Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ac2b62a-3a43-3f1e-b1ea-43b1b34df8fd.roa
File:                     4ac2b62a-3a43-3f1e-b1ea-43b1b34df8fd.roa (raw, json)
Hash identifier:          64X7T6iwUnkn/WZ3/mizREfWd48J4i3w6XnJZo3URaI=
Subject key identifier:   29:CC:7C:22:93:C3:7F:ED:73:0A:DB:28:04:58:1F:8C:99:56:52:21
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FD203915993C927C72280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ac2b62a-3a43-3f1e-b1ea-43b1b34df8fd.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     855
IP address blocks:        142.68.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:d2:03:91:59:93:c9:27:c7:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=51e9c7bd-7c00-49b9-8f18-1999808d0fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:01:2e:52:2b:d5:6b:d0:d9:c4:34:eb:67:
                    ca:23:86:40:7a:63:73:1b:d8:11:fa:10:7a:7b:28:
                    03:ec:84:ef:3a:3f:04:33:a5:87:72:f3:12:88:0b:
                    36:b5:c4:cb:fe:f5:0f:7e:d6:4a:aa:bf:f4:1c:b4:
                    ec:a3:95:95:04:21:31:8a:3d:f9:5c:15:c9:b4:2b:
                    cd:a7:17:0a:ef:84:46:c9:41:3e:79:9b:af:b0:b1:
                    b7:f4:2b:d9:e7:e0:b5:3e:16:ef:b3:83:cf:b8:fe:
                    df:38:ed:f0:e3:42:21:b4:6c:dd:7f:d6:4d:ba:3b:
                    cf:24:43:5c:29:e6:53:9a:93:48:b7:bf:4f:c6:31:
                    91:92:9e:a0:a6:e3:64:c0:5c:25:a2:15:90:11:1f:
                    f8:e6:1e:c7:66:4b:bf:46:8b:44:47:c4:b8:3f:be:
                    e9:96:2a:0c:53:a0:38:e0:11:56:c6:e6:00:c5:f1:
                    05:07:9c:a5:99:f4:ba:80:ab:ad:db:67:36:07:14:
                    65:fc:73:91:1e:4d:44:73:d9:98:83:ca:5c:05:2c:
                    84:85:0d:ac:fa:01:b2:7c:2b:44:eb:ce:81:c1:cb:
                    7e:75:d1:6a:ee:16:c4:e1:fa:24:cf:9a:56:18:50:
                    50:34:a9:0a:82:ee:a5:b9:a8:99:7c:49:eb:ee:f0:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CC:7C:22:93:C3:7F:ED:73:0A:DB:28:04:58:1F:8C:99:56:52:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ac2b62a-3a43-3f1e-b1ea-43b1b34df8fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:43:bd:d8:d7:6a:d0:be:f5:a6:15:d0:c4:2b:2d:65:05:83:
         39:77:07:26:6a:2e:e8:77:a4:37:dd:79:59:f1:b1:1c:63:5c:
         4b:54:0a:68:37:15:1b:90:a2:dd:54:64:2b:f1:5f:67:f8:d3:
         9b:47:61:21:d1:45:a1:80:d7:eb:30:1d:29:b3:77:03:e2:d2:
         7f:e2:2e:4c:66:4b:fb:cb:3e:c6:42:e8:7a:34:74:a9:cd:29:
         68:18:9d:c9:b6:d5:bb:95:1c:9b:6e:8a:21:87:44:9e:5c:c9:
         f7:bc:f9:f7:7d:19:32:96:24:6a:3b:a2:e5:79:4b:42:c3:12:
         a3:a8:85:74:41:98:7e:c0:aa:83:24:10:85:11:64:23:15:dd:
         94:2c:1f:90:21:c7:d4:7f:1c:cb:bf:34:75:cf:4c:25:fe:71:
         70:2c:e8:91:be:e6:e7:16:9a:56:71:ed:52:54:32:dc:a5:46:
         4f:67:0d:cc:2b:e8:29:ac:88:c7:87:79:28:ce:e9:99:1b:68:
         24:e3:89:17:f9:44:48:bf:3b:85:04:a8:e8:fe:b9:15:50:d8:
         cd:f2:37:4e:c5:4d:b7:14:1d:10:a5:73:e2:17:29:91:ab:ab:
         e6:0d:19:c6:76:9e:81:c5:bb:82:eb:39:24:4b:87:00:2d:c3:
         78:62:d2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:15 2026 by rpki-client