Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d8d24c9a-71b3-35c4-87de-7d9612b83497.roa
File:                     d8d24c9a-71b3-35c4-87de-7d9612b83497.roa (raw, json)
Hash identifier:          Og5B+LTDlTDzVYH8J2PoSt3BX8BRtC+DnpYHAx72qmk=
Subject key identifier:   D4:57:11:00:2B:D2:F7:B9:29:28:7E:0B:80:4D:A5:5B:8F:2C:61:1F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB94C8F696AF30A8AB81F6A60
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d8d24c9a-71b3-35c4-87de-7d9612b83497.roa
Signing time:             Tue 04 Aug 2026 09:47:19 +0000
ROA not before:           Tue 04 Aug 2026 09:47:19 +0000
ROA not after:            Mon 02 Nov 2026 10:47:19 +0000
asID:                     7203
IP address blocks:        142.91.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:4c:8f:69:6a:f3:0a:8a:b8:1f:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 09:47:19 2026 GMT
            Not After : Nov  2 10:47:19 2026 GMT
        Subject: CN=34236476-f7b1-4551-a977-c5841b3045e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:bc:1a:83:c8:0b:66:62:da:9c:17:bc:8c:
                    c0:0e:6c:fd:b9:c8:0b:4d:6f:7b:96:2f:4e:92:e2:
                    0d:55:d9:e5:5d:60:55:7b:dc:e4:00:a4:af:6d:33:
                    49:41:a7:6e:80:0e:c9:f5:65:27:ea:b7:63:88:db:
                    f9:c2:95:72:20:7e:26:c9:e9:ae:6c:06:50:7a:52:
                    eb:fc:6d:36:03:d3:74:f1:14:f4:1c:8b:b9:45:2b:
                    b7:9b:50:e2:53:cc:dd:c3:d4:e3:c0:a4:5c:04:03:
                    bb:77:16:5e:d5:25:6c:3d:45:87:73:e3:be:d8:0e:
                    30:01:ce:f3:9a:11:1a:b0:b5:55:53:e2:d8:4a:e4:
                    69:a8:ae:0e:78:40:47:31:9f:c9:ce:a0:fd:87:63:
                    d0:78:1b:b5:e4:fa:62:78:d0:9b:6a:4c:54:27:f1:
                    57:eb:8d:54:18:40:c4:ae:96:1d:39:88:a5:18:06:
                    e3:f7:93:03:6c:44:b2:26:d8:94:90:ca:b5:11:6e:
                    eb:d6:98:d4:0d:7e:ff:e3:0f:e8:d5:bf:30:e8:15:
                    f1:91:2a:6b:56:ef:d1:65:de:81:bb:c3:bb:4c:1e:
                    99:34:36:8d:a4:4c:f6:0d:df:18:f7:1f:2d:ca:55:
                    2e:84:6d:18:f7:79:f4:99:c1:f7:2f:6c:55:93:6f:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:57:11:00:2B:D2:F7:B9:29:28:7E:0B:80:4D:A5:5B:8F:2C:61:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d8d24c9a-71b3-35c4-87de-7d9612b83497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.91.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:83:b1:95:9f:d4:51:66:0c:ea:0b:46:f9:17:26:b0:62:42:
         95:0a:fd:a7:13:96:0d:5c:aa:66:c2:ac:7c:ab:9f:55:64:bb:
         f5:00:27:79:51:69:a6:6f:21:97:8a:6d:f0:43:ca:9d:b4:54:
         f5:b5:06:14:6e:f6:64:26:05:b6:77:0b:e7:26:c0:27:ed:f3:
         5e:44:56:d9:41:ea:e3:a6:cf:8b:6a:4c:2e:bc:f0:0c:50:fa:
         e8:84:b5:f0:6e:b5:2e:48:75:fe:ed:4f:4d:28:43:07:2a:12:
         b1:ff:ec:a4:78:19:6e:22:b1:3c:b7:2e:bf:6a:0a:bb:03:3b:
         2c:75:f4:57:3d:ee:c8:e4:75:d3:50:83:c9:58:7c:7d:27:f8:
         8d:85:a6:5e:a2:6a:6e:61:cc:df:58:5d:1a:ff:a2:3c:98:e9:
         b7:47:d7:46:80:44:b2:b0:01:1a:ba:61:9d:80:08:db:b3:72:
         f9:92:99:84:bb:86:b4:41:72:6d:40:01:69:d4:5e:48:ff:38:
         e1:7a:7b:a7:a3:a2:69:d2:e2:5d:63:c1:82:f4:00:fe:cc:fe:
         83:a8:14:18:ff:a0:9a:a0:68:fd:ec:b9:1f:48:4b:82:c6:b8:
         87:65:3f:46:41:bc:69:0b:68:72:55:a8:1e:69:67:7f:63:d8:
         d5:92:fc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:19 2026 by rpki-client