Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4c98dce5-add4-335b-a761-7da8dfe9330d.roa
File:                     4c98dce5-add4-335b-a761-7da8dfe9330d.roa (raw, json)
Hash identifier:          RukbFq+NBqohEpLJp3GSa/anC3pSU2pMvYT5AQW+/Qg=
Subject key identifier:   4E:99:30:C7:A4:0A:0D:44:C6:8E:54:22:23:77:DA:1A:09:B5:D1:06
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584F4973D8F740105776BCAD4100
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4c98dce5-add4-335b-a761-7da8dfe9330d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13760
IP address blocks:        142.190.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d8:f7:40:10:57:76:bc:ad:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ba87a955-d124-4a3f-9816-aff9d9cd78f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:2d:fa:de:49:53:55:11:be:56:4d:9c:43:
                    47:c5:55:37:64:59:a4:df:f8:f0:d7:50:37:3c:30:
                    08:14:aa:da:bb:dd:20:c1:19:92:d2:f2:86:ce:5c:
                    b2:a0:46:a0:f6:02:63:4d:09:2e:2b:e6:24:a2:35:
                    c0:c8:ff:f0:53:fb:78:c8:33:eb:13:ce:37:41:66:
                    e7:70:75:6e:e1:70:a3:a1:72:af:91:b7:5d:26:5b:
                    46:42:76:41:84:83:86:be:9a:e8:7e:68:be:f7:18:
                    d5:0f:d3:74:d9:07:46:12:25:57:68:fc:5a:0a:6f:
                    41:dd:3c:eb:e6:f3:ac:db:cf:14:02:ae:0a:7d:38:
                    13:61:8c:b1:cb:23:b7:da:c3:31:b1:8e:17:0a:92:
                    2a:9f:8c:d4:6b:18:fb:37:c5:8f:ef:ef:1b:8d:b2:
                    92:29:a7:64:bd:38:43:05:81:8b:e2:bc:7e:ba:5c:
                    17:28:3c:5b:7b:34:ed:39:50:04:fe:68:af:11:b8:
                    b2:2d:73:c1:a2:aa:8e:cb:56:3a:c8:86:14:01:ea:
                    b1:b9:4a:98:ae:b9:96:f0:a8:88:ff:c8:73:09:71:
                    b7:b4:3a:6d:cb:ae:26:bb:77:c8:f1:5d:9f:e1:8e:
                    ef:22:50:18:25:c0:bd:ba:4c:06:84:97:ce:69:c9:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:99:30:C7:A4:0A:0D:44:C6:8E:54:22:23:77:DA:1A:09:B5:D1:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4c98dce5-add4-335b-a761-7da8dfe9330d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:66:f2:41:04:24:a7:72:66:47:0c:8c:05:6f:bf:0a:4a:
         a6:e2:1d:06:16:52:5c:19:08:a7:94:ca:aa:25:46:9d:34:59:
         72:43:fb:d3:e1:73:61:70:5e:9f:ca:5a:77:02:a7:4c:1c:a1:
         f4:ea:63:ef:f2:e0:9d:7a:c7:51:e9:4e:d6:08:b1:62:72:87:
         06:79:51:e8:b0:55:63:0d:ae:79:d9:4c:40:98:e0:36:48:2c:
         68:20:4d:eb:d4:1a:7a:39:55:e1:95:d9:8f:c7:b2:3e:63:54:
         f2:82:f6:4e:42:4d:86:7d:0b:cc:04:98:bd:15:3c:e5:c4:68:
         d6:8d:69:05:d4:58:6a:9b:80:17:17:4b:d4:0a:55:50:59:ba:
         50:74:7c:31:f6:1f:f5:cf:6e:1a:1a:12:d0:95:a5:bb:89:aa:
         cf:6f:a9:9d:af:18:43:26:29:20:77:40:81:07:f4:b9:3e:f4:
         44:71:4d:49:fa:b0:6f:d3:99:79:18:90:df:5d:8c:07:db:6e:
         33:ca:0a:ec:47:9a:d8:63:f5:c8:7b:6c:be:72:bd:bd:a9:37:
         69:95:85:83:e2:1d:7c:ef:b6:a8:cf:84:6a:c3:25:4b:6b:71:
         de:78:50:55:25:db:05:2b:bf:fb:56:13:1f:f9:eb:c5:62:fa:
         d2:59:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:26:08 2026 by rpki-client