Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a3b75b1e-6552-3fc1-beea-3143f497105f.roa
File:                     a3b75b1e-6552-3fc1-beea-3143f497105f.roa (raw, json)
Hash identifier:          bMmmlIyj/UFXgw7nfFkQIBj9dThMfEmsfVT8S7TQHoM=
Subject key identifier:   A7:D4:FF:18:38:51:EF:C6:96:8B:71:B1:D9:D3:2A:95:97:36:96:EB
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F655D646C4EE7BB83CFAC3720
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a3b75b1e-6552-3fc1-beea-3143f497105f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        142.91.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:64:6c:4e:e7:bb:83:cf:ac:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=6afbfbc4-56c0-4932-9bc2-d5b376267fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:6b:fa:5e:da:9d:2b:40:67:7a:85:5a:d0:
                    0c:1b:a2:62:00:ab:63:78:d6:5a:13:85:1b:9b:33:
                    49:3c:bc:8d:93:a0:fc:42:4d:f4:3e:fe:ad:36:34:
                    e7:d9:1f:39:7f:b9:f5:ae:b3:15:fe:f4:d6:85:db:
                    dc:4c:c2:4f:70:c1:86:20:2c:82:98:8a:b0:a6:60:
                    58:de:0b:7a:e6:25:4c:1d:bf:79:09:8c:93:dc:e5:
                    87:d9:8c:0d:d1:27:67:09:25:b7:c7:60:2c:e8:1a:
                    a7:b7:bb:1b:f7:43:83:63:cd:38:86:32:f1:81:91:
                    05:68:c5:7d:ee:fa:30:37:9c:92:83:2a:9b:7e:1a:
                    75:9d:cd:ea:11:e6:8c:7c:bb:8e:62:4c:58:20:53:
                    65:af:e2:de:ec:6b:c8:d8:76:0a:83:be:74:5f:24:
                    a5:f0:25:cf:19:05:98:85:d1:d6:2b:f0:4b:44:f4:
                    a9:d2:6f:bb:fc:f4:b2:6f:12:f6:31:a4:da:2e:dc:
                    a4:00:a5:ce:45:ef:1b:90:b5:4e:c5:c4:ab:28:57:
                    fb:9b:82:01:54:c0:5a:da:e9:e3:71:b8:50:18:27:
                    6f:4b:ed:b5:fa:66:f2:11:36:a3:b4:12:7f:e7:9a:
                    a3:fb:7c:cd:c2:7c:9e:bc:82:42:a6:e5:f8:9d:ab:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:FF:18:38:51:EF:C6:96:8B:71:B1:D9:D3:2A:95:97:36:96:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a3b75b1e-6552-3fc1-beea-3143f497105f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.91.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:68:61:06:36:57:99:4b:bd:4b:21:6f:38:e9:fe:3c:88:a4:
         05:3a:0e:3c:ce:92:50:8f:3d:d5:48:e1:a0:e1:eb:11:ad:2a:
         88:9e:9e:32:13:76:ef:d2:9a:54:74:8a:cf:5b:92:3d:19:a0:
         27:28:20:74:b9:62:d6:14:d7:10:03:40:b3:38:a6:67:0a:77:
         e7:39:55:ef:78:70:e8:ef:4c:49:1a:27:6d:3e:2f:94:ee:6e:
         f3:46:35:49:d0:d4:4e:5b:02:7d:9a:8c:d6:5f:ef:18:3d:88:
         0a:8c:b7:7c:77:b8:8f:aa:3e:a6:0f:c7:c7:e6:3f:c2:d2:80:
         22:40:ec:b7:1a:85:a6:d1:a5:0d:08:8c:c3:ad:f0:20:e5:c5:
         54:2c:1e:9f:fb:d0:99:f8:3c:0b:36:a3:8c:70:0d:1f:81:05:
         9c:22:fc:72:67:da:3d:a7:7e:c4:b9:d2:31:09:42:c1:5c:ed:
         e0:57:e5:28:53:70:fc:cd:53:66:06:bb:19:25:9b:ac:7e:ba:
         d8:6a:b4:b3:2e:7c:31:a6:d0:c2:f7:49:c0:b3:ff:be:9b:ff:
         22:40:0c:5b:ed:bc:10:7e:da:22:c8:d5:2d:71:4b:66:a9:ed:
         0d:01:5a:bc:27:30:2d:e0:d8:7b:34:bb:50:f2:de:ae:34:0a:
         6b:cb:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:12 2026 by rpki-client