Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/483a59ef-c41f-3be8-b70d-7d6e60bc6d73.roa
File:                     483a59ef-c41f-3be8-b70d-7d6e60bc6d73.roa (raw, json)
Hash identifier:          1ogk7tc2Fs4BSNPSewnJAHEXskkBxVRP00rUg60Pn18=
Subject key identifier:   87:98:58:A6:2B:DE:DB:15:CA:A5:65:AA:F6:D1:EF:DC:97:96:66:AC
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC28E006F2AAA2D59D53AC400
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/483a59ef-c41f-3be8-b70d-7d6e60bc6d73.roa
Signing time:             Fri 07 Aug 2026 17:21:27 +0000
ROA not before:           Fri 07 Aug 2026 17:21:27 +0000
ROA not after:            Thu 05 Nov 2026 18:21:27 +0000
asID:                     395954
IP address blocks:        142.91.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:8e:00:6f:2a:aa:2d:59:d5:3a:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 17:21:27 2026 GMT
            Not After : Nov  5 18:21:27 2026 GMT
        Subject: CN=1b24e225-25c3-4f21-b4b9-7f29c3baa83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:84:f9:e2:14:28:10:6e:4d:db:d1:ac:8a:
                    4f:6c:a8:11:b2:74:84:3b:a4:10:ae:3f:b0:0b:fb:
                    ee:92:29:75:90:d6:fd:41:b4:d2:eb:96:5f:74:46:
                    02:93:70:d8:01:2b:fa:e7:ae:92:f1:77:52:4a:e8:
                    49:76:30:82:bd:15:7f:fe:3d:80:20:df:19:b3:fe:
                    97:b9:26:9f:db:04:fc:d7:02:92:73:4b:35:d7:3d:
                    9f:63:11:5c:ac:7a:1d:8f:0d:a4:27:82:e2:6d:82:
                    32:45:63:9a:48:70:90:c3:3a:be:14:df:3d:4d:65:
                    4b:82:ce:6b:ed:d3:55:b3:bc:87:a4:4c:fc:c4:9c:
                    79:f6:c2:a6:f7:ea:77:84:30:78:53:f6:fe:00:6a:
                    e5:1e:61:57:98:2f:fa:b2:d4:35:8c:d4:6d:67:03:
                    e4:3b:9d:3a:0f:4d:8f:b9:b7:65:a9:ca:90:f8:26:
                    d6:f1:5d:17:b3:c6:c0:f9:53:3a:19:f9:d9:d5:f8:
                    03:d9:d8:98:04:f0:b1:c8:ff:2e:45:e1:bc:57:9f:
                    1b:71:17:a5:9b:81:0f:17:63:34:eb:96:75:77:2c:
                    dd:46:6f:11:35:7e:17:7d:3f:17:d1:33:3a:f6:f8:
                    9c:c2:8f:de:59:de:64:4c:c2:e9:48:4f:bf:e9:37:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:98:58:A6:2B:DE:DB:15:CA:A5:65:AA:F6:D1:EF:DC:97:96:66:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/483a59ef-c41f-3be8-b70d-7d6e60bc6d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.91.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e3:7a:17:1a:6f:95:9d:34:55:c0:fa:a8:4d:25:c4:54:6d:
         d3:e2:38:c5:26:4c:85:b7:35:a4:0a:5d:10:b5:79:af:f5:34:
         6c:eb:a4:8c:18:9d:6c:5b:46:18:b9:b9:15:02:52:75:0f:2a:
         6c:e7:78:04:82:d1:03:a1:69:21:28:f9:38:3b:b7:cf:04:2d:
         18:f3:0b:e2:d5:0b:73:91:64:a8:3e:22:7d:d0:18:26:68:9a:
         e4:bd:7f:50:ab:58:c4:36:66:b9:03:52:2e:28:10:e4:2b:9e:
         52:3c:cd:c2:7a:ed:c5:98:08:ea:3a:b9:74:2b:ef:13:c5:a5:
         ee:3f:03:6f:00:7c:16:46:be:41:32:ad:0c:12:1f:ea:a5:ce:
         d0:fd:90:02:44:84:03:20:48:34:b0:a3:6d:80:54:0c:76:fd:
         5f:0b:31:7d:c1:17:57:ba:7b:96:b1:ca:36:cc:ee:15:5f:4a:
         f0:6e:6b:8e:e6:5a:14:fc:f1:19:e5:7e:45:e5:fc:52:a2:af:
         1a:99:e7:84:15:9c:81:23:5c:22:5b:32:06:b9:94:67:6d:ad:
         89:b9:10:a3:a9:85:c3:25:99:e1:49:c5:b4:20:f8:06:30:92:
         64:23:9a:14:33:03:0b:ca:a0:c7:29:fa:61:99:40:12:66:38:
         8d:ec:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:05 2026 by rpki-client