Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa
File:                     ba245307-a792-3414-8ad4-7c3e11e14756.roa (raw, json)
Hash identifier:          RHWZhwOTcKZjZupe9q4k3fa1YB77rsjApuzmrZH1Sk8=
Subject key identifier:   83:F0:36:34:7F:90:82:A1:7B:EE:41:8C:2B:76:B7:3E:E1:68:02:35
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E253F03264257C7316D364280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     35916
IP address blocks:        142.171.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:03:26:42:57:c7:31:6d:36:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=cbb3790b-cde1-4608-9377-641aa6800b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:9e:4e:2f:55:09:ac:36:f6:9b:87:bf:e9:
                    93:ea:0c:20:77:89:f7:4e:6e:06:cb:ca:6b:11:1c:
                    43:57:3a:61:42:cf:8c:f5:07:e5:9c:a4:65:3b:8c:
                    e1:ed:35:47:82:30:ad:aa:1b:5f:fc:49:58:c8:b1:
                    f0:68:e8:71:58:97:2c:7b:76:b3:57:fa:bd:2e:c5:
                    ee:cf:b9:3c:a3:df:16:8d:db:7b:5e:4c:d8:73:0b:
                    61:b3:be:de:c5:96:24:30:a4:2b:4f:09:eb:78:47:
                    7c:1e:19:30:0f:f4:16:85:7c:37:fc:90:7b:ce:79:
                    fc:d0:ce:b7:cb:69:0e:da:c2:d9:58:f2:6e:e9:1a:
                    da:bd:4f:56:f1:86:ab:ed:13:77:fe:e9:a4:22:81:
                    38:6d:5e:85:4f:95:59:38:bd:65:33:07:08:b3:77:
                    f9:c6:14:10:bb:8a:cf:f7:e5:8f:dc:b0:cf:64:ae:
                    97:ed:31:e7:41:19:0e:6e:a2:69:07:96:a5:ea:07:
                    84:4d:0e:fe:dd:86:72:91:f5:ec:c8:3f:be:cd:21:
                    22:ae:0c:2f:4b:72:ad:d8:29:71:e3:cf:67:06:17:
                    7d:94:06:47:39:f2:ef:a7:51:33:b1:37:6d:53:4e:
                    93:15:49:3c:24:4f:e2:b5:fc:d8:c5:98:77:ad:1f:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F0:36:34:7F:90:82:A1:7B:EE:41:8C:2B:76:B7:3E:E1:68:02:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:a7:4b:9d:36:82:09:95:7c:5f:5a:fd:f2:8f:05:8b:db:
         5c:e6:75:b4:4b:73:18:c7:bf:49:d7:62:4a:c1:9e:b1:51:21:
         6a:71:76:23:5c:20:0c:2e:6c:32:9a:9f:01:01:a7:98:0b:bf:
         92:aa:75:0c:3f:94:43:86:76:af:93:8c:d6:fa:5d:fe:c1:f9:
         87:db:5a:57:29:5b:43:17:e6:71:f1:40:a4:af:42:45:e5:36:
         29:1f:d9:f8:40:63:93:a2:7e:fb:e2:da:1c:00:c1:a2:eb:d3:
         e4:aa:58:3c:dd:de:be:0f:5a:b1:59:bb:9e:db:54:67:c2:59:
         aa:77:b3:36:a1:26:5c:59:4f:c1:d1:3b:f2:0a:4e:a5:ba:55:
         74:48:88:57:1c:42:1b:9f:b2:83:a6:8d:e4:8b:75:52:f0:30:
         6c:2e:04:fa:9b:d5:ac:67:c4:34:a3:8d:e8:1a:3b:a3:bf:5d:
         c5:d1:cd:05:b0:75:1c:dc:fb:db:c2:de:c7:c1:a2:db:c5:ef:
         aa:eb:f5:8e:fa:f6:ae:86:7a:b6:b6:f1:29:f6:0f:63:af:b9:
         94:f8:8a:76:cf:a3:67:f1:ee:50:e7:e4:f8:68:11:a8:46:49:
         d4:17:9e:be:3d:0d:c7:cf:fd:0e:83:42:73:73:05:b1:05:c4:
         f1:6e:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:55:49 2026 by rpki-client