Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/76ab0d94-bcf5-31b4-92fe-6a536625107d.roa
File:                     76ab0d94-bcf5-31b4-92fe-6a536625107d.roa (raw, json)
Hash identifier:          sJR3F002AaLheBlr9j8e7jboNt6RhSZ9jVro66WP0+s=
Subject key identifier:   76:DD:0A:73:B5:9E:3A:18:0C:37:4E:C1:F4:D0:F0:33:C5:C6:1D:1F
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584DFC5EF9A5142C71FFCD11F920
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/76ab0d94-bcf5-31b4-92fe-6a536625107d.roa
Signing time:             Thu 28 May 2026 17:36:39 +0000
ROA not before:           Thu 28 May 2026 17:36:39 +0000
ROA not after:            Wed 26 Aug 2026 17:36:39 +0000
asID:                     8075
IP address blocks:        142.192.198.0/24 maxlen: 24
                          142.192.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:5e:f9:a5:14:2c:71:ff:cd:11:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: May 28 17:36:39 2026 GMT
            Not After : Aug 26 17:36:39 2026 GMT
        Subject: CN=fa0e99e4-faa3-4fc6-886c-03bca1f4a8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:0b:9f:64:00:f6:d9:42:ae:c3:3c:79:7e:
                    e8:95:b0:d7:4e:cf:48:40:37:a2:26:17:79:f8:c6:
                    28:02:0e:9e:ce:8d:b9:e7:b5:00:80:a3:ab:6f:e7:
                    b8:09:88:cf:82:28:63:86:b6:dd:ee:b1:99:8c:73:
                    2d:e8:94:01:30:89:bf:3e:e4:b4:67:40:3f:60:5d:
                    e2:c8:84:7d:7c:ea:3d:dd:d4:67:42:76:e8:25:3d:
                    9e:1b:e8:32:15:f6:59:f5:3d:ef:60:fa:35:ab:d9:
                    e0:a0:79:04:b9:57:f6:73:a5:1e:08:b6:0b:c0:b9:
                    02:4a:5e:f7:00:01:a7:4d:5f:f4:e6:08:29:1a:d8:
                    a9:ce:9d:06:20:94:7e:40:2d:35:00:b1:4e:a6:da:
                    0f:b2:22:dd:17:1c:c8:17:9c:b5:21:2b:cb:75:d8:
                    43:c3:0c:a6:3e:bd:a6:63:d5:2c:9a:a9:d3:c9:12:
                    bb:4e:01:d1:20:f4:f3:1a:36:59:36:fe:da:24:db:
                    07:91:72:d7:92:96:76:15:71:50:14:be:2c:fb:61:
                    a0:1a:7d:49:3d:7d:22:67:e5:42:c1:6b:2e:53:83:
                    c9:f1:ca:0e:7f:a8:ec:bc:fa:63:a9:d4:aa:16:99:
                    15:f6:70:52:b0:6a:7b:90:b0:7b:31:57:d4:ba:78:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DD:0A:73:B5:9E:3A:18:0C:37:4E:C1:F4:D0:F0:33:C5:C6:1D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/76ab0d94-bcf5-31b4-92fe-6a536625107d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:02:f9:43:97:30:82:53:e1:7a:2d:7b:ed:74:2e:8c:0d:62:
         99:7c:61:55:a1:d7:06:d4:74:81:4b:5b:10:2d:2a:e9:7d:9c:
         f5:35:cd:ce:ae:9c:30:b5:5d:5b:3a:4c:15:60:2f:ce:fd:c3:
         6c:9a:17:1a:62:29:0e:d2:9f:c2:2f:71:7f:d0:1b:13:49:6d:
         0f:d5:7e:f1:fe:c4:f5:a7:fd:c7:ca:33:dc:85:69:b1:4d:ce:
         45:d0:ec:00:6d:c8:38:57:33:65:61:6c:89:a8:4a:f3:b0:f4:
         16:06:34:dd:c8:c2:40:3a:b0:6c:61:12:0d:e8:08:65:27:11:
         86:97:21:dc:43:dc:74:dd:35:27:ea:23:d8:08:56:4e:96:8d:
         9e:8b:60:e6:80:c4:9a:ee:0a:e0:92:63:3b:d6:41:6e:8e:26:
         af:b9:06:90:2c:3e:be:44:b2:2b:54:ca:19:b9:a6:17:2f:8c:
         08:e3:16:ff:78:e0:40:dc:69:87:37:26:8d:f2:a8:9a:0e:ee:
         b1:fa:15:2a:7c:27:4c:14:01:c4:67:10:c0:a9:65:e9:29:f8:
         39:1a:89:b1:cc:7b:4a:29:1f:c0:1a:39:a4:cc:fb:72:d4:94:
         1c:e9:24:f3:2f:72:51:b8:94:0f:12:03:a2:a1:64:dc:25:10:
         56:0c:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:44:59 2026 by rpki-client