Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/b2d6b6ef-5d9b-311c-9748-44d4b1dd9505.roa
File:                     b2d6b6ef-5d9b-311c-9748-44d4b1dd9505.roa (raw, json)
Hash identifier:          445Qrwe3mEatL6CozM+RXUygICCpJM0o8d/jVkuMu0E=
Subject key identifier:   1B:E6:28:B1:6E:87:26:BA:30:4D:65:55:16:66:4D:08:24:78:CF:B6
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584E73F9C1509FCDA26893665780
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/b2d6b6ef-5d9b-311c-9748-44d4b1dd9505.roa
Signing time:             Fri 10 Jul 2026 13:49:42 +0000
ROA not before:           Fri 10 Jul 2026 13:49:42 +0000
ROA not after:            Thu 08 Oct 2026 13:49:42 +0000
asID:                     834
IP address blocks:        142.214.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:f9:c1:50:9f:cd:a2:68:93:66:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Jul 10 13:49:42 2026 GMT
            Not After : Oct  8 13:49:42 2026 GMT
        Subject: CN=c0158e05-54f9-4dd4-a62a-ecb571327d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ae:08:9b:55:d5:a5:4a:b3:ce:dd:33:62:cf:
                    4f:53:64:db:c8:87:f5:6d:55:98:ff:b8:18:27:3c:
                    ff:58:00:e3:3c:c9:41:40:90:01:f2:56:80:f9:92:
                    d3:03:c2:0c:31:50:dd:ea:30:4b:3c:27:48:37:6d:
                    a3:ce:e7:9c:8c:1a:98:b4:ab:66:3b:b6:4b:f5:c2:
                    6f:f9:9c:9b:0a:f0:0e:cd:b5:a2:66:66:b1:36:7d:
                    62:07:d5:25:00:8f:9b:17:ab:51:a7:3f:1f:11:a5:
                    94:90:c7:1d:74:5f:ad:65:d7:a7:03:b4:98:c8:76:
                    0f:6b:d8:41:42:ae:94:f2:8b:28:8e:80:f8:b8:f4:
                    60:63:ce:74:0c:d6:74:4e:f9:a2:36:c0:5f:4b:ad:
                    b3:bc:cf:0e:a5:cb:d1:03:b5:dd:48:0a:f4:40:61:
                    7d:d1:03:c2:24:f1:e1:da:39:df:d7:df:a5:e0:df:
                    0e:55:fc:e8:2e:df:b5:52:bd:2b:22:31:bf:94:d3:
                    c5:c3:ba:e7:5f:7d:30:b8:b1:57:f0:47:6e:b2:51:
                    74:63:d0:f8:47:fd:f0:e0:99:59:07:2f:87:c3:33:
                    26:6b:e4:a9:d6:74:db:58:90:ca:d8:b6:23:c1:0a:
                    f8:5b:e8:71:b2:94:5d:dc:15:ff:b5:0c:23:82:75:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E6:28:B1:6E:87:26:BA:30:4D:65:55:16:66:4D:08:24:78:CF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/b2d6b6ef-5d9b-311c-9748-44d4b1dd9505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:e4:c3:04:e0:ea:e4:e6:5c:f8:1f:10:12:9e:70:4d:c3:
         b4:f0:d7:de:60:5e:9d:61:8c:1b:af:75:c1:9b:8c:d2:81:17:
         d3:15:52:8d:7d:b4:73:87:08:19:d3:80:43:aa:30:1b:74:f1:
         47:c5:db:62:55:f2:53:59:aa:7e:50:58:7e:23:3a:2b:08:c7:
         ea:7a:41:f5:c9:d4:27:b0:97:1a:6e:ce:67:76:a0:ac:9c:6f:
         15:e1:a8:fe:51:c5:19:75:a8:21:31:2a:8c:ce:d7:94:e2:4e:
         28:1e:a0:6e:1c:80:bf:31:6d:b0:84:f1:7f:36:fa:55:d4:f4:
         94:fd:b9:91:3f:6b:c8:c1:da:65:e8:ed:da:ca:bf:07:3d:8d:
         a6:27:0a:3b:90:3f:cd:d4:69:f9:fa:df:21:c1:80:9c:81:a9:
         9b:97:cc:38:88:20:44:c4:c7:3e:69:5f:d8:37:f7:1a:ff:e0:
         f5:eb:42:54:fc:76:28:07:f9:a8:95:cc:cb:b9:8e:30:5d:bb:
         15:76:28:23:40:44:d3:5a:8e:11:ff:87:dd:f1:b2:6d:81:f6:
         60:67:70:93:a2:2a:17:10:ea:98:19:3d:21:29:d9:d1:56:7d:
         b4:2d:63:d9:0d:ca:02:9a:03:2a:43:03:97:1e:21:d5:90:8a:
         08:e2:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:08 2026 by rpki-client