Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/91883569-d525-3b8b-aa67-0fb16c9508d0.roa
File:                     91883569-d525-3b8b-aa67-0fb16c9508d0.roa (raw, json)
Hash identifier:          3FOSmqFrBVPOWLyW4JnqbtxxvGPmA2UbGvPWjQ3ibRA=
Subject key identifier:   79:6E:16:1E:0E:8B:A2:63:D0:ED:6B:4D:EE:EB:E8:E9:C0:3B:14:3A
Certificate issuer:       /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
Certificate serial:       010D0C9F4328584ED002120EEEFCA5FB7A2625C0
Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/91883569-d525-3b8b-aa67-0fb16c9508d0.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     200658
IP address blocks:        141.195.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:12:0e:ee:fc:a5:fb:7a:26:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=3c61015c-7624-482c-b0de-59665388ce06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d7:20:88:3a:1c:7c:c7:37:ee:a4:4a:42:47:
                    30:6c:c2:89:98:62:a7:9f:99:16:83:6f:60:8b:03:
                    68:74:26:2f:77:bf:1f:b3:bd:67:db:36:d3:32:3f:
                    39:32:7f:81:6f:38:1e:77:05:85:5c:b7:de:68:f7:
                    c9:72:02:68:f7:76:58:72:e4:4c:4f:93:c4:e8:4a:
                    4a:64:b4:f4:d9:ea:11:2e:20:b8:a5:8b:b9:a9:09:
                    f2:ca:0d:db:1d:ed:2f:ef:23:bf:ed:c8:b3:0a:3e:
                    ac:da:1f:7b:02:7f:04:04:d2:4c:d7:9d:46:bb:a0:
                    b0:49:a4:66:bc:0b:42:65:b8:4a:57:54:80:36:f0:
                    ef:42:e4:8a:e1:62:d4:f5:b6:7a:3f:1d:c8:e6:9e:
                    fa:cb:e5:24:e9:15:51:ee:82:47:72:df:d6:4d:a9:
                    ed:34:52:3c:8d:d2:c6:99:19:48:e6:5b:30:92:44:
                    de:40:2c:f5:52:8f:5e:4e:f6:f8:80:ba:b6:89:c0:
                    55:9b:30:70:b3:cb:5c:46:4d:60:1c:2c:03:3d:a4:
                    f3:99:1e:49:1c:c4:7a:8f:fb:0b:76:09:0f:4c:1e:
                    9a:ce:09:33:e3:dc:c3:5c:10:d2:a2:be:c4:18:1a:
                    aa:c4:d5:ce:c8:84:e9:15:f1:e7:54:74:56:9d:cb:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:16:1E:0E:8B:A2:63:D0:ED:6B:4D:EE:EB:E8:E9:C0:3B:14:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/91883569-d525-3b8b-aa67-0fb16c9508d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl

            X509v3 Authority Key Identifier:
                keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:2f:b6:f9:a2:cf:ec:37:96:e8:a4:85:c6:42:39:da:34:
         e4:7a:7b:56:5c:9e:1b:8c:ce:eb:92:58:54:d9:42:49:7d:be:
         b2:e1:1c:b7:7a:1d:d4:b6:b7:48:e6:b7:0b:c6:1c:95:2e:00:
         73:d1:b9:3d:27:2c:e1:e6:9f:d7:a3:64:df:c0:02:68:2a:d4:
         ee:16:25:00:91:8f:d3:28:be:31:c3:aa:cd:c2:27:8f:a6:72:
         5b:77:28:98:b8:ad:4d:2f:bc:b9:d8:14:be:6e:65:56:27:fb:
         a6:2e:34:1f:3a:94:f2:38:e9:d9:55:28:a2:a2:96:ab:7c:7b:
         b4:fe:a3:72:02:15:6a:d1:a8:46:a9:f1:e8:14:15:eb:b0:54:
         a5:34:b1:03:69:a3:2c:99:30:01:4e:dd:f6:71:76:14:d7:92:
         a3:03:18:0e:1a:a1:f8:7e:7d:6b:65:4d:21:52:78:31:35:07:
         15:52:7d:84:16:6c:61:51:a0:bb:de:0b:10:c0:f2:db:13:fb:
         fb:e5:3b:ae:18:b4:70:fa:63:3a:48:83:cf:22:2a:83:c6:a3:
         5e:73:d8:b2:05:a2:32:ed:40:b8:b1:f5:92:20:4f:41:d1:40:
         60:9b:e8:f9:fa:7c:1a:6c:4a:85:85:39:2e:2f:0e:4c:1a:a9:
         66:1d:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:40 2026 by rpki-client