Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a96ca553-25fb-3d69-8e2e-f1c813e78eb8.roa
File:                     a96ca553-25fb-3d69-8e2e-f1c813e78eb8.roa (raw, json)
Hash identifier:          MsPH4m0MkG+tLc0g5mWWnb1Yjk1Lv5PmohEijrU+EcM=
Subject key identifier:   F9:D4:19:D9:54:73:F0:B8:81:1E:90:63:00:CF:B0:B2:A2:1E:D4:E8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584FA85DCFF7918B248EEA9BDEC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a96ca553-25fb-3d69-8e2e-f1c813e78eb8.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     577
IP address blocks:        139.142.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5d:cf:f7:91:8b:24:8e:ea:9b:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=8fa1744e-bdc6-4190-922e-353edcbaf232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e3:6c:68:c2:d5:a6:9b:61:30:97:ce:fe:d8:
                    73:48:32:16:c4:07:ed:fc:83:e2:40:96:43:0c:9b:
                    62:e9:2a:ec:16:8b:8b:37:4f:81:0b:1d:1b:33:10:
                    64:a7:8a:3b:9d:44:46:b5:b6:19:c4:9f:fc:19:3a:
                    c7:86:d0:74:0a:dc:15:fc:52:41:f2:37:13:53:73:
                    1b:2f:f7:ec:14:86:86:b1:fa:17:0f:19:31:ba:3a:
                    f4:80:99:1f:d1:6b:93:a5:d1:d7:ff:ff:13:76:56:
                    65:52:fa:c4:f0:4a:b2:f3:99:67:b2:68:bb:88:52:
                    b9:69:bb:6a:45:74:ff:cd:8d:62:91:24:cd:1f:a1:
                    9a:3d:80:59:ee:0a:89:a4:08:5d:b2:e6:3f:ab:b4:
                    18:10:bb:00:40:c3:4e:92:71:35:8a:72:1d:d9:45:
                    7e:de:fd:52:fd:db:31:d6:d6:86:a5:1b:a1:18:9f:
                    44:cf:e5:87:7a:83:6b:ae:f2:37:0d:0c:56:fd:55:
                    65:97:5c:50:2d:6b:0b:f8:54:b3:24:06:f9:53:55:
                    d6:50:c0:3c:28:1f:30:c7:ab:f3:70:6b:ee:9d:0e:
                    30:cc:74:71:f1:7d:58:57:c6:49:05:ca:28:75:8f:
                    89:81:8e:16:16:45:91:cc:52:f2:dd:b4:79:cb:2b:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D4:19:D9:54:73:F0:B8:81:1E:90:63:00:CF:B0:B2:A2:1E:D4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a96ca553-25fb-3d69-8e2e-f1c813e78eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:53:df:8b:10:ac:90:98:b3:03:53:da:68:b5:77:76:4b:d7:
         90:be:76:c6:1e:88:6d:99:a7:eb:7d:4d:44:db:94:66:e7:a4:
         c9:e9:43:a4:5f:f1:b6:ba:e3:91:11:e7:6e:75:64:bc:e0:8c:
         4e:e8:54:d4:91:40:6c:73:b4:60:e7:f7:f7:20:d0:6f:bd:48:
         63:03:83:2f:df:12:1d:7d:49:99:5f:d9:76:b2:56:44:34:fd:
         d1:32:fb:01:e6:f5:b6:ea:58:db:55:ce:ce:7f:e5:7a:85:65:
         5d:0d:8b:e6:54:8c:df:4b:d7:31:3e:47:d5:e2:ac:65:02:af:
         bd:a7:a0:b4:bb:09:25:26:eb:75:b0:ab:b8:43:36:d3:f8:69:
         f1:62:7c:5c:f2:ac:7a:ed:2e:d1:1f:a6:13:26:d0:24:c0:f0:
         9d:8c:51:f1:32:62:6c:3b:9e:d0:3e:b7:af:c3:49:60:ce:52:
         d9:16:6e:3e:f4:09:ae:e8:9c:73:d9:09:54:8e:9c:c6:ae:b4:
         f3:6e:5c:7d:05:3c:8e:54:8f:ff:f6:ff:c4:70:34:27:c1:80:
         48:7f:7c:59:94:46:24:a0:9e:c9:df:e3:6d:c9:c8:97:5d:65:
         58:fd:dc:ff:8e:98:c6:87:1d:ed:58:ef:2b:ce:c4:c8:6e:c9:
         0c:ec:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:48:18 2026 by rpki-client