Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa
File:                     641289ff-4442-3d1e-9fea-b77b6846946e.roa (raw, json)
Hash identifier:          GSt6npkZdEGtFHMQwJVy1WSJBQyfztiErr1SNdKeZUA=
Subject key identifier:   1A:6B:06:86:1F:E4:81:A8:4B:AA:25:59:23:23:97:91:72:F4:83:5F
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584DC565A197F2119B61B8F42F00
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     8075
IP address blocks:        142.0.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:a1:97:f2:11:9b:61:b8:f4:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=32755102-ca18-4b31-a989-2be42b13e43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:ec:f1:33:34:da:38:ff:d0:9b:fc:8c:34:
                    3d:3e:e8:b1:f9:dd:09:68:4b:4d:f7:a6:fa:43:bb:
                    87:1c:4b:62:6a:5b:bb:25:66:27:ec:82:73:1f:89:
                    9d:2d:fa:e5:e1:fa:8f:f2:5c:58:9a:6a:8a:97:d9:
                    d3:c1:7c:8c:78:3b:3c:00:1a:5e:7e:97:1c:c0:6a:
                    49:8c:63:ef:2b:bf:50:2e:0c:2b:31:3f:14:8e:38:
                    79:dd:61:d6:d8:ee:5e:aa:fb:b1:fd:2a:61:be:2d:
                    9a:42:79:5d:5c:dd:74:63:3b:c9:b4:e1:bc:7e:90:
                    33:69:0c:de:7f:6b:7a:01:19:0c:d4:51:ad:e9:e4:
                    82:32:83:64:57:c6:e3:64:7b:72:ea:0c:38:29:66:
                    c8:46:93:f8:c2:91:f0:5a:1b:f0:fb:05:20:d0:60:
                    15:cf:6d:72:e0:e5:69:84:29:54:c4:e1:17:eb:b7:
                    88:d0:1d:32:10:94:45:3b:da:73:69:e9:24:22:59:
                    2a:33:a9:58:54:66:0c:70:2d:0e:92:93:d9:76:5c:
                    d2:df:d6:18:f7:8a:63:ba:cf:51:c3:b9:0a:ad:a5:
                    73:81:5e:00:4d:06:af:a0:e8:eb:f9:8b:05:23:17:
                    f4:90:7a:e2:fa:dc:4a:f1:6c:fd:42:9f:51:f2:4a:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6B:06:86:1F:E4:81:A8:4B:AA:25:59:23:23:97:91:72:F4:83:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ae:fc:a3:dd:d7:6f:c4:95:31:80:cf:dc:05:1e:69:f2:78:
         0a:cd:a6:dc:43:21:9f:07:49:09:b2:56:d4:3f:52:3a:b1:8f:
         8e:4b:81:6e:79:8d:b6:2a:15:93:a2:84:d0:0c:31:a4:6c:09:
         77:6e:54:b5:11:32:6f:4f:ee:e3:b3:2c:ca:b2:12:db:3f:c4:
         a2:f7:fd:06:de:e2:e5:2b:33:82:a3:57:b0:0d:24:c4:3c:3b:
         a6:65:ee:fd:f1:f7:79:5c:ed:b0:67:de:c1:bd:a6:d3:8f:d9:
         40:13:05:d6:f3:a2:bd:b4:ea:c0:b7:a8:db:ea:b1:e1:20:fd:
         56:72:27:aa:ea:9f:0f:5f:16:99:7c:6a:2b:e3:25:c7:99:b9:
         02:4d:10:eb:fa:d9:59:b5:70:39:91:9d:8b:68:f4:e6:d8:3a:
         fe:30:62:3f:83:04:fd:67:66:bb:8d:6f:41:f9:ea:74:ff:76:
         e3:b8:57:11:97:39:02:e8:88:66:b9:f7:fa:24:da:a3:9f:7e:
         d4:a6:2a:44:1c:6b:19:cb:db:84:ff:d3:a7:7c:05:30:33:77:
         19:2c:4a:ee:af:30:f9:fb:44:94:64:64:e2:31:06:ed:d7:ec:
         1b:74:11:94:ae:1f:a8:c8:3d:22:ba:ef:8d:d7:fb:52:76:d9:
         d8:1b:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:09:09 2026 by rpki-client