Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cbaf0122-894b-3137-8961-47853d033a4b.roa
File:                     cbaf0122-894b-3137-8961-47853d033a4b.roa (raw, json)
Hash identifier:          hKhRXOwk/z5eNzm2qqc3mn3NJaQJMclYX0l3RDlhOSk=
Subject key identifier:   CD:A8:CB:20:8D:4A:89:35:9C:D3:73:11:1B:B6:C2:21:95:60:AC:D2
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC2867EF7AC83CB8BF77EBA90
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cbaf0122-894b-3137-8961-47853d033a4b.roa
Signing time:             Fri 07 Aug 2026 17:06:19 +0000
ROA not before:           Fri 07 Aug 2026 17:06:19 +0000
ROA not after:            Thu 05 Nov 2026 18:06:19 +0000
asID:                     395954
IP address blocks:        142.234.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:86:7e:f7:ac:83:cb:8b:f7:7e:ba:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 17:06:19 2026 GMT
            Not After : Nov  5 18:06:19 2026 GMT
        Subject: CN=8fc457d8-1018-4ae1-a35c-2d9eee72a785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:f4:c5:6f:9e:9c:2e:85:6f:95:a0:b4:77:
                    fb:ee:09:9b:09:a0:50:18:bf:a5:98:f0:3e:39:69:
                    4a:49:d0:3b:85:a3:4e:8e:a7:c6:e2:9e:50:eb:fa:
                    ea:a8:6d:1c:94:a5:5a:bb:7b:9c:e8:b7:79:85:bc:
                    a5:05:07:c2:da:4c:cf:48:37:44:25:9e:ff:09:a6:
                    7a:bd:83:cd:ec:28:f0:f3:bd:e5:c6:cd:d6:9f:d7:
                    69:62:c8:b4:9b:53:42:3c:1c:82:e2:80:00:7c:47:
                    57:92:99:33:33:54:6e:88:62:cd:cc:94:ba:16:1c:
                    af:d8:fe:6f:ab:e2:f4:ff:65:8e:59:e6:9e:7e:07:
                    ca:87:92:58:93:c6:58:74:53:34:6f:e1:62:72:ea:
                    e8:f3:89:ab:f4:0d:ef:1d:68:d1:77:c1:eb:46:f4:
                    c8:d8:eb:4c:b6:7c:aa:a9:40:dc:d9:d1:ae:52:39:
                    20:8c:fb:9a:d0:08:f3:39:6d:03:e4:99:85:a9:cc:
                    f1:11:fe:7d:c4:1b:d8:42:02:f3:9b:e6:3a:f9:6d:
                    29:bc:8c:cf:09:12:b5:db:7b:c9:d9:db:12:37:ce:
                    ad:1d:b9:19:d0:b3:a0:1e:80:f3:7d:de:14:89:04:
                    47:cb:a7:2e:2c:be:42:32:64:e6:25:46:50:ca:8d:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:CB:20:8D:4A:89:35:9C:D3:73:11:1B:B6:C2:21:95:60:AC:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cbaf0122-894b-3137-8961-47853d033a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.234.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:81:dc:19:8e:4b:f8:c7:d3:67:b7:e2:01:e1:e1:15:6d:d9:
         ba:63:d3:d4:ab:76:dc:c5:5e:b1:1d:00:a9:42:6a:b1:66:b6:
         ca:eb:a7:07:a0:9c:81:1d:00:e0:c3:35:3a:78:2b:5c:68:47:
         12:37:90:a9:a6:e8:00:d3:30:e0:af:53:96:3d:c7:ce:b3:78:
         f7:8b:45:c8:91:2d:86:22:a8:31:51:3e:b4:65:25:55:39:b7:
         6c:11:de:c0:45:16:e2:91:5b:e1:93:41:c0:bd:19:86:11:65:
         8c:5f:26:8b:65:2b:65:f1:c9:a0:48:10:2a:b1:45:2e:b9:70:
         e1:0c:13:fb:92:97:58:67:dc:70:be:b3:21:08:94:5d:fc:17:
         f9:95:74:2d:77:94:a5:56:8f:94:d5:d8:5d:5c:ae:46:49:36:
         5b:73:09:3e:7f:23:b2:04:e4:7d:fd:0c:1d:12:f1:9d:77:03:
         64:f1:7f:d7:d0:06:d7:4e:0f:a7:b9:e1:3a:a9:1f:8c:05:3d:
         3c:6a:8d:c1:b8:60:8a:08:bd:25:41:b3:08:f2:9f:8d:19:be:
         11:95:f7:48:8e:53:27:20:e3:aa:a4:84:fb:2f:2b:71:f2:f2:
         b2:e7:51:fd:d8:42:43:55:3a:f2:c9:30:7c:b1:77:29:9e:99:
         10:02:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:10 2026 by rpki-client