Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/da9882a5-4caf-3e30-8e9c-394572b74fee.roa
File:                     da9882a5-4caf-3e30-8e9c-394572b74fee.roa (raw, json)
Hash identifier:          SFkDpjq2c69p1ftN7SudJulq1fvSsH08d8BmOtGDw8U=
Subject key identifier:   2D:C7:CF:83:48:E3:43:A8:63:13:23:06:0E:AE:36:96:F9:3D:6E:4B
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584ED9C73D547A342D40992CE23C
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/da9882a5-4caf-3e30-8e9c-394572b74fee.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     14114
IP address blocks:        169.145.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3d:54:7a:34:2d:40:99:2c:e2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=0d10bcc2-24ee-4874-9ecb-e55e48357ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:67:59:25:97:5c:c2:2c:f9:f3:84:3e:32:a5:
                    08:15:e4:45:d7:12:9d:a8:eb:c0:57:87:be:55:b4:
                    4a:7a:80:e4:c3:89:56:71:b2:26:be:59:1c:31:d5:
                    de:b8:9d:6b:76:ef:69:c3:a3:cb:de:14:0c:f1:6b:
                    2e:2a:2d:92:af:d5:85:32:17:12:2b:22:21:6b:70:
                    8c:93:b9:af:26:ac:a5:c9:fe:3f:a3:b5:86:90:c5:
                    ef:e7:7d:ee:f6:49:cb:60:cd:e8:bd:13:d1:20:d3:
                    8f:ad:09:fe:05:da:10:e7:e3:07:5e:7c:e0:7c:ad:
                    82:12:3d:94:76:7c:ad:c9:81:d8:3f:24:c8:4c:ed:
                    9f:2d:92:53:30:45:55:6a:cf:ef:43:f1:4a:0b:02:
                    a3:a5:4f:e2:d0:ba:89:84:e5:53:6c:3b:25:dd:1c:
                    c1:03:17:ba:e7:d1:c2:85:07:a4:3d:65:12:c0:63:
                    88:6a:53:ec:57:34:46:4b:3d:f6:32:a4:d2:a7:d2:
                    a5:22:00:e1:f5:d4:74:7c:2f:5a:80:ef:54:3c:dc:
                    31:bb:51:93:bb:88:a5:31:85:ea:87:50:1e:a0:f8:
                    95:48:73:d4:da:6e:b1:77:11:a0:06:b9:4f:05:bb:
                    cd:bb:58:a3:4c:ad:65:e5:68:aa:07:d4:a5:20:5f:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:CF:83:48:E3:43:A8:63:13:23:06:0E:AE:36:96:F9:3D:6E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/da9882a5-4caf-3e30-8e9c-394572b74fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f5:9e:b7:06:4d:fc:18:64:15:d7:f8:58:da:78:17:e5:83:
         e5:7f:7f:82:8c:d4:db:57:6c:e7:92:69:1d:74:0a:47:fb:b1:
         0c:61:bc:49:a1:ef:7c:0a:f5:f3:cc:fb:16:65:2a:10:89:54:
         dc:16:42:a2:3b:e3:68:82:3f:12:f4:2e:5c:a3:70:e6:bf:24:
         a5:bf:29:80:c6:d7:a7:b4:9b:d9:f7:4b:22:48:6c:2a:a2:7d:
         c5:24:49:15:44:ad:25:c9:d7:17:cf:23:ad:d0:7c:07:ee:d5:
         24:6b:4b:ca:b0:7c:28:79:4c:00:d9:b5:f5:1f:bd:1c:da:44:
         39:69:f2:35:a6:7d:3b:dd:e4:cb:85:a1:e5:f5:4d:03:a4:0a:
         01:db:58:85:ad:62:d4:2f:dd:f9:28:5b:77:9a:25:aa:b3:f0:
         9c:40:25:e5:7e:cc:cc:3e:07:93:e3:13:e8:4f:b8:c2:39:6b:
         02:02:34:80:fb:87:3d:23:5a:a8:1e:82:ef:05:9d:29:4c:0e:
         ad:bc:ff:62:59:89:30:e6:cc:58:6f:a6:57:bc:8f:0a:1a:17:
         44:11:a5:1f:3e:35:73:ad:4f:49:bd:52:68:de:b4:06:af:94:
         cc:3c:4e:2a:3b:86:a8:2c:85:3e:15:b3:35:f8:85:29:4b:4b:
         21:43:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:57:08 2026 by rpki-client