Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f/8a485ada-7ac0-3519-a5e2-6ba4f80754ee.roa
File:                     8a485ada-7ac0-3519-a5e2-6ba4f80754ee.roa (raw, json)
Hash identifier:          coNnNwtPTSUqCE3ZJglz7ihxhGS9/6T8lSapbSTgaVY=
Subject key identifier:   BA:E6:F0:15:CB:46:59:22:66:2B:F3:14:52:E1:57:49:26:1B:AC:2C
Certificate issuer:       /CN=7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f
Certificate serial:       010D0C9F4328584F05A5B007BCBAB7C225091780
Authority key identifier: 53:7E:3E:46:A6:AD:C4:59:F5:2B:DD:D1:C4:F7:D4:C1:CE:26:1E:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f/8a485ada-7ac0-3519-a5e2-6ba4f80754ee.roa
Signing time:             Mon 31 Aug 2026 18:08:20 +0000
ROA not before:           Mon 31 Aug 2026 18:08:20 +0000
ROA not after:            Sun 29 Nov 2026 19:08:20 +0000
asID:                     399997
IP address blocks:        142.79.32.0/24 maxlen: 24
                          142.79.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:a5:b0:07:bc:ba:b7:c2:25:09:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f
        Validity
            Not Before: Aug 31 18:08:20 2026 GMT
            Not After : Nov 29 19:08:20 2026 GMT
        Subject: CN=b421fb7c-e73c-4910-9c03-be2fbfbf4abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fb:4b:3a:a9:ce:66:a1:c4:47:54:a1:72:b4:
                    40:7d:41:c7:aa:81:75:0a:27:05:a9:5b:b6:e3:f2:
                    94:13:5e:d7:c4:77:2c:05:f0:d8:12:6d:c8:53:26:
                    d0:94:a1:1d:96:b0:c4:6f:cc:eb:78:0e:7f:b9:21:
                    49:a2:f2:fb:16:80:75:e4:4b:5c:4e:47:0d:6f:e3:
                    aa:9a:90:b6:df:e7:e8:30:1f:8c:5b:f0:61:8f:9e:
                    6d:e0:06:14:16:10:fe:18:51:6c:a4:8f:45:50:1d:
                    23:77:eb:f9:ff:8d:ce:3c:7d:3c:37:6b:43:7b:30:
                    3f:3e:e2:0c:80:91:b1:b4:b0:a3:ff:fb:85:af:aa:
                    8e:a3:6e:ef:18:0b:7e:1d:c6:68:26:f5:eb:62:28:
                    44:57:f6:6c:42:ba:ad:0b:bf:45:79:fb:30:9f:39:
                    95:43:6d:fe:e4:f3:fe:29:03:c7:70:42:73:e3:5e:
                    49:1f:a8:b7:f8:20:96:7c:bc:f9:44:75:a1:90:a2:
                    c1:05:c3:68:19:b9:52:75:01:2a:d2:7e:8e:24:90:
                    70:fc:20:f8:d1:ef:0a:6a:68:a0:70:60:4e:5b:e6:
                    d0:fe:ff:5c:bb:f0:a4:65:2e:46:4a:a3:ca:c2:92:
                    65:e3:cb:b1:1d:49:dd:2b:f2:2d:b9:d4:5a:db:66:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E6:F0:15:CB:46:59:22:66:2B:F3:14:52:E1:57:49:26:1B:AC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f/8a485ada-7ac0-3519-a5e2-6ba4f80754ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f.crl

            X509v3 Authority Key Identifier:
                keyid:53:7E:3E:46:A6:AD:C4:59:F5:2B:DD:D1:C4:F7:D4:C1:CE:26:1E:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c63beb4-9c8f-4cdd-b49d-6ccb2186f52f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.32.0/24
                  142.79.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:a6:d3:19:a2:6d:4d:b0:a0:11:8c:0f:61:4a:fe:68:c5:
         26:a7:58:a3:ee:71:fb:8d:3c:b3:5f:ba:39:ba:7c:ce:fc:9d:
         58:bd:64:ad:b5:41:66:0e:96:d1:f5:32:b2:0e:88:0a:3f:d5:
         a2:b6:59:ef:f6:7d:9e:88:ee:f5:e5:be:65:c4:50:02:b0:2e:
         e8:99:76:53:38:34:93:6d:be:ad:14:7f:88:13:4c:d2:35:09:
         2d:3f:1f:c8:00:45:82:f7:1f:26:0d:3e:80:54:93:04:2c:de:
         3b:d8:80:80:d5:80:d5:f4:fb:6d:60:9c:f3:79:1e:2f:a6:91:
         97:7c:70:ab:bd:88:ad:38:5a:2e:52:3d:78:d8:b4:5d:db:d8:
         aa:56:ae:7b:1e:6e:a2:b5:b2:ec:65:03:59:2a:bd:0a:6f:9f:
         8a:a5:23:38:d1:2e:96:70:8b:f6:33:12:ca:bc:46:78:f3:13:
         cc:3b:06:98:f0:a3:07:af:dc:10:be:e8:42:3a:6f:ce:e5:5a:
         5e:02:b6:ff:ea:6e:d5:24:9b:60:f6:b4:ab:1f:24:8f:af:92:
         35:8b:d7:33:9c:35:ad:ac:be:03:04:68:0d:8f:02:b8:9c:23:
         0f:36:49:8c:67:71:ea:9f:c3:18:a8:5e:47:b1:d0:7a:aa:0c:
         ca:c0:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:07 2026 by rpki-client