Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/f762dd36-62d1-35df-870b-392ba6f18911.roa
File:                     f762dd36-62d1-35df-870b-392ba6f18911.roa (raw, json)
Hash identifier:          KQpYRoIKjUnzdUtLKa2In3aCwfHIvLpVEbNoSX5MzdI=
Subject key identifier:   A5:29:E5:D2:33:FB:93:B5:93:3C:9A:82:F5:85:A5:FB:CD:0B:31:CC
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F4328584EF7176C312C15BB7C4137C380
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/f762dd36-62d1-35df-870b-392ba6f18911.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     4476
IP address blocks:        142.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6c:31:2c:15:bb:7c:41:37:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=fc635841-9499-4e75-a48c-2a695039b4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:19:fb:20:87:f2:63:f8:9e:ea:90:de:79:
                    47:52:2b:c9:8f:2f:8c:84:1e:9f:7a:94:3b:78:cb:
                    6e:98:7b:b4:9b:69:bc:60:08:ce:e6:86:16:44:74:
                    ef:e9:69:8b:92:06:9d:95:33:3f:80:31:c3:ca:aa:
                    dc:ab:9f:82:dd:85:b2:52:49:70:ed:47:36:7d:f7:
                    7f:cc:ed:d2:d0:7b:5a:42:46:c9:08:7c:e2:a2:57:
                    b6:5c:09:47:a7:17:0a:db:cd:6e:43:e4:9d:44:01:
                    3b:16:b1:17:c8:37:c8:5f:32:c0:45:1c:f5:a9:c2:
                    4a:e3:41:1e:30:eb:cb:2b:a9:6d:22:b5:9d:bf:d0:
                    47:07:a8:c0:9f:a4:93:80:53:64:60:fc:a8:85:47:
                    51:47:27:c0:a6:26:b7:09:47:c3:b0:a8:7a:29:70:
                    25:87:75:0b:ba:2e:76:d2:a0:51:af:15:ca:ca:a7:
                    1b:83:74:8a:01:c3:c5:b0:2b:31:04:c0:58:71:76:
                    a5:dd:e7:0d:fa:e5:47:d7:72:67:db:0c:e9:46:0b:
                    6e:7b:c3:80:dc:02:2c:62:3c:78:6f:f2:bf:b4:84:
                    db:af:85:bf:67:a8:b4:f7:b3:c3:8c:31:72:ad:82:
                    83:e9:bb:e9:ab:87:bf:47:eb:40:0d:8c:27:7e:cc:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:29:E5:D2:33:FB:93:B5:93:3C:9A:82:F5:85:A5:FB:CD:0B:31:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/f762dd36-62d1-35df-870b-392ba6f18911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:65:a6:a3:73:3d:c5:f8:01:07:16:61:00:44:37:2d:aa:44:
         14:d1:d3:e0:a2:8b:48:66:5a:ed:06:e9:00:16:41:31:44:ca:
         22:f7:57:92:b7:70:2a:33:df:10:10:c9:51:d9:43:a9:3f:35:
         f7:15:b1:3b:62:bf:a7:c1:21:b6:f1:b0:e8:dd:c2:a0:7e:19:
         ff:7d:0f:30:81:3a:ce:80:f7:69:6a:e0:f6:85:8a:ab:f8:7d:
         ca:b5:a2:a3:65:75:17:36:a2:9e:e6:48:32:ec:38:b5:c0:88:
         94:e8:bf:3e:91:cc:61:fa:7c:aa:8f:99:03:6a:cf:24:23:d5:
         1c:c7:27:b6:c7:e0:7e:fa:ed:2e:6b:73:7e:b2:23:8a:bc:eb:
         9c:a3:2b:b5:ed:de:e7:49:71:9b:bf:6f:bb:a5:63:d9:fa:a8:
         5f:85:cc:45:0f:fa:8c:9c:1e:84:a1:7f:f6:19:0f:37:21:b4:
         05:7a:a2:a1:a3:99:6c:e9:59:de:81:78:88:be:c1:6b:41:55:
         5d:e2:fd:96:ef:6a:f6:79:d1:1e:a8:28:28:24:8a:6b:c3:49:
         19:fa:30:4d:a8:b2:dd:a4:1a:33:80:12:db:73:61:cf:75:73:
         bf:a0:27:5c:b7:7d:d4:11:ac:b6:12:50:8d:79:c5:32:b4:40:
         18:b1:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:46:51 2026 by rpki-client