Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/556fa104-d7a5-34c1-94a1-d54d564f6ce2.roa
File:                     556fa104-d7a5-34c1-94a1-d54d564f6ce2.roa (raw, json)
Hash identifier:          5irdbMq1hsqawK4c0hGmbCoGUHSLWNyerZp6mdwPpAo=
Subject key identifier:   FF:3E:F5:CF:CD:DC:1E:2B:3E:36:E7:20:3C:23:6E:B4:41:73:33:4C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B30EC915B9D7780A6080
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/556fa104-d7a5-34c1-94a1-d54d564f6ce2.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        142.91.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b3:0e:c9:15:b9:d7:78:0a:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=a6863074-b559-46db-a3a5-d37457c3d359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:ee:2a:31:4f:ad:01:77:61:52:ca:2b:9a:
                    36:ff:59:b4:cd:59:8b:9c:f8:b8:22:08:0d:48:b5:
                    5a:f2:b3:8d:42:03:bf:ef:7e:12:c4:61:e0:bf:a6:
                    12:47:d4:1d:8f:06:d5:0a:8b:c3:09:42:c4:33:00:
                    70:6d:f5:80:5c:c3:73:34:ea:a9:8a:ee:f2:40:c3:
                    57:35:84:b7:33:15:4e:25:fd:e5:24:4f:25:84:6b:
                    07:da:91:51:28:24:27:fc:25:b4:d8:fe:76:d4:47:
                    55:d2:28:6c:ce:9b:4c:c5:58:d4:58:ce:a5:22:83:
                    89:ba:e3:99:b3:7e:e5:36:1b:84:91:37:91:13:85:
                    01:85:cb:31:d3:94:15:4b:ae:6b:6c:41:18:71:a5:
                    49:60:3d:78:54:da:1b:48:cd:13:8e:e3:ec:12:25:
                    85:2a:ef:a8:97:f4:00:b4:a3:ea:3e:94:95:59:93:
                    24:5e:1b:03:f6:71:06:63:a1:4c:eb:a5:36:ee:d4:
                    54:e9:87:7f:e8:bb:44:d0:46:74:46:88:3c:d3:96:
                    e6:70:a4:e9:b9:a2:5b:fa:14:a3:5a:60:17:6b:30:
                    a6:ca:37:4d:11:e5:dd:dd:36:8d:39:cc:b7:69:83:
                    e9:30:b6:11:1f:1d:26:02:87:1c:3c:b6:dd:96:04:
                    a0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3E:F5:CF:CD:DC:1E:2B:3E:36:E7:20:3C:23:6E:B4:41:73:33:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/556fa104-d7a5-34c1-94a1-d54d564f6ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.91.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b3:b3:0b:bc:b8:a9:7e:5d:e2:21:a5:5c:63:40:b9:1f:8b:
         34:01:1d:85:61:4d:77:08:da:a0:b7:83:7b:ef:48:ed:b2:32:
         09:af:e4:c9:53:df:74:ce:d4:f5:6a:0e:fd:a0:84:db:f0:9e:
         b3:cb:56:8c:6f:d9:f3:0f:82:a4:fc:17:d7:1d:1f:3f:3e:3d:
         91:d3:f8:ed:80:34:1d:60:ae:af:76:82:e8:47:df:1e:f5:d8:
         98:07:81:dc:d1:2a:95:d3:5a:dd:5a:a1:0a:63:ad:f7:01:e0:
         1e:fd:21:3a:3a:88:26:a7:28:69:3d:c6:db:02:b0:4d:80:95:
         cb:67:b1:fd:be:26:86:04:4a:3c:c1:0a:1b:81:f6:8d:ce:81:
         c9:9e:82:00:5e:80:ef:84:e2:be:a7:aa:97:a3:f8:54:26:a9:
         69:20:bb:97:7c:af:f0:79:f9:14:d2:52:48:2d:c8:e4:69:13:
         ef:84:32:99:7f:5f:83:55:9f:73:5f:41:5e:28:b7:29:29:5e:
         eb:72:b7:93:25:50:2e:b6:6f:3b:02:51:1e:d7:46:cd:80:9d:
         2b:2a:79:2d:79:a6:aa:33:d3:cb:e3:de:71:b2:bf:b1:27:06:
         1d:50:68:6d:55:21:ac:83:f3:6d:8c:c5:4e:c4:02:29:20:9e:
         a2:6b:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:32 2026 by rpki-client