Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/de7f9f2e-7162-35ee-8081-543d7779c9b2.roa
File:                     de7f9f2e-7162-35ee-8081-543d7779c9b2.roa (raw, json)
Hash identifier:          SioPa5isezcSR/b4Ml1MP0Tj9wN3YEOHBRKDUhzsb2M=
Subject key identifier:   38:7C:FF:5F:76:2D:E8:85:5B:91:18:59:EC:25:63:AC:B2:E2:B6:87
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584F45428C8745B136449E595800
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/de7f9f2e-7162-35ee-8081-543d7779c9b2.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     393249
IP address blocks:        142.231.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:8c:87:45:b1:36:44:9e:59:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=32e8886b-235f-477d-ae32-568328eded1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:5d:9d:7f:80:f3:5b:20:c1:8a:08:e6:b9:
                    d9:d8:a8:32:d9:46:1d:af:8d:9a:9a:ad:fd:61:eb:
                    d5:82:fa:5b:f6:39:93:0a:43:09:aa:97:a6:78:da:
                    61:39:e4:68:6a:70:6e:af:a4:ad:83:40:55:dd:94:
                    ff:8e:ea:eb:d7:99:d0:5f:05:4b:ff:db:9c:33:0a:
                    57:a1:a9:5c:83:0d:4f:a1:a5:0f:90:a8:14:f9:66:
                    ce:1e:0a:0c:0f:6e:cd:60:34:96:27:e9:4f:59:46:
                    db:08:16:3e:49:b7:d3:a0:55:be:89:33:f4:0d:13:
                    55:ee:fc:0b:a8:69:27:4c:60:a6:13:2f:f9:40:1b:
                    b4:02:7a:9c:99:f1:59:bd:f8:7d:52:d7:e7:a5:2f:
                    08:c9:86:d3:de:79:af:1a:9f:31:37:7f:5a:91:2d:
                    cd:23:1b:04:85:51:75:c3:87:b5:f3:5e:c2:de:0c:
                    ae:19:a1:e6:10:b2:b2:03:16:f9:87:76:31:84:ed:
                    72:d7:af:c1:da:24:e3:0c:65:3b:f7:d3:12:7a:5d:
                    4a:b6:c6:83:1b:95:c1:f5:ad:c6:74:8f:24:da:97:
                    33:85:d8:ca:bf:39:18:d5:63:3a:fa:cb:b4:05:ed:
                    03:5d:ab:e2:b4:59:f8:c0:6b:ab:0f:6a:69:44:1a:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7C:FF:5F:76:2D:E8:85:5B:91:18:59:EC:25:63:AC:B2:E2:B6:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/de7f9f2e-7162-35ee-8081-543d7779c9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:5a:21:5a:b1:a9:aa:9c:cf:ad:45:b3:e3:e8:94:bf:87:1b:
         90:72:ff:6c:6f:fd:9e:7d:81:9e:62:17:87:8d:33:94:8a:d5:
         2e:86:5c:46:62:5c:f7:21:b9:74:f8:79:50:6b:9c:7e:33:89:
         f9:d4:a9:7a:fc:61:b6:c7:19:15:87:d5:33:8d:3d:3f:0e:75:
         a8:c6:59:ff:3f:67:cd:35:b7:2e:4b:c7:ba:76:a4:ba:5c:44:
         92:67:00:79:3a:7e:66:e0:95:58:02:84:6e:63:4a:c2:1b:c3:
         25:d2:7e:5b:fe:68:62:d0:8c:70:79:b9:69:04:a1:75:bc:ee:
         45:f6:ed:5a:a7:8b:ba:83:b9:96:40:2f:61:a2:ea:3c:94:84:
         8b:39:bc:cb:0e:bf:85:fc:4c:fe:17:9d:7b:3a:d5:85:be:dc:
         97:6b:42:cf:4b:f4:95:2a:a5:bb:fb:da:7e:51:f1:d6:50:cc:
         42:80:4e:0a:c2:10:f5:7e:21:e1:68:f6:a1:a9:d8:6f:ad:8b:
         6c:aa:49:dd:92:de:26:a8:c5:47:d3:dd:66:a5:62:5d:63:74:
         80:da:66:68:d2:75:32:7c:71:01:5f:f8:b4:05:f1:ea:42:83:
         b3:f0:70:df:b0:94:96:27:be:9d:52:3d:9c:fa:61:db:c5:18:
         83:fa:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:47:07 2026 by rpki-client