Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa
File:                     f1432e62-acbc-3fcc-8436-8d1fb451f216.roa (raw, json)
Hash identifier:          mJUua+hyKZbJBKIDvpjNSxVoZR53NxEEje8mcYkiQp8=
Subject key identifier:   33:86:D1:DC:A4:78:CE:13:79:99:41:D3:1F:2C:CE:7E:7E:9F:7B:83
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584EF87CBFD39164FF0F7ADFC710
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     53856
IP address blocks:        142.202.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:bf:d3:91:64:ff:0f:7a:df:c7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=4095be9e-f674-47a5-a236-78430c5015c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:d4:a6:07:1e:4a:47:60:20:6e:f9:6b:3d:
                    6e:47:a2:cf:c3:39:62:72:5a:42:33:c1:ae:2a:0a:
                    64:d2:d0:cf:0a:28:fa:f9:de:65:48:e6:4e:6d:47:
                    5f:7a:7f:cb:ec:8a:67:43:65:c3:95:35:79:44:1a:
                    81:79:1f:94:4d:29:ae:fb:83:cd:99:a6:91:77:0c:
                    e6:7e:fb:69:38:69:d0:cb:c6:83:b4:10:7e:e3:b6:
                    70:95:66:f6:db:1b:ec:70:49:c0:24:0f:78:f5:58:
                    30:c5:f0:ba:6c:90:9f:21:f0:d4:49:08:e7:cf:78:
                    ae:ee:c8:79:6d:ef:79:a1:2b:c4:e0:e6:27:e4:c6:
                    2b:84:7c:84:28:7d:2b:69:ae:f4:62:87:70:38:11:
                    17:7e:0d:6c:1f:5a:25:21:62:16:66:5d:3f:c8:0b:
                    8b:c1:41:b6:72:c2:eb:cb:69:51:52:7f:6d:3e:f8:
                    7f:47:0c:1e:94:0a:c9:ae:21:e9:57:c2:80:15:d7:
                    40:27:99:8e:13:32:18:3b:58:a0:aa:d5:ca:e0:47:
                    cb:39:3e:fc:d7:94:52:df:cd:c8:9a:18:d9:3b:00:
                    b2:c7:9c:40:62:36:44:72:a1:f6:43:21:fd:04:4c:
                    93:03:00:fb:c1:a7:34:51:44:fd:63:71:d4:e3:c7:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:D1:DC:A4:78:CE:13:79:99:41:D3:1F:2C:CE:7E:7E:9F:7B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:28:1c:05:c4:c4:e8:ce:56:84:68:72:fb:c5:b4:83:3b:
         d5:a6:61:49:c0:d9:cf:3f:87:e0:8a:08:62:bc:fa:a2:37:cc:
         e7:cf:5c:44:c6:de:34:ab:71:75:da:e9:eb:87:48:af:6e:fb:
         6d:6b:d2:4a:b1:f3:6a:2b:a6:54:48:7b:53:0b:fd:2c:27:17:
         54:68:2a:c4:b4:8d:69:6e:5d:af:ea:0a:a4:e8:7f:86:57:4b:
         8f:b3:c7:46:6e:5e:19:f1:a2:ad:4a:e7:28:df:95:52:6d:68:
         37:2a:9c:bc:e8:d1:b3:29:c4:17:cb:96:2d:89:04:5c:9b:a0:
         67:6e:40:13:c5:f9:c9:31:ae:f1:63:b6:57:37:33:93:5c:ed:
         78:28:df:79:14:08:b8:ba:07:78:1b:9d:d3:3a:a7:83:19:09:
         47:e0:1a:6b:fc:68:19:ed:89:6b:78:ad:c5:c4:67:8b:62:55:
         bb:40:5a:70:e3:90:d7:4a:28:08:7a:12:ef:7c:cf:ae:e1:7f:
         6f:24:26:fa:39:bb:ae:7d:78:d1:bf:8e:b2:8f:3b:a6:a3:40:
         38:fc:87:e0:fd:d6:9f:82:d0:11:b6:c4:c7:f1:94:b2:15:2e:
         70:fb:9a:9f:04:35:b6:17:8c:71:ec:8d:9e:43:f2:23:09:e5:
         97:af:8d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:38:18 2026 by rpki-client