Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9ca45b88-e0be-328b-8463-a3a76b535423.roa
File:                     9ca45b88-e0be-328b-8463-a3a76b535423.roa (raw, json)
Hash identifier:          W54C6eq8OJqR3Af/tXxSWDIdNzdNYbXh8bTAxqyLWD4=
Subject key identifier:   DC:69:EE:17:2A:08:B3:01:B1:DD:CA:CD:14:12:3A:78:C2:CC:20:A7
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B21E98E0EAA514ED88D0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9ca45b88-e0be-328b-8463-a3a76b535423.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        142.234.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b2:1e:98:e0:ea:a5:14:ed:88:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=8e650ea0-02b9-4a26-b6cb-12fe2eb5904a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:a0:1a:6c:6c:26:62:fa:35:ea:aa:fd:b2:
                    2e:23:1b:54:07:06:92:dc:93:96:9b:1c:ea:49:ab:
                    db:4f:84:91:6d:2a:67:31:5a:a3:c9:39:f9:57:ae:
                    0b:77:9c:0f:02:0b:21:75:b4:36:2f:29:94:ac:7f:
                    ad:ed:e8:25:0f:4c:92:dc:46:40:32:b5:d5:eb:95:
                    74:79:ed:fe:ad:36:e8:d9:7a:58:29:74:f9:5a:90:
                    d6:33:28:34:0f:f6:6e:10:96:8e:b8:16:9d:8b:84:
                    56:d9:1f:d9:ba:81:ca:8a:82:22:b1:a7:b9:04:a4:
                    62:b7:c4:e3:30:93:c4:a9:83:3f:76:24:cc:12:53:
                    50:7e:68:df:4f:48:93:1f:f5:27:9d:a4:1b:c0:cd:
                    f8:ad:e5:e0:59:b4:ca:8b:2f:1c:63:43:69:2d:21:
                    68:3c:35:ac:25:90:1e:83:71:ad:2a:1e:da:e8:c0:
                    96:05:3a:c3:0e:d8:67:8e:a6:7e:6e:98:2a:20:e4:
                    80:07:1a:c6:bb:5c:06:0a:51:35:a6:c4:43:98:70:
                    f8:6c:92:7e:b8:96:e7:6c:8d:d3:98:d8:26:0e:a5:
                    f0:b6:fe:0e:10:9e:fe:df:d6:df:97:32:a2:e9:9f:
                    90:a8:bd:72:56:a5:34:7e:68:3b:c6:f9:62:fd:60:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:69:EE:17:2A:08:B3:01:B1:DD:CA:CD:14:12:3A:78:C2:CC:20:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9ca45b88-e0be-328b-8463-a3a76b535423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.234.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2c:c5:d6:9a:a6:20:50:fe:f7:c6:3d:6f:5b:63:42:c8:bf:
         ff:b7:64:80:34:a0:54:65:8e:d7:88:54:d4:f6:cd:68:88:fb:
         89:03:45:31:a7:fd:e1:6a:39:99:81:f4:22:a0:8c:dd:28:e0:
         c3:9c:8b:c4:9c:73:12:ea:ff:8d:31:21:05:92:98:1b:6c:ec:
         b3:1b:42:a9:06:8b:9b:13:ed:c9:22:e9:a3:d2:ef:7f:78:cf:
         d2:e2:6c:92:ae:ca:51:5e:30:5c:13:bd:b8:c4:e3:b7:2c:35:
         84:cc:dd:44:a4:57:f5:34:8d:a9:c0:ee:e3:73:ea:9a:18:87:
         aa:37:e9:8e:8f:20:59:85:1a:e5:c2:ed:53:16:5c:b2:5e:0f:
         85:9d:f2:8c:d4:9a:78:16:d5:20:ec:a2:e3:4a:03:ee:4c:72:
         b0:05:69:45:75:c3:ff:26:dd:55:82:bd:36:9c:17:c3:f0:1b:
         94:21:ef:63:fc:88:00:f1:ca:75:57:88:9a:ca:b7:02:45:49:
         02:a1:8c:1f:d9:68:88:4b:48:f2:64:17:6b:fe:85:56:e7:5c:
         ce:b3:7d:73:3f:e2:dc:fa:bb:b3:c9:fb:2a:11:11:52:c1:c9:
         47:7b:71:45:41:00:6e:18:b9:aa:62:36:31:a4:1a:eb:47:ba:
         65:eb:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:24:20 2026 by rpki-client