Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/445da2cb-06f2-3bac-8136-632fbe9dd773.roa
File:                     445da2cb-06f2-3bac-8136-632fbe9dd773.roa (raw, json)
Hash identifier:          4xreKRy4lowSD2T3NzEFDKEZcKFUg012io+M14KofC8=
Subject key identifier:   F7:A5:0F:18:BF:3F:AD:DA:A4:06:CE:DB:36:B0:3F:8A:E3:BD:A6:95
Certificate issuer:       /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
Certificate serial:       010D0C9F4328584E38C9C0E7F181F9FE08676700
Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/445da2cb-06f2-3bac-8136-632fbe9dd773.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     395886
IP address blocks:        142.248.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:c0:e7:f1:81:f9:fe:08:67:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=4034e899-6a57-45a4-a1ec-bc63c5d3a211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:e7:b1:c0:5b:d4:82:67:55:7b:9c:ea:b3:
                    f6:ee:62:06:0c:7f:b6:a0:e8:f7:d8:1d:28:0e:f4:
                    72:b0:a8:7e:e5:94:54:80:71:e9:ec:07:ca:52:84:
                    b5:5c:e1:9d:df:bb:46:d1:91:47:0e:7a:b6:b6:92:
                    64:a6:48:b3:ec:d4:70:1c:27:20:94:8c:76:e2:24:
                    29:62:0a:15:55:96:38:11:5d:0e:f4:a6:00:30:09:
                    2d:a3:d8:6d:6c:0e:dd:79:15:a3:c5:6c:e4:1e:c6:
                    8e:22:55:65:0d:b6:a7:94:48:4b:08:31:cb:b9:6f:
                    00:12:39:18:58:92:50:fc:b2:20:30:57:5c:a0:a4:
                    b7:63:78:cb:53:1c:44:3a:d0:e2:5e:df:ea:8e:0c:
                    e1:3f:6f:36:b8:d4:b4:c3:3d:d9:e8:ec:13:25:10:
                    59:80:c6:d7:5f:fb:a1:85:bc:d5:d3:e7:4e:de:a8:
                    16:b9:7c:2d:ca:9b:d4:c9:ee:64:f5:ce:ac:d1:41:
                    02:0a:d9:12:8d:b2:9a:2c:20:1b:ed:6e:ba:70:f6:
                    00:c2:60:3c:80:45:41:e5:bf:0e:7a:ba:38:48:65:
                    ed:40:7f:48:2d:15:78:7b:c4:56:ac:f4:76:30:9c:
                    82:19:7b:d5:b3:d3:3e:dc:31:e0:40:43:29:47:f8:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A5:0F:18:BF:3F:AD:DA:A4:06:CE:DB:36:B0:3F:8A:E3:BD:A6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/445da2cb-06f2-3bac-8136-632fbe9dd773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl

            X509v3 Authority Key Identifier:
                keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7a:e5:fc:c8:39:ef:09:80:a4:dd:db:37:39:9e:68:5f:88:
         1a:55:ba:af:1c:78:51:ab:fa:34:82:92:6e:5c:6f:27:50:d2:
         e5:fb:ca:2c:1e:af:24:b2:e6:9d:28:a2:40:87:71:dc:d5:b2:
         37:79:96:5c:a0:4d:6f:09:ee:c1:fb:11:e7:e3:96:f9:4b:e3:
         ce:f2:e4:a2:ba:3b:54:0f:55:2f:c5:cd:ff:bb:cf:38:d3:b9:
         33:76:a2:26:0e:9c:86:9b:f8:cd:4d:4d:97:dc:35:c7:33:8a:
         8a:25:a9:62:9f:40:b7:6f:c8:18:64:e3:09:ff:39:62:c6:2b:
         6f:d8:f8:0d:18:11:0b:5b:3e:6d:e7:86:46:db:26:04:fa:4b:
         c7:2b:bb:94:4d:6b:23:c6:2f:85:5d:29:99:ac:2f:45:29:d7:
         54:d1:47:f4:82:44:83:fa:d9:34:38:98:0a:32:a4:42:82:53:
         37:7a:e0:7d:32:1c:e9:5b:b3:ed:90:60:1c:49:8d:1b:6c:28:
         50:92:7b:a6:6e:0d:d1:49:50:06:ca:86:d7:d8:ee:a0:71:b2:
         3d:cc:df:c2:69:e8:bc:aa:ed:f5:76:19:c2:7a:e0:fb:d1:53:
         67:07:38:1b:ba:62:30:f4:6f:92:c9:7b:13:31:7f:ab:b2:a2:
         eb:8a:eb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:56 2026 by rpki-client