Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/aa32f203-9bfe-318a-83d9-d71c9b31611d.roa
File:                     aa32f203-9bfe-318a-83d9-d71c9b31611d.roa (raw, json)
Hash identifier:          iRwFAjygJz9gA3RnG4ISIEFkKgxoetF1WRl4e4M9C4Q=
Subject key identifier:   C2:28:C1:CC:56:E0:B5:5A:22:89:2D:25:11:51:85:00:08:9A:53:94
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584DC830413B119E3A2F55849780
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/aa32f203-9bfe-318a-83d9-d71c9b31611d.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     13760
IP address blocks:        142.190.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:41:3b:11:9e:3a:2f:55:84:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=4750f387-12a5-4bb7-b476-e6a33c1d4d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:9e:7e:7a:5f:2f:4b:6a:82:6e:3e:28:3f:
                    8e:b3:ec:22:13:0a:26:79:d0:ae:41:9b:b5:ec:57:
                    88:43:91:8a:31:3d:d4:d3:e0:22:16:e8:b8:83:19:
                    df:78:5e:95:8d:dc:52:c5:84:e7:85:ae:2b:70:c8:
                    6c:74:6b:6f:c1:13:45:89:2f:9c:53:8e:d1:ac:d4:
                    94:2f:1c:98:c0:ba:51:7f:f2:07:30:4c:7d:a0:27:
                    50:d5:ef:c6:1b:d0:24:e8:2d:84:56:4e:f3:29:b2:
                    5d:80:56:44:c8:54:d8:42:cd:4c:32:01:8a:ea:46:
                    8f:1c:35:86:9e:b5:f9:73:53:b5:ba:a0:3c:22:3a:
                    cf:2e:c3:3d:6d:4f:ca:a6:0e:73:75:fa:e3:89:7c:
                    4a:9a:c3:34:8a:54:7e:e8:76:35:05:52:26:5b:55:
                    90:35:bf:ee:22:06:98:6d:e2:78:3b:61:d6:07:cc:
                    dd:30:f5:51:b8:dc:35:87:94:1b:88:21:40:f8:92:
                    66:6d:c3:27:f2:0f:04:40:da:0a:6e:49:fd:f3:95:
                    cc:a4:18:75:b3:f5:99:c4:cc:0a:c6:6b:c1:e2:c8:
                    ec:c4:61:46:ea:7d:ed:f7:54:12:34:0d:af:3a:46:
                    a5:72:22:6c:e8:94:23:dc:21:81:98:55:a8:d0:aa:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:C1:CC:56:E0:B5:5A:22:89:2D:25:11:51:85:00:08:9A:53:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/aa32f203-9bfe-318a-83d9-d71c9b31611d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:b3:9d:7d:97:83:bd:6c:bc:6a:3e:76:fa:45:36:4f:d1:
         b3:a3:32:03:03:e9:db:a7:ed:24:91:69:dc:68:f4:34:db:57:
         7b:7a:39:e6:5d:5c:75:e0:18:48:57:30:df:31:d8:e8:74:a4:
         d4:0c:ae:93:ba:36:b6:8b:5d:39:35:46:6a:0a:fd:3f:15:ba:
         d9:fe:d8:23:f2:a7:b9:e1:00:e7:63:cd:57:05:18:66:02:da:
         36:28:c0:25:fb:0e:e9:05:65:dd:85:8e:cd:1d:c3:bd:68:e9:
         a2:59:95:91:52:d3:9a:6c:6d:f7:4c:fd:dd:ce:7e:86:b8:d6:
         d0:3f:47:67:28:63:2f:c5:06:af:f1:ca:8a:b9:fb:1b:1b:b5:
         60:5b:71:e9:b1:0d:14:57:c0:44:64:4e:08:1b:59:e0:c0:bb:
         7c:e9:57:a0:4d:d3:af:f8:95:36:3c:4b:96:e3:3f:48:9d:c2:
         e4:61:17:49:18:73:71:a0:29:55:e5:ec:c6:32:ee:10:fb:41:
         5c:5f:72:77:20:de:f1:86:52:78:21:38:61:17:d5:be:5b:8d:
         39:22:0b:fb:73:95:91:51:f5:66:9b:63:3c:15:ea:f7:6c:8b:
         a7:f8:ae:3f:b6:bc:7d:40:22:91:4d:1a:6a:92:d3:89:43:74:
         e9:bf:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:33 2026 by rpki-client