Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa
File:                     deb82444-9814-3ad1-89d4-94623846e812.roa (raw, json)
Hash identifier:          Gse61P+FAEN2KwewcO5cfS1DVbnyLTWb/s2RCftzGJM=
Subject key identifier:   AD:90:DE:6B:AA:D5:B3:52:11:9D:DE:B1:4F:70:2F:E3:CA:47:7C:EA
Certificate issuer:       /CN=137d13b4-f566-472a-a0e3-33b1db18e660
Certificate serial:       010D0C9F4328584F9BCDF40CC45E3874A77FB340
Authority key identifier: A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     5664
IP address blocks:        142.55.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:f4:0c:c4:5e:38:74:a7:7f:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137d13b4-f566-472a-a0e3-33b1db18e660
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=5d00ef0b-9f5a-4632-af51-8b487c45a6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:c5:ff:48:ff:22:81:a3:66:b5:bc:b2:41:
                    24:59:c3:9c:00:03:46:41:72:e6:11:1e:18:32:db:
                    16:19:8e:f9:88:9f:99:b4:75:6a:92:89:9c:4e:22:
                    99:52:40:ee:44:cd:93:4b:ca:c7:18:83:ad:75:29:
                    df:cb:d5:7e:b8:4d:7c:7e:96:5e:6d:32:cb:82:78:
                    4a:1d:1d:dc:53:70:06:6c:8f:20:75:7d:c6:ea:15:
                    1e:97:f9:46:6f:2c:70:44:58:5f:00:ed:cf:3f:4e:
                    61:43:0b:76:bd:b8:44:9c:fa:aa:7a:96:17:a1:10:
                    0a:02:c1:c4:fd:36:dc:49:fe:dd:2d:05:c2:38:85:
                    d1:92:78:16:dc:32:e7:58:7b:aa:dc:32:89:75:96:
                    32:b7:d4:4c:cc:5a:28:e6:ee:ac:21:b6:5c:77:b7:
                    1b:71:00:e7:87:52:9f:39:75:f2:04:62:ab:54:96:
                    4a:29:cb:5d:88:b1:94:d4:c5:6d:10:86:70:6d:83:
                    c7:ff:32:10:14:07:03:a8:ea:f8:bc:f4:bd:74:51:
                    a9:3d:de:2a:46:11:ef:20:5b:84:8b:bc:07:d7:de:
                    d8:99:6a:11:97:46:c3:64:70:57:14:70:4a:da:4d:
                    69:23:16:59:57:80:b4:41:3f:e3:ca:6e:47:49:3a:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:90:DE:6B:AA:D5:B3:52:11:9D:DE:B1:4F:70:2F:E3:CA:47:7C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.crl

            X509v3 Authority Key Identifier:
                keyid:A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:44:50:49:01:6f:ac:5c:17:3d:26:f0:17:68:4b:01:88:ed:
         1a:5e:85:d9:39:2b:65:b6:44:3c:6d:6c:1e:e6:d5:fd:7c:16:
         c8:7d:9a:92:ef:a8:91:cc:73:61:8a:e0:3b:e6:20:1f:eb:7f:
         c6:fe:2d:8d:b5:9c:58:a2:01:9c:8c:62:c3:40:4d:76:98:8c:
         b5:d9:03:50:e7:07:c3:4d:d9:7c:3f:ef:ff:22:58:e2:c8:1f:
         da:ee:b4:66:fa:13:9c:e5:e2:67:e8:e6:17:d2:c8:16:df:5e:
         ff:10:87:ed:84:90:58:3c:f4:c4:f5:05:51:d8:ae:0b:4c:ec:
         7a:f5:b2:aa:7a:ec:2d:90:71:7a:f8:8e:76:5a:e5:94:bd:90:
         71:44:78:84:2f:80:ad:90:65:83:36:97:91:98:b3:db:1c:f7:
         1b:e5:e2:21:fd:6c:ff:00:74:62:e2:82:fa:b3:f0:7e:46:4f:
         f3:19:02:a9:0c:14:f8:e5:37:70:5b:e2:cb:42:17:73:87:c0:
         bc:04:4c:04:98:e0:23:dc:14:49:6e:63:ec:e5:3d:28:76:97:
         92:e2:b4:50:c3:58:50:df:0b:76:fa:16:e3:2d:60:33:56:61:
         0c:a1:40:12:c6:31:f2:b4:73:25:57:cb:60:f5:3e:ab:b3:b1:
         24:79:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 23:22:47 2026 by rpki-client