Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0322a544-3c13-3107-a644-73ab77a1eae4.roa
File:                     0322a544-3c13-3107-a644-73ab77a1eae4.roa (raw, json)
Hash identifier:          2Mjlo+celYGCLNy2Rga7Znp6bPQXVZHm2PXOPVdRhAE=
Subject key identifier:   9F:ED:98:E9:63:C7:D3:7E:91:A6:1F:F4:7E:CF:F3:D6:DD:A2:32:D9
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584F119CF827684CD31095ABF700
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0322a544-3c13-3107-a644-73ab77a1eae4.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     395111
IP address blocks:        142.214.160.0/20 maxlen: 24
                          142.214.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f8:27:68:4c:d3:10:95:ab:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=4f34957d-6731-4bec-97f8-1d5baf91a8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:82:e9:87:7a:e2:09:af:78:bd:eb:51:a8:
                    92:b3:e9:43:d8:cf:7d:ef:2a:39:34:e7:f0:86:4e:
                    f7:39:01:ac:3f:51:05:ae:b0:3a:2c:b5:1d:4b:b2:
                    cc:42:8a:67:82:dc:e6:9f:dd:43:b9:d9:8f:74:f0:
                    39:11:07:d4:db:57:79:df:a0:3a:8e:e7:9f:9a:1b:
                    90:9f:0c:f5:b5:7b:3a:df:97:76:eb:54:83:7b:54:
                    38:4f:c1:38:4e:4a:bd:9f:99:cb:ae:89:e3:0b:35:
                    99:a7:b8:33:d7:c4:95:20:42:c0:28:a0:6e:9f:d0:
                    52:35:30:37:74:22:a4:79:29:a3:f0:78:48:3a:3c:
                    06:6e:57:c0:56:26:5d:47:91:4b:7e:d6:92:ea:11:
                    1a:65:33:3f:7c:3a:ff:56:19:68:d4:e9:61:4a:15:
                    0e:77:6b:c6:ef:65:cf:f4:58:7c:bf:a9:1b:3a:38:
                    a4:8c:34:75:57:0b:4e:dc:32:5c:38:ba:1b:85:06:
                    7e:6b:0c:1e:8a:57:d7:b3:84:27:24:39:6b:6f:6c:
                    ef:a0:1c:31:92:f1:94:b9:68:9b:63:22:68:6b:98:
                    77:ef:e7:e0:a4:72:07:be:f9:f6:f7:da:cf:9f:15:
                    df:40:b2:47:bc:0c:e2:bf:6e:4e:d6:34:59:6e:93:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:ED:98:E9:63:C7:D3:7E:91:A6:1F:F4:7E:CF:F3:D6:DD:A2:32:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0322a544-3c13-3107-a644-73ab77a1eae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b6:88:33:80:50:ce:76:90:1e:82:ae:16:c2:6e:07:9e:f9:
         28:70:46:6f:81:91:b6:47:d5:d7:11:a0:d0:4d:fe:0a:2d:e4:
         aa:d0:b9:de:c2:68:71:4d:e2:68:d1:9c:07:fc:19:06:ed:c2:
         7c:a8:e0:64:90:05:ed:e4:da:de:f1:69:fc:ae:92:2c:d7:ed:
         e7:11:c1:12:9d:e1:e8:54:67:5f:cd:17:50:0f:94:67:37:b4:
         39:20:9a:95:f0:37:c9:12:44:92:af:d5:77:43:25:64:c1:38:
         c6:48:e1:08:4f:73:43:f6:19:2d:56:01:9c:82:c1:04:2a:54:
         02:ef:85:ec:bf:01:47:46:0c:17:f9:98:39:d6:5f:52:61:cc:
         f7:36:47:73:85:e8:f1:39:3a:c9:80:6a:2d:1b:6e:3a:af:9d:
         c6:8b:a3:48:d8:77:ca:37:49:97:ee:9a:29:f7:11:e5:97:25:
         9a:47:82:28:49:4c:d8:ec:59:ea:d5:cb:20:0f:df:22:59:18:
         18:bb:4e:1e:af:c0:a3:50:9b:19:bc:44:7e:33:85:7d:e8:1a:
         0f:54:25:02:2d:43:f6:b5:bb:c5:8d:82:2b:17:18:82:b6:e3:
         e8:aa:79:fe:9f:63:f3:40:b3:0f:a4:2b:dd:8e:f3:97:3b:fe:
         a0:1c:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:16:09 2026 by rpki-client