Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa
File:                     d384f6c1-81ba-3117-b845-8648caee45fe.roa (raw, json)
Hash identifier:          GR7gtuYGFRnI7vnA1xXPV3uHh6UEUHSjjhlnk78h/cE=
Subject key identifier:   7C:15:8F:09:3E:39:AF:F7:05:AB:96:90:B9:3A:14:DA:EE:1A:F0:4E
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F4328584F454288D31BFCE6D91D755E60
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     396982
IP address blocks:        142.147.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:88:d3:1b:fc:e6:d9:1d:75:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=6d7e2ff7-d816-4e01-9f91-f07399428e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:34:55:d0:d9:fe:ac:a1:a8:43:f0:3e:f7:
                    11:4d:0f:61:43:84:2f:3f:82:91:19:56:ee:31:9d:
                    50:c2:23:4e:92:24:af:70:d8:ac:ef:95:fd:dc:2e:
                    b0:5c:bb:2e:28:46:6b:d0:4e:b6:46:6d:d4:fb:78:
                    e8:b6:48:ad:97:b7:9e:0e:33:86:35:96:7a:ad:bc:
                    21:51:15:7f:db:83:d5:ee:4e:95:c1:c3:2e:e4:4c:
                    f1:f6:05:a4:fc:72:79:a9:c6:19:a2:6c:0b:c9:d1:
                    ad:28:b9:f8:98:7a:d8:7f:d7:32:c3:90:3d:a9:ab:
                    56:ed:22:19:52:c6:c4:9f:bf:3c:f5:19:90:bd:c0:
                    fe:3b:f9:01:2c:ba:06:41:69:73:52:b8:7a:6a:06:
                    21:2e:b2:3d:02:5f:d9:a8:80:de:20:d6:d1:1e:a5:
                    f5:a4:ac:ad:3c:47:7b:c5:09:2f:6b:01:7e:60:ae:
                    30:55:c2:16:a9:3f:4a:4e:44:68:9b:b5:ab:ec:e5:
                    0f:df:86:02:d0:9e:b0:fa:4c:35:96:a1:8b:47:62:
                    32:f3:53:57:8a:49:b0:33:a6:df:2d:ee:2f:f2:b0:
                    36:c1:3f:01:de:69:01:0f:8d:df:6b:5e:98:f3:f7:
                    c1:74:3c:5a:fd:31:c5:5e:9d:fc:5e:a6:d0:9b:1e:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:15:8F:09:3E:39:AF:F7:05:AB:96:90:B9:3A:14:DA:EE:1A:F0:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:67:02:89:b1:bd:2d:57:6a:a4:9a:7a:8f:19:5f:78:aa:
         da:e4:6c:63:35:67:81:8b:a8:c2:c6:2f:b9:7c:a1:fe:a4:de:
         30:58:e1:98:0b:45:17:75:ac:a3:49:9e:eb:80:ec:b4:07:05:
         42:9f:8f:70:dd:36:00:09:e7:be:61:3c:c0:63:a7:57:5d:5a:
         38:83:db:20:62:40:f7:39:6c:63:ee:1a:52:f7:7a:77:c8:a1:
         ea:f4:57:9f:ce:ee:2e:e4:0b:5c:a8:f7:15:d6:1c:15:23:7c:
         88:17:e5:33:56:ac:26:d5:ad:33:14:bf:b3:2b:42:33:10:b3:
         63:45:44:e9:e7:10:03:6e:8d:b9:70:f8:98:72:c1:cb:d3:0d:
         ab:f3:de:11:23:4f:0e:81:46:7e:b1:b8:9b:c1:4d:e5:67:be:
         7f:62:af:44:d8:0e:f2:7e:94:b0:2a:90:ef:53:92:48:51:2b:
         bc:52:bf:4d:34:00:c7:c4:51:ea:f2:29:b7:e9:3e:bc:46:4e:
         96:48:d1:b4:0a:54:8a:39:ad:fe:3e:6c:91:32:94:49:ee:4a:
         e5:dd:e9:2b:b8:2b:2d:39:d4:14:69:16:fc:1e:67:21:7d:c0:
         64:c1:0b:49:a2:ea:5f:38:5d:c5:58:22:d0:7d:9c:42:39:05:
         88:c5:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:37:25 2026 by rpki-client