Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa
File:                     8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa (raw, json)
Hash identifier:          LEJANUAyRr2oWs0MGakYuk1KRvayX2jgJqBYnllYMR0=
Subject key identifier:   D9:E4:21:56:39:58:21:7F:3C:42:25:35:B8:CA:D9:6D:45:75:D0:DC
Certificate issuer:       /CN=fb17e7fe-b629-4f60-b002-5a63654202da
Certificate serial:       010D0C9F4328584E4559E36BD9B27DCEDC8A3A40
Authority key identifier: 9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        142.147.14.0/24 maxlen: 24
                          162.247.96.0/21 maxlen: 21
                          162.251.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e3:6b:d9:b2:7d:ce:dc:8a:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb17e7fe-b629-4f60-b002-5a63654202da
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=3ae19061-9f44-4a2d-b055-513d91a08fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:d0:2d:ea:cf:80:c7:0c:de:06:24:2a:7d:
                    91:bc:aa:b9:4f:c4:f6:7e:ba:f3:6c:d6:59:05:68:
                    d9:74:74:ef:33:5c:b9:f4:fc:22:b5:98:12:57:c9:
                    75:96:23:b0:88:98:c7:e5:e4:71:15:0f:99:9e:e5:
                    89:e4:17:52:82:59:54:a8:ab:90:a3:d2:81:7f:0d:
                    d4:1f:e4:c5:94:ff:b8:17:07:fe:0d:f8:f0:2b:8d:
                    61:cd:c8:82:0f:4f:04:2c:6f:a4:02:0b:54:20:0f:
                    a8:cd:04:96:69:15:f6:74:90:4f:51:a2:c8:63:00:
                    f0:99:0d:2e:8a:99:33:c1:06:df:0c:90:ec:7a:f4:
                    88:61:2c:d4:8b:8c:68:cd:e1:bf:ee:d2:f8:70:24:
                    cd:06:00:38:49:5b:d4:a5:76:fa:15:51:26:69:33:
                    b8:a9:fe:d5:ac:6d:c0:81:86:20:ac:b0:89:44:c9:
                    7a:14:a5:83:5c:02:03:ed:84:63:79:77:92:03:3f:
                    bf:e6:5e:b3:82:f7:1c:4b:b6:6b:29:55:fb:a9:49:
                    38:09:07:ab:1c:a5:f9:66:c6:46:76:ad:f2:05:50:
                    5b:85:6f:54:4b:8a:bb:b8:2a:3b:06:2a:f3:64:79:
                    b9:de:de:cc:c5:b5:3e:4e:15:79:f7:e8:0e:f2:de:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E4:21:56:39:58:21:7F:3C:42:25:35:B8:CA:D9:6D:45:75:D0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl

            X509v3 Authority Key Identifier:
                keyid:9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.14.0/24
                  162.247.96.0/21
                  162.251.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:4d:84:9a:49:34:4c:15:91:64:84:f9:d9:c4:40:20:1b:
         79:eb:bd:13:ac:fd:2d:bd:47:c1:f5:85:60:96:39:38:ea:7c:
         cc:fb:73:08:86:6e:82:13:07:b7:c8:9e:b9:17:5e:bb:11:b8:
         7d:cf:6a:85:5c:b3:0c:1d:62:45:e6:38:bf:d4:c1:25:33:2e:
         70:26:2f:d8:57:4e:e0:57:26:e1:49:5e:41:5c:7e:fb:d7:e4:
         7f:33:ff:db:d9:b9:54:c8:c8:40:65:96:93:9b:a2:7e:2e:59:
         05:c9:0f:e5:44:8a:22:0e:47:98:56:df:d0:d3:37:71:4d:94:
         ae:bb:0f:d8:10:3f:3f:af:70:5c:3c:ae:ed:98:72:7c:ae:26:
         58:87:6b:e1:1c:a9:b2:ac:4e:6c:f8:51:73:f3:c9:39:14:5b:
         27:34:b1:f9:25:97:94:99:b7:d3:5e:36:7c:dc:c6:62:4a:a8:
         14:3b:47:84:59:e0:34:c5:9d:d9:36:e4:6d:38:3d:12:99:48:
         ed:ea:bd:a8:d0:da:10:ac:57:01:9f:d6:d3:ea:ab:2b:7b:48:
         59:a9:0f:26:cc:01:ee:ea:43:f0:eb:69:25:fd:4a:56:98:e0:
         89:82:92:50:2a:82:52:9c:ad:d7:4a:57:e9:cf:df:81:5a:70:
         70:01:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:41 2026 by rpki-client