Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/e3a3279d-207a-3275-aee5-ac452eeb033a.roa
File:                     e3a3279d-207a-3275-aee5-ac452eeb033a.roa (raw, json)
Hash identifier:          RZsAMZ17TqSDkUWwtJapwfgslJN6v1OJNlqkCbIW3QQ=
Subject key identifier:   FB:53:8C:E1:7D:C0:EE:72:CA:A9:DE:E6:D0:DF:43:7F:ED:89:21:66
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584F2ABD11E378396AD5476D7580
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/e3a3279d-207a-3275-aee5-ac452eeb033a.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     803
IP address blocks:        142.164.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:11:e3:78:39:6a:d5:47:6d:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=fabc5034-d8e2-434f-9a4d-cda2b4d13b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:14:ca:7f:ea:e3:e9:d8:1c:c2:89:65:2b:
                    a7:60:74:0a:00:bc:4c:76:6b:04:52:a1:85:14:b8:
                    27:2d:2b:02:a8:21:1a:16:f7:8e:20:bd:82:60:3d:
                    93:17:1b:0a:26:92:a1:25:d4:50:9d:09:48:df:00:
                    38:f6:1b:4a:92:26:e1:d3:6e:67:35:4c:7a:e9:f2:
                    be:c7:0b:0f:5b:aa:31:84:1a:e4:19:44:56:18:58:
                    08:15:25:81:2e:30:d7:8c:d1:cf:5c:fc:d0:fc:7b:
                    10:da:7b:63:45:37:15:c2:d5:a4:39:b3:80:c0:d1:
                    0b:c0:14:2e:67:76:13:b3:02:19:72:9d:65:b2:2c:
                    b4:be:81:c6:63:35:34:42:60:02:d3:88:8e:83:3b:
                    5d:f8:4d:bb:e3:3e:3f:c7:30:b6:e1:27:f5:9b:cd:
                    db:1e:a6:34:90:e4:3c:29:c3:35:53:60:e9:14:fa:
                    45:c9:b5:36:ff:d8:fa:63:51:f3:58:d2:3a:d5:5c:
                    60:a1:05:d1:a7:d9:74:dc:5f:e8:de:ae:11:9e:ab:
                    91:1a:0c:74:8d:80:aa:76:05:96:10:0a:c4:f6:5d:
                    41:41:7a:14:29:d7:2b:ae:ac:2c:59:bf:46:c2:21:
                    c4:d3:29:5a:a9:3d:91:24:8b:34:7f:54:db:5a:38:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:8C:E1:7D:C0:EE:72:CA:A9:DE:E6:D0:DF:43:7F:ED:89:21:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/e3a3279d-207a-3275-aee5-ac452eeb033a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.164.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:36:1b:be:50:e0:39:3e:c7:c1:3f:07:3f:81:e3:26:b0:c6:
         ad:20:42:ff:ef:d5:9b:5e:28:61:39:de:b9:1e:19:92:f1:fc:
         b2:04:1c:fe:9a:13:42:45:ab:30:2e:da:66:c9:59:d3:8c:44:
         40:20:8d:59:23:3c:4c:9d:29:92:25:29:9a:25:ea:1f:8b:9c:
         1b:d0:2e:ee:d2:4f:4b:ee:57:d3:a0:83:16:09:91:5d:10:5a:
         0d:6e:8e:a7:7f:18:9a:30:e9:f6:14:0e:5f:55:f6:2f:cb:24:
         0c:62:2a:a4:53:ff:d5:1f:d2:89:3f:2d:71:88:b6:71:d5:29:
         43:32:ca:9e:08:16:ab:2d:a8:69:9d:67:79:5b:67:d9:f2:8a:
         f9:c6:3f:b9:b1:04:7e:03:7c:d7:76:fc:d8:b6:2c:e2:d5:4e:
         de:09:cb:3d:98:30:2c:46:c6:26:ad:c2:8c:05:94:d5:bd:30:
         aa:d7:87:43:77:93:5b:e8:3f:96:aa:25:26:70:6f:9e:15:76:
         f6:c4:04:ae:75:be:29:49:fb:0a:42:9f:f5:06:88:65:7c:2d:
         75:5e:02:ed:b1:da:b3:51:3d:3b:d1:40:d0:c2:93:00:88:34:
         70:77:24:e5:69:74:b2:3a:ad:cb:eb:c2:33:94:c1:cd:97:34:
         05:e1:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:34:13 2026 by rpki-client