Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa
File:                     8601f692-9955-3e20-8a52-638414938344.roa (raw, json)
Hash identifier:          J4CDcg7zLo05N7Mfs881r94+u9ibGNARk9xgDeEzCVo=
Subject key identifier:   88:69:CD:6B:C2:9F:95:07:47:44:99:83:FA:B1:80:3E:76:11:D1:A3
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584ED861E7C88D66C3606E957760
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     55002
IP address blocks:        142.0.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:e7:c8:8d:66:c3:60:6e:95:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=32c47c19-9dbd-4a68-93a3-4294033716b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:21:4f:50:91:c6:aa:69:07:03:ec:ec:e4:
                    2d:df:d1:91:af:bc:37:e9:f8:e7:62:a9:de:35:c1:
                    f8:58:41:a3:73:e9:37:84:4c:f3:f7:6f:5d:c0:92:
                    2a:f9:05:fe:45:60:78:67:2f:40:ee:db:1a:d9:b7:
                    5c:36:9b:19:5a:76:b5:da:57:52:84:4c:5c:25:91:
                    33:ab:02:62:3c:53:97:c9:cd:ca:79:6c:53:c3:06:
                    50:f9:38:6e:f4:28:31:f2:c1:42:05:f8:09:81:93:
                    10:dd:e9:9d:09:a4:ef:06:ca:b1:e6:63:c9:4b:95:
                    2f:2a:c4:59:31:63:35:b1:97:15:86:cb:f8:35:ba:
                    aa:f4:35:c9:1a:e4:65:a8:99:23:27:89:97:2d:9c:
                    37:ab:98:95:4c:31:2f:ec:9d:d6:21:5f:dc:39:5e:
                    79:1b:6c:b8:49:c0:d9:a0:29:23:1c:dd:0c:70:30:
                    b3:e4:7b:24:d0:0d:c9:d0:85:bc:86:2f:27:eb:b9:
                    d9:39:d1:2c:71:73:1f:2b:36:4d:78:69:43:24:91:
                    92:b3:f1:a4:57:c0:86:99:1f:a7:65:87:62:5b:d6:
                    52:4a:f6:08:56:f5:84:50:b7:76:cf:b4:b8:c6:39:
                    11:97:af:d0:8a:fe:e5:b7:65:da:06:2e:94:3e:6f:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:69:CD:6B:C2:9F:95:07:47:44:99:83:FA:B1:80:3E:76:11:D1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:32:05:2b:14:d9:7b:a6:3d:29:f5:19:bb:21:56:27:27:d8:
         f4:30:6b:34:7d:00:82:0d:2b:e1:87:0c:d5:18:66:89:32:fa:
         ff:24:d6:81:77:b9:d4:80:d7:19:bb:de:dd:ce:1f:76:86:3f:
         26:58:d5:5b:a2:45:08:ba:ee:8d:e3:25:38:58:74:44:ef:ea:
         32:0f:fe:c0:6d:36:b2:60:90:a6:e8:da:a8:c2:e1:f3:e3:3c:
         97:9c:b7:15:1d:0f:7c:89:37:6f:60:d8:24:ec:e4:9e:22:67:
         d9:36:e9:b2:10:b0:59:e1:cd:96:bb:0f:f7:ed:a2:59:10:10:
         cf:f0:78:28:c8:dd:31:87:4e:42:37:c7:39:eb:7e:89:7e:ff:
         74:f1:5c:a1:39:5d:81:26:57:88:fc:3b:1b:63:aa:e4:b1:1b:
         d6:42:d7:d3:76:a3:32:19:26:19:1f:a8:d8:48:34:3e:55:5c:
         9f:76:05:64:c0:08:0b:7d:d1:2f:6f:ba:86:4c:b6:3b:7c:6e:
         43:b7:be:96:a0:75:e5:68:f3:38:18:b7:9a:50:bc:01:54:b6:
         30:01:b6:ce:7f:b9:e5:85:01:d2:14:a9:4e:7f:8f:a9:de:75:
         de:8a:00:45:6b:ad:2c:5e:eb:a5:ef:fd:7a:93:89:67:b1:32:
         d1:9b:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:01:28 2026 by rpki-client