Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/aee2594c-15c0-3300-9d91-4464c1fcebc6.roa
File:                     aee2594c-15c0-3300-9d91-4464c1fcebc6.roa (raw, json)
Hash identifier:          YBIEhuqKvZCJ0gTJpEWaRBl1M0R/Z624IYpT0QA1Rt0=
Subject key identifier:   51:FD:AE:A0:0C:44:E7:FB:4E:8F:C2:42:1E:37:76:1C:E3:B9:D6:CA
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292BC58F9713EFC9563CB00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/aee2594c-15c0-3300-9d91-4464c1fcebc6.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        142.234.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:bc:58:f9:71:3e:fc:95:63:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=bb2e942f-777e-4a46-ac14-41aff7152ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:4e:6c:fb:b5:c9:fd:90:cf:6f:a8:41:20:
                    73:9f:be:1b:f8:d2:26:e9:dc:9e:96:ab:1c:99:05:
                    5b:f8:f3:d4:b6:89:e1:90:15:fa:af:bb:39:8f:4b:
                    d3:19:32:4d:66:7f:2e:05:8a:7a:e1:56:56:41:75:
                    83:95:cb:75:b4:98:43:2a:2b:1f:58:2f:c4:68:46:
                    64:97:36:98:9a:52:3c:c9:4a:4d:19:73:fc:dc:43:
                    80:fc:aa:aa:f7:42:86:49:3a:89:c3:af:3b:8d:37:
                    76:68:ea:2f:2b:51:db:07:85:55:92:6e:52:b6:09:
                    fb:53:6a:69:7a:c1:a5:70:5e:85:6a:b7:af:75:18:
                    bd:0e:4b:99:9e:2a:68:74:43:b8:08:a0:d9:5b:fa:
                    31:cb:9b:45:dc:5b:76:bf:5b:02:2a:b2:04:d7:4e:
                    36:e6:e0:fa:12:92:d0:54:1a:5b:e1:1d:3b:14:24:
                    dd:c1:7d:b0:a3:86:91:3b:6d:03:ad:67:e9:98:67:
                    0d:57:cb:b9:ec:b1:3d:a8:43:8d:e1:b4:1a:b3:2d:
                    d0:e4:22:2a:93:6a:61:df:39:4a:de:d1:34:ac:76:
                    f0:c4:fa:b2:8d:11:7c:c9:a2:6d:9f:83:07:c4:3f:
                    0d:ca:a4:86:6a:09:97:66:1a:60:6c:57:5f:5d:99:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FD:AE:A0:0C:44:E7:FB:4E:8F:C2:42:1E:37:76:1C:E3:B9:D6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/aee2594c-15c0-3300-9d91-4464c1fcebc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.234.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:cd:29:cf:b4:5f:6e:cd:d6:65:00:fb:5e:4b:35:f3:09:7d:
         15:c9:2a:79:50:2e:67:33:f3:a5:8d:67:9d:66:36:8b:ec:9f:
         6b:9d:8e:be:cb:23:e4:76:54:ce:f4:17:ef:3a:b6:dc:03:4c:
         40:ce:07:d4:46:6c:f3:03:de:60:34:27:ea:a8:87:fe:c7:1b:
         85:76:8e:e1:da:d3:84:8b:91:bc:54:7e:0f:ec:40:b6:92:b0:
         43:63:ba:ee:a4:58:d3:42:ef:3c:c8:86:d5:8a:d7:74:e3:16:
         b1:65:d9:7c:de:4e:c1:5c:b5:cd:3c:b6:9a:c7:fa:3f:ee:8a:
         bf:a4:b8:fe:e3:e9:24:5c:55:38:c1:4e:80:97:93:79:6b:6e:
         83:f6:6f:6c:e0:5d:99:ac:34:ac:55:0b:0a:2e:f6:71:b3:ac:
         6f:7e:3a:14:d8:f0:08:2a:50:31:95:bf:90:3d:6d:5b:02:e2:
         24:f9:ef:0b:9d:72:56:9e:17:5d:1b:5b:cd:85:fc:96:23:dc:
         d7:1d:20:ce:00:13:a7:71:db:a7:f7:05:93:35:57:ac:83:ed:
         9a:24:03:9f:b2:48:46:b9:fb:b8:cd:bb:0d:32:18:e7:f1:40:
         f5:d4:65:f6:d3:5b:26:96:9b:05:cb:ef:bc:80:81:12:80:30:
         5f:08:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:06:12 2026 by rpki-client