Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6cf5af1-b0d9-34a8-8577-7721a57c752f.roa
File:                     f6cf5af1-b0d9-34a8-8577-7721a57c752f.roa (raw, json)
Hash identifier:          YV0VDoRLYN1rINcl2AgQQ+dH/FyLTd6c5Xrp8WdXnCY=
Subject key identifier:   1A:B4:0E:DC:5E:81:C6:FE:2E:35:65:4F:E0:54:D2:30:07:F9:4D:FB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F5D8A62E3EBB91E843640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6cf5af1-b0d9-34a8-8577-7721a57c752f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        142.120.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:5d:8a:62:e3:eb:b9:1e:84:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=a7f9640d-d4f6-4b98-96af-915c7edf9b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:54:d4:d1:5f:2d:d0:56:02:99:19:e2:0f:
                    5f:3f:7e:3b:1f:ec:c4:e5:b3:f8:f5:54:93:73:8b:
                    a7:0f:a3:ca:a6:4d:a7:c0:de:0d:a7:4e:c2:02:ad:
                    aa:29:2f:e9:cf:b6:5f:17:db:52:9f:1e:ae:34:59:
                    3d:d2:0b:af:89:99:f7:2f:22:87:08:75:f6:15:e8:
                    08:93:40:3b:c1:58:1d:8b:78:9d:c0:5b:19:ec:d5:
                    5f:8d:e6:2f:d0:ca:00:e0:6d:20:99:39:6f:08:e4:
                    71:96:1c:48:8d:67:88:0a:ba:ec:4e:6c:81:a8:8d:
                    fa:94:89:c5:4d:7a:6d:c8:2e:dc:31:d2:1c:69:b3:
                    e9:e4:36:46:f5:b1:cc:50:2a:1a:6e:a1:fa:8a:6a:
                    a5:a2:55:11:c3:5a:13:63:66:78:64:30:9b:02:09:
                    48:e5:b3:4d:ee:70:c1:4b:b6:4b:60:58:23:26:e8:
                    13:a7:61:c6:2c:9d:8b:a2:3b:bb:99:75:34:5a:fe:
                    c3:9e:2c:de:07:f7:21:4e:95:54:06:60:91:60:b9:
                    82:18:c3:32:96:3b:c4:58:37:02:46:85:31:24:c1:
                    d5:6b:b0:6d:aa:dd:d8:2d:e6:6c:ed:4c:15:d0:a9:
                    9b:b4:44:07:47:e3:5d:cd:e0:96:1b:11:16:a0:5a:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B4:0E:DC:5E:81:C6:FE:2E:35:65:4F:E0:54:D2:30:07:F9:4D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6cf5af1-b0d9-34a8-8577-7721a57c752f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.120.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:18:f7:1c:e5:14:cd:ff:06:b2:c3:67:3f:df:b2:48:33:4d:
         f8:67:ae:ef:83:6e:74:af:38:c1:39:d1:b0:fa:5f:88:c2:89:
         05:58:62:75:92:52:6a:00:7b:82:d8:c0:e5:b8:67:a2:1e:a2:
         4e:0e:dc:84:2b:41:65:be:c0:a0:88:b4:f3:15:a0:5f:50:0d:
         f6:6f:ee:68:2b:f2:6a:1b:32:d1:60:05:5b:86:82:96:10:93:
         be:42:10:d9:41:45:19:5b:2e:2f:42:b4:7f:88:81:ff:17:65:
         24:99:73:5c:ec:ad:25:d9:37:01:cc:dc:0c:b4:36:88:10:e7:
         92:60:33:26:08:e7:6e:1a:3f:91:26:ac:05:b9:2f:d4:d2:8f:
         e5:85:d1:b0:97:5c:7f:38:d9:ff:81:9a:71:6a:04:67:b5:22:
         11:55:2e:cf:20:08:54:3d:a3:5e:6d:5e:36:35:a6:39:7f:de:
         53:91:7f:ce:31:2d:8b:9c:cf:fe:1c:d2:d6:6e:25:5b:20:30:
         f0:0b:a1:0d:ea:1f:d1:b8:f7:f1:a9:f3:65:84:5e:31:42:e9:
         c9:bf:b6:2c:6a:2d:3d:cd:67:02:53:8a:c1:88:14:21:58:cb:
         e9:fc:c5:15:15:67:70:ba:ab:47:00:3c:18:dd:ea:d8:66:f6:
         41:3a:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:44 2026 by rpki-client