Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/1cf115e8-9fe6-3482-88dd-8a411807854c.roa
File:                     1cf115e8-9fe6-3482-88dd-8a411807854c.roa (raw, json)
Hash identifier:          4MOk1O+RjYVz9Z/7pjv2UErd22KonWt3kBQ9vLbCay4=
Subject key identifier:   AF:33:DC:36:75:07:0A:E3:F4:13:85:B5:94:E5:29:3E:33:85:53:E1
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584B180222BAE3E498CE51688A40
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/1cf115e8-9fe6-3482-88dd-8a411807854c.roa
Signing time:             Fri 05 Sep 2025 12:51:24 +0000
ROA not before:           Fri 05 Sep 2025 12:51:24 +0000
ROA not after:            Thu 04 Dec 2025 13:51:24 +0000
asID:                     20326
IP address blocks:        142.214.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:02:22:ba:e3:e4:98:ce:51:68:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Sep  5 12:51:24 2025 GMT
            Not After : Dec  4 13:51:24 2025 GMT
        Subject: CN=0681957f-4b82-4019-a0d6-b7579f52eb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:28:e5:56:c2:a4:7c:93:b9:5d:44:22:7e:
                    d1:f6:dc:69:25:fe:df:73:ea:8a:1f:67:c2:0c:14:
                    2b:a2:f4:79:f0:33:af:5d:ff:61:a4:86:36:2b:dd:
                    43:09:1d:02:c9:de:7a:38:d5:b6:34:fe:6b:77:98:
                    93:7b:2f:3d:9e:37:34:7a:53:82:1a:4c:af:c0:42:
                    ff:03:e6:89:fc:e3:00:70:84:3a:6f:e3:ed:29:85:
                    f9:78:71:42:73:b7:6d:64:4e:b4:d3:28:08:95:d8:
                    80:cf:4a:f5:65:08:59:2e:b3:50:47:44:dc:68:f8:
                    f2:6a:fc:89:e9:28:16:64:de:2e:cf:be:50:a1:dd:
                    f7:43:48:8f:b6:0b:6b:87:c9:91:28:38:1b:ae:10:
                    b9:b9:7a:5d:c3:94:79:35:36:46:a6:09:00:a3:3e:
                    8b:55:30:41:43:a0:d1:22:87:59:06:e3:7d:40:af:
                    c3:5b:6a:8b:ca:a7:73:8d:f4:f2:37:01:0b:d8:4f:
                    4b:24:8a:d8:b1:5d:e1:5a:fb:73:b4:03:6c:4d:fd:
                    80:ed:29:7b:b5:b7:48:6e:12:b8:be:28:50:6e:0e:
                    88:75:31:7a:4e:f0:6d:9f:4c:6a:63:76:55:9a:4e:
                    af:d2:db:25:ea:58:11:b6:44:2e:1a:26:c9:35:06:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:33:DC:36:75:07:0A:E3:F4:13:85:B5:94:E5:29:3E:33:85:53:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/1cf115e8-9fe6-3482-88dd-8a411807854c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:88:bd:3f:af:77:82:c4:a8:01:ba:7d:41:3a:d2:6d:43:
         74:00:7b:e3:7b:7d:b8:de:ed:0e:25:0e:b2:6d:43:5e:c1:d4:
         db:98:5c:ef:f4:95:48:08:1b:4b:ca:59:c2:25:a2:7a:a9:0a:
         e2:18:63:30:a1:c0:09:0e:1d:0b:55:a7:6a:5f:53:cf:1f:b8:
         47:ac:b9:89:86:4a:13:3d:41:b2:03:6f:b9:ee:93:f0:65:4e:
         c4:43:eb:67:d1:12:40:56:d8:f7:ae:a5:af:f7:b7:4f:4d:4a:
         3e:c0:56:3c:e9:0f:63:80:15:5c:0b:90:6e:e8:a9:64:5b:c5:
         5e:11:bf:5b:21:42:74:d1:04:e4:63:93:9c:43:bc:33:8e:03:
         29:6d:0a:4a:4f:36:95:a2:8e:3b:95:9e:2d:2c:de:75:10:31:
         74:a5:be:9b:c0:e9:13:b9:01:e3:71:65:48:9b:50:a6:8f:dc:
         f2:a2:3c:57:ab:e4:f0:fd:d3:d0:cc:ed:f9:ca:95:bc:f4:58:
         c3:90:3a:b1:08:01:39:d3:00:6b:b7:e7:54:7b:e1:be:ee:a4:
         5d:3c:ef:da:49:6e:2d:47:75:a8:1c:ee:1d:bc:2d:39:0c:c4:
         09:72:2c:cf:fe:8d:7b:bf:ac:a2:ba:a9:25:c8:cc:25:35:a1:
         da:a6:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:22:18 2025 by rpki-client