Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d858ee69-40b3-380c-8c42-5c47527bd975.roa
File:                     d858ee69-40b3-380c-8c42-5c47527bd975.roa (raw, json)
Hash identifier:          fTe1uLnbgH17M2pdmynra5lH/GThfhUY3UGT7iZ2SEU=
Subject key identifier:   59:F2:CD:01:E1:08:24:B3:CE:BB:AC:D0:D1:46:20:85:03:C1:FF:BA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F59ED91939DEDB22D4040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d858ee69-40b3-380c-8c42-5c47527bd975.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        142.189.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:59:ed:91:93:9d:ed:b2:2d:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=f0674e8c-defc-44a4-bb12-94ff7838965a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:f4:9d:67:8c:c5:14:82:24:dd:9c:20:a0:
                    3d:30:0b:f8:07:8b:0d:f9:4b:59:4d:5d:da:21:3c:
                    9b:0b:fb:7c:8c:44:b0:fb:ab:5c:3f:74:ca:25:d5:
                    2d:32:cc:49:71:40:4b:10:a3:d5:19:a0:e1:90:db:
                    a9:bc:27:0b:fc:6e:47:0f:0b:02:f3:80:c7:62:fd:
                    d1:86:74:ca:2a:2e:01:15:b0:63:de:b3:f8:fb:43:
                    29:47:d6:04:23:8d:d4:6a:32:a0:93:94:95:a1:6f:
                    bc:93:1f:67:1a:07:60:fc:2c:22:e6:63:81:be:03:
                    f3:de:85:ac:15:f1:ca:db:75:57:16:b7:c8:0c:cd:
                    84:98:76:fd:e5:fb:9a:3e:a3:28:52:07:1d:50:ff:
                    02:d0:31:60:b8:78:f2:85:ad:40:e9:de:4a:a3:be:
                    bc:7a:cb:cb:19:fd:6b:8c:d4:8a:f6:b7:5c:c4:f5:
                    e5:2f:b6:5a:52:59:78:d3:2c:e9:24:24:20:01:3f:
                    b9:f3:88:3d:5b:33:e5:8f:52:97:10:10:28:af:47:
                    f7:b4:9c:a7:23:ff:b9:ef:e2:87:a8:82:ed:a9:6e:
                    cd:9c:25:63:1a:7d:db:a8:64:c1:67:76:b6:ea:47:
                    fd:09:43:bb:db:0e:5f:af:3a:da:89:e8:73:a5:fe:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F2:CD:01:E1:08:24:B3:CE:BB:AC:D0:D1:46:20:85:03:C1:FF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d858ee69-40b3-380c-8c42-5c47527bd975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:e5:fe:4f:af:f7:ee:f5:86:83:95:b8:d9:e8:15:24:4b:
         b1:e3:a5:b0:08:1b:43:d1:54:f6:cc:e7:8d:90:a9:f5:57:57:
         49:d4:30:d7:75:cd:a7:90:a2:07:45:0f:a9:48:55:02:f7:f6:
         df:ba:9b:b3:98:6e:b6:f9:44:b5:6e:4c:70:c3:0a:06:b6:e6:
         14:22:43:26:a7:aa:3e:13:07:0a:53:cc:b8:db:07:b4:06:60:
         fe:2e:ae:8c:9e:21:e8:ef:07:c8:35:70:19:2c:52:f0:24:5b:
         45:23:9c:42:cb:20:82:ce:cf:87:70:f2:57:10:26:42:7e:19:
         95:2f:f2:5d:89:bd:47:cc:79:f4:37:5b:14:7a:dc:98:ee:9f:
         96:c6:fc:29:06:13:84:fa:ed:42:d3:a0:20:a7:50:10:5a:8e:
         ab:41:90:d1:9b:d4:de:62:67:e1:80:3e:e5:9a:fc:4a:73:0e:
         86:e1:54:e2:00:cd:77:e5:f0:d5:b8:71:fd:88:61:5d:aa:44:
         b2:52:0d:e6:da:47:f9:f9:87:3a:a5:64:f5:eb:b3:f1:31:9f:
         be:51:ab:72:18:76:49:b1:0c:d3:ee:17:81:5b:18:d5:33:c0:
         c7:43:3b:b8:08:18:60:bf:55:22:f5:e3:64:e3:e9:13:31:7c:
         8a:69:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:58:13 2026 by rpki-client