Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/afe0c36a-4013-3772-a804-f3b6052cca89.roa
File:                     afe0c36a-4013-3772-a804-f3b6052cca89.roa (raw, json)
Hash identifier:          njhCUarAoCi99aQakLWjjhvcv+VTstmVvoyUwx3kdcc=
Subject key identifier:   05:5E:26:19:96:D7:94:32:BE:F7:4D:23:1B:36:2B:82:55:A9:5A:01
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB9490EE274E7993046A8FB00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/afe0c36a-4013-3772-a804-f3b6052cca89.roa
Signing time:             Tue 04 Aug 2026 09:40:16 +0000
ROA not before:           Tue 04 Aug 2026 09:40:16 +0000
ROA not after:            Mon 02 Nov 2026 10:40:16 +0000
asID:                     7203
IP address blocks:        142.234.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:49:0e:e2:74:e7:99:30:46:a8:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 09:40:16 2026 GMT
            Not After : Nov  2 10:40:16 2026 GMT
        Subject: CN=e396b548-b798-4de8-8f12-752c7740c4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:1e:50:15:7e:80:e1:ef:be:9f:ce:e9:af:
                    34:5b:34:bb:b7:01:d6:95:6a:b9:06:56:79:d8:67:
                    94:4c:c6:c1:28:78:08:2b:3a:b0:c9:47:65:b7:de:
                    8a:35:c1:28:21:40:94:6d:9b:94:2a:cb:1c:c0:98:
                    b3:43:ca:5d:7b:bd:6b:b6:e2:0d:25:41:3f:d9:6c:
                    dc:ce:55:31:f4:b5:12:7a:74:f2:1c:1e:50:32:d0:
                    50:4a:50:2f:59:aa:c3:e7:b3:11:1e:c0:ec:c1:a8:
                    f1:05:07:04:ff:06:c7:5b:c1:3f:80:4f:42:78:4c:
                    87:28:3f:f8:03:2b:2c:25:31:18:43:89:9f:d7:1d:
                    b8:47:c9:c5:4a:70:2d:18:55:70:d0:e5:ed:e0:0c:
                    e3:6d:7d:44:85:28:8a:10:e9:d3:93:20:d3:a8:e8:
                    36:6f:6e:94:72:42:70:28:95:9e:ff:11:e3:03:06:
                    f6:9e:75:ae:e7:0e:05:bb:b5:57:ef:f1:ba:41:da:
                    2f:c1:e6:c7:e8:e1:66:b3:2a:a2:6f:27:2d:ca:64:
                    27:08:8b:51:e5:42:96:0e:73:55:1e:2b:f5:9c:9e:
                    f7:12:83:4b:53:58:cc:42:92:3e:59:82:32:aa:86:
                    16:cd:87:97:b4:61:bc:f1:2f:eb:2f:db:2d:12:7a:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5E:26:19:96:D7:94:32:BE:F7:4D:23:1B:36:2B:82:55:A9:5A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/afe0c36a-4013-3772-a804-f3b6052cca89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.234.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9c:05:ac:b3:f6:46:ca:11:15:de:92:4b:11:d2:c2:cb:3a:
         77:d0:27:b4:a8:bb:b6:ec:20:75:4d:59:f2:2d:17:b7:33:a6:
         6d:42:48:ab:e6:fe:cf:76:43:1e:7c:c4:5a:aa:a9:70:f0:ca:
         b4:09:b4:f1:46:a1:a2:bb:0a:42:eb:b3:8a:38:32:8d:13:22:
         ce:81:30:ec:c7:69:00:59:25:51:c0:a8:1b:71:99:0d:db:2c:
         f8:3f:03:a2:78:65:50:37:ee:35:ee:24:74:dc:25:36:f7:28:
         02:89:18:f5:81:de:ad:83:10:b9:10:d6:55:51:18:e6:25:ed:
         f2:a9:ea:cb:31:2f:d2:1b:69:91:5d:c0:d1:6c:cb:67:ab:33:
         8b:d1:c3:79:d0:4d:95:94:5e:39:dc:af:3a:5b:1f:12:22:eb:
         ec:d5:87:70:6c:1f:1e:be:73:09:f0:15:ff:d5:16:ad:e8:75:
         f2:0a:c7:c8:ea:4b:50:17:da:aa:b4:4c:2f:c3:08:e6:05:4c:
         84:eb:c9:35:49:07:34:ff:93:fd:f0:49:e5:40:46:63:15:b6:
         4e:6c:4e:25:95:4d:1a:de:77:81:45:5b:94:c1:70:91:41:9b:
         93:4c:64:70:4a:83:a7:ef:70:da:1c:8c:3f:33:67:5a:ac:e4:
         58:83:96:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:37 2026 by rpki-client