Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/612682dd-942b-319c-a6ac-72d6a277fc0a.roa
File:                     612682dd-942b-319c-a6ac-72d6a277fc0a.roa (raw, json)
Hash identifier:          PcxQm5C9n6j+HLRO+IzHIKjCJBChiLKE3f7JmBeAI78=
Subject key identifier:   3A:EE:F3:2A:24:CF:31:51:C7:03:1F:98:8C:0D:9C:31:22:06:E2:3A
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC28D58A0EDEFD2BBB5646080
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/612682dd-942b-319c-a6ac-72d6a277fc0a.roa
Signing time:             Fri 07 Aug 2026 17:20:08 +0000
ROA not before:           Fri 07 Aug 2026 17:20:08 +0000
ROA not after:            Thu 05 Nov 2026 18:20:08 +0000
asID:                     395954
IP address blocks:        142.91.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:8d:58:a0:ed:ef:d2:bb:b5:64:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 17:20:08 2026 GMT
            Not After : Nov  5 18:20:08 2026 GMT
        Subject: CN=6df85d3c-6186-43d3-a592-f89f420bebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:69:d6:38:bd:f9:51:56:b8:79:d9:5c:17:
                    44:0e:1b:42:ad:0a:5e:17:ff:e5:0c:77:c7:12:be:
                    78:72:93:29:b2:66:8e:db:b5:de:da:73:17:69:08:
                    5d:30:f3:a7:d1:a6:20:51:94:16:57:83:c9:60:6f:
                    f9:c8:50:6f:43:54:35:a2:85:98:3d:a9:95:a7:7b:
                    94:c6:63:f7:91:1e:da:ea:a2:8e:62:da:60:f9:10:
                    f3:ab:68:b1:9b:d9:0e:e9:59:ec:48:53:59:5a:f2:
                    a2:b2:0c:80:fd:90:aa:15:29:9f:bd:69:36:82:e2:
                    5c:15:8b:01:5a:8f:b7:49:26:b3:cd:b3:5d:17:22:
                    ed:bf:0b:2c:07:64:ef:ea:71:e8:cb:1b:dd:f0:22:
                    17:f1:21:ec:c4:63:a5:3c:c6:36:6c:31:99:88:0a:
                    db:f4:32:f6:cb:96:46:6b:c8:cf:64:f6:d4:f0:7f:
                    c0:e7:de:a2:9c:1c:0b:42:ff:53:a9:c3:a6:44:6f:
                    80:66:f7:9c:25:7f:fb:23:44:e7:82:79:28:23:bf:
                    e6:0b:8b:b7:af:db:0c:0b:6a:26:c9:af:02:ea:bf:
                    b1:b0:aa:03:2f:86:bf:96:67:ed:f6:03:b9:a5:48:
                    c1:a2:15:83:96:69:f3:9c:b3:b5:b4:59:8e:a8:b0:
                    aa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EE:F3:2A:24:CF:31:51:C7:03:1F:98:8C:0D:9C:31:22:06:E2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/612682dd-942b-319c-a6ac-72d6a277fc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.91.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f6:22:9c:f6:54:eb:32:47:e5:30:ed:82:d0:04:d5:75:49:
         36:5e:8b:91:6c:83:a9:15:53:f2:15:d9:dc:7a:f0:1c:4c:d5:
         de:00:cb:66:74:a7:f4:b2:c8:58:3f:ba:04:77:06:a9:03:02:
         fb:9d:7e:9f:12:52:a5:99:02:ca:cf:67:84:9c:59:10:49:ef:
         da:60:21:f7:a0:8f:61:16:04:38:dc:7b:bb:a2:65:98:5b:49:
         14:db:2c:03:79:08:a8:54:09:50:82:f7:78:e8:f0:ac:c4:5d:
         50:5a:69:e9:01:2f:8d:f9:f2:37:54:c2:ed:09:69:05:d3:e8:
         a7:bb:62:22:39:6d:6d:9b:37:1f:f6:19:c4:49:25:7b:88:1c:
         be:21:65:c5:a3:46:45:1e:4d:ca:c1:fc:91:80:ca:68:d4:21:
         18:a5:71:09:ab:f5:87:b5:1e:52:f1:95:24:00:5e:02:ee:10:
         53:8a:10:69:84:1a:df:be:a7:ae:4d:90:21:2b:29:fa:5c:7f:
         68:49:d8:3f:bd:b6:3a:2a:30:35:f2:e0:2b:34:a9:b3:e2:33:
         06:30:5a:a7:3b:0a:99:c8:b5:76:6f:9b:d2:ef:10:72:72:02:
         8a:09:63:93:a9:d6:9e:4b:68:c1:8b:8b:2f:b1:f5:94:83:ba:
         c1:f4:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:43 2026 by rpki-client