Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b4b967a-2899-3ff7-bcc9-a6ad423cb757.roa
File:                     5b4b967a-2899-3ff7-bcc9-a6ad423cb757.roa (raw, json)
Hash identifier:          LLruZy8iWqjJqhXl15cJwTBi2h0Ut5Kjpd7A3ON3OuU=
Subject key identifier:   66:19:91:6C:5B:50:99:7D:9E:BC:8B:18:01:A6:1D:95:75:DC:13:37
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D1B1A61222E3058E9BBD82EC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b4b967a-2899-3ff7-bcc9-a6ad423cb757.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        142.196.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:61:22:2e:30:58:e9:bb:d8:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=7d421038-f82f-4601-ac07-11be3df95393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:f8:0e:d8:e5:f7:92:63:c8:3e:ac:61:fc:
                    6c:02:ba:f5:bb:b6:59:77:ca:49:e5:41:c4:f9:be:
                    06:15:bc:99:ee:a1:3c:b6:b3:da:62:ed:45:f1:75:
                    bf:cb:4d:c4:9a:22:4e:31:9b:07:76:4c:ec:c3:a9:
                    72:4f:bc:ba:d6:a2:96:af:7a:1c:ca:09:ff:fd:b4:
                    e1:bb:72:83:2b:28:04:79:4a:09:1b:34:3c:85:50:
                    c8:3b:5e:4b:24:29:5d:09:b0:9d:d6:48:91:a0:bc:
                    49:4e:79:dc:e7:a3:df:27:9e:90:99:ed:13:fb:12:
                    5f:7f:46:6d:05:2d:3c:38:3d:d4:a3:cd:11:7d:01:
                    b4:15:ef:80:aa:bd:a1:07:e8:13:89:4c:9d:ac:33:
                    01:4a:03:86:cb:ca:9a:60:1f:ec:e8:f5:83:0e:1e:
                    f1:b9:f9:32:0e:ac:61:9f:dc:5a:47:9a:09:69:e8:
                    3f:39:be:4f:71:43:da:59:15:e8:96:53:6c:c9:12:
                    0a:c0:99:2e:fe:5e:57:a4:c4:71:02:78:ad:75:31:
                    13:97:d1:e9:05:92:02:ab:55:27:ab:66:26:8f:96:
                    c9:57:6a:72:5e:e1:f0:8f:d7:0f:ab:63:a4:5d:31:
                    5b:c5:44:e1:13:9e:f5:9f:58:a5:cf:57:5c:89:fe:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:19:91:6C:5B:50:99:7D:9E:BC:8B:18:01:A6:1D:95:75:DC:13:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b4b967a-2899-3ff7-bcc9-a6ad423cb757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.196.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:08:45:c9:74:35:f2:5a:44:88:e4:d3:78:a5:94:88:21:
         d4:aa:5a:a3:98:4b:45:1d:c6:3e:a4:88:55:d4:b4:90:6a:6c:
         dd:df:7b:57:9b:da:ca:44:b2:06:fe:df:c7:a9:27:bd:8a:18:
         d4:86:8d:fb:a5:76:b6:fa:af:a0:0c:0b:77:6d:b8:87:5c:3a:
         e0:f2:37:68:99:51:d8:fe:ec:3b:aa:f3:b9:a0:e4:9f:85:5b:
         21:54:23:b8:66:8d:da:6c:dd:ea:ed:24:bc:53:6a:f4:cd:72:
         45:81:b7:62:10:f9:37:13:55:52:5d:ac:ab:ec:f3:ff:89:a5:
         08:44:c2:85:d1:8e:e9:16:51:fc:49:e1:e0:b9:37:62:a6:ed:
         8e:65:57:45:99:96:75:6e:95:ae:5b:42:10:5b:97:6b:91:30:
         51:6e:fd:0c:3a:c8:05:cc:c8:97:2a:35:15:35:c8:d5:fc:b6:
         8f:f2:cd:79:e7:d4:08:29:82:f6:e4:35:01:0f:7e:47:56:ea:
         95:15:54:f8:b6:85:bb:f5:25:5c:71:17:bd:50:8e:95:4c:02:
         c8:d8:54:e3:b5:21:a2:16:0e:d5:96:34:74:65:71:d2:fc:c4:
         cc:43:2d:29:4c:c0:72:66:b3:d8:50:2f:9a:d9:3d:21:87:58:
         24:6a:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:41 2026 by rpki-client