Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84a0a26c-2b83-3cf6-9da9-6f6403367f8a.roa
File:                     84a0a26c-2b83-3cf6-9da9-6f6403367f8a.roa (raw, json)
Hash identifier:          SBo7vQ7n7ngEvX3wp919XGC1E9u57TaDdDymQ21rWZ4=
Subject key identifier:   4F:85:C9:A4:6D:69:2E:CE:9A:30:42:58:7A:02:84:FC:49:ED:AC:A9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAA72FA580579903FF6FAC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84a0a26c-2b83-3cf6-9da9-6f6403367f8a.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     855
IP address blocks:        142.134.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a7:2f:a5:80:57:99:03:ff:6f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=cbe95f44-40a8-4389-be65-5b63c79fbd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:2e:d9:bc:ab:6c:a5:e1:01:37:d0:ae:5c:
                    d3:7e:62:80:bd:70:a7:ab:1a:ad:ca:b0:00:96:2c:
                    92:5a:88:30:04:ff:ae:8f:7e:ad:4a:93:57:81:72:
                    8f:6a:19:1d:59:7a:30:ed:6c:c2:58:20:83:33:c9:
                    13:d7:2d:5a:52:16:4b:90:96:4d:27:96:6a:91:f6:
                    8b:66:af:44:fc:7c:de:a3:7e:89:73:c4:23:8e:f3:
                    69:f6:33:a3:bd:84:86:cd:29:24:bd:e4:98:68:78:
                    80:0f:8a:03:26:98:d3:82:0d:f9:42:21:05:90:fa:
                    d1:c6:70:5a:e9:99:60:66:04:a0:40:59:b0:9c:67:
                    b4:aa:81:8d:cb:f1:af:b5:33:f7:88:e9:ff:f8:49:
                    c9:b0:c5:62:7e:8a:7c:3e:62:eb:d3:fb:bd:5e:61:
                    b2:50:43:66:5c:20:b4:50:6a:5a:bf:fd:ba:2f:8d:
                    35:a7:96:4a:4b:d9:2d:9c:8d:33:6b:2f:0f:b5:c0:
                    6a:92:2c:fd:c0:d2:a7:af:5b:a4:78:02:d8:92:45:
                    46:9b:de:15:52:9b:9d:60:9d:c8:f7:67:59:29:18:
                    0a:a1:ff:7f:4c:50:b5:ec:c7:46:a7:a6:74:9a:c0:
                    49:6c:82:17:41:6b:ac:1a:c1:b6:c6:1a:34:c5:c3:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:C9:A4:6D:69:2E:CE:9A:30:42:58:7A:02:84:FC:49:ED:AC:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84a0a26c-2b83-3cf6-9da9-6f6403367f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:d2:cd:17:fa:6b:a4:49:31:fc:ab:f9:49:b4:ce:1e:67:
         d6:4b:4b:98:85:c2:68:e0:8c:91:8d:70:ec:49:5b:11:b3:eb:
         5b:bd:38:ab:7d:f5:f6:79:44:8d:7c:f5:18:a7:79:5c:fe:27:
         94:81:d8:f8:bf:65:e7:3e:79:46:fa:4c:02:32:1b:52:a7:3c:
         97:36:b8:10:32:f6:9b:81:5d:c6:c7:8b:c3:81:b0:b1:36:b5:
         56:7a:79:2b:d9:10:a5:61:4b:ca:4f:ab:c8:34:8d:50:05:cf:
         33:d2:c9:d9:87:59:01:68:f7:6e:53:94:66:ed:f6:4d:99:88:
         d3:9c:24:65:23:38:08:e8:f8:c5:c1:5f:b4:c2:4b:bf:b6:ac:
         1c:be:b0:c3:6f:7f:07:8e:1b:c3:8a:58:86:5f:02:8b:26:6a:
         2d:04:e1:59:63:b0:4f:55:b7:73:4f:0b:5e:d3:dd:e1:11:fc:
         ca:a2:67:6d:a1:da:c2:eb:51:9a:b5:eb:54:27:13:ca:7f:a1:
         de:b0:01:7b:f8:ea:c5:99:e5:f8:d4:57:db:c3:aa:28:df:4b:
         ec:fc:35:2f:5d:62:3a:b1:0c:07:80:d2:0b:c5:79:37:bf:46:
         22:89:9a:11:73:21:03:2e:9a:3e:28:1d:75:ca:b6:36:20:28:
         6c:3e:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:29:46 2026 by rpki-client