Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/94a09040-9204-3825-9f1c-13684766e4e4.roa
File:                     94a09040-9204-3825-9f1c-13684766e4e4.roa (raw, json)
Hash identifier:          1EoNgQMZCtM1ifFxwGDbOYnC0RIbOgO+MAewZtHkxcY=
Subject key identifier:   04:2D:41:C6:F7:E2:AB:3E:98:60:A6:EF:66:C8:7F:BB:25:2E:C9:B0
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584F0D6CE111D706A1FA31863FB4
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/94a09040-9204-3825-9f1c-13684766e4e4.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     53828
IP address blocks:        142.44.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e1:11:d7:06:a1:fa:31:86:3f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=0038877d-f6d2-4e4b-b923-a4541bd61c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:be:ca:7f:4a:3c:e4:12:b7:75:68:ac:36:
                    15:ef:c3:34:e5:3b:bd:e8:8b:8d:27:fa:aa:2d:ce:
                    12:ba:1e:c8:bd:6a:42:09:00:27:41:d0:f2:6c:b9:
                    1d:75:d3:8d:1d:f3:03:6f:e1:92:f7:d5:dc:68:f4:
                    bf:7f:35:e4:5f:fc:95:ef:a9:2a:fe:57:fb:be:ed:
                    09:86:ec:d6:e3:24:ca:d2:92:a7:75:c9:77:b3:50:
                    6e:21:54:a9:93:ea:e4:b9:54:d2:20:27:ed:95:46:
                    10:a4:f5:56:a5:f7:ba:11:dd:94:62:20:c2:e8:57:
                    ad:69:b9:d7:6b:b2:59:62:3c:b9:8b:43:5c:2d:22:
                    f5:dc:52:bb:0c:ed:fc:6d:7e:08:21:b0:a2:7d:09:
                    a9:4c:5e:d9:5f:3c:6b:36:67:19:0b:b6:5a:f4:3b:
                    f2:cc:87:02:ee:77:8d:18:2c:4d:68:e6:98:be:f2:
                    bc:fb:8f:ef:71:fc:a0:33:88:d8:73:40:ee:b0:62:
                    cf:fc:b1:47:13:67:64:18:1a:0e:fe:65:c4:64:77:
                    1f:c3:62:47:ed:8d:97:d7:cd:86:92:b4:71:45:dd:
                    06:c8:17:ae:2b:b2:76:8e:2d:bf:14:c8:dd:a4:1c:
                    9e:42:dc:0a:b4:0c:f2:f4:fe:6f:ec:55:7c:3a:bf:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2D:41:C6:F7:E2:AB:3E:98:60:A6:EF:66:C8:7F:BB:25:2E:C9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/94a09040-9204-3825-9f1c-13684766e4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.44.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:20:32:be:5b:a3:17:b9:1e:9b:2c:ce:f7:f3:4c:34:dc:f1:
         f1:57:b8:dc:dd:b9:65:7f:39:1a:68:8c:d2:28:4a:5c:61:d3:
         9a:d0:e0:aa:c3:98:bd:47:7a:91:f0:c3:a1:07:a8:be:8f:74:
         cd:74:ac:f0:5c:d5:d5:1c:2f:0a:86:c8:6e:1f:e9:89:c4:73:
         b7:df:68:fc:b6:2c:49:e6:87:f4:29:27:cd:dc:6a:da:44:a0:
         ff:0d:f5:24:51:5b:9f:8c:99:61:d8:92:e5:18:87:fb:39:7f:
         79:ce:37:b3:23:3e:47:dd:87:30:98:73:ba:cd:6d:cb:76:14:
         d2:ac:19:38:ab:f3:69:a2:5a:55:3a:e3:28:55:4c:8e:36:ca:
         80:0b:ad:e7:34:d1:06:f4:d2:ee:00:c5:86:e9:40:2b:49:4c:
         23:f5:6e:33:7b:1f:58:12:f9:89:af:0d:46:56:a8:72:e6:81:
         4b:47:93:d6:e7:19:cd:96:85:56:5b:a9:de:bd:3a:59:1a:22:
         cb:08:83:37:fc:e1:a7:56:49:9a:62:12:53:98:18:9d:61:89:
         83:7e:58:63:13:45:1c:e7:19:bc:cd:1c:86:fc:d5:5a:a9:d8:
         97:3c:6a:87:55:63:7d:fb:6a:ff:88:78:de:d6:64:f9:a4:0f:
         20:90:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:01:18 2026 by rpki-client