:f8:0a:9d:29:5c:96:4a:e7:3d:7f:1c:11:e9:62:a7:55:
         11:2c:95:2c:69:ba:55:b2:25:2d:73:99:d8:4c:0f:b4:0e:55:
         b0:1c:21:78:28:36:4d:93:19:bf:18:90:63:81:a1:1c:ce:40:
         a6:bc:99:93:7e:74:21:9b:c8:97:04:c9:8a:86:57:39:8b:1e:
         b6:37:95:1d:de:f8:87:3b:58:8e:48:56:45:ed:88:2a:05:12:
         b0:47:02:d5:be:c4:05:39:0a:85:c7:b1:02:a4:89:e0:54:84:
         3e:83:68:a7:1f:97:58:e1:fb:9e:b9:b9:84:d8:80:56:b6:64:
         93:a5:5f:7f:76:17:f6:6e:f7:5c:f6:3e:5b:7a:91:a2:f6:d9:
         c8:39:64:15:87:42:e9:0f:48:da:c3:cf:5d:56:65:40:fd:74:
         eb:4c:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:16:47 2026 by rpki-client