Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86fce722-1195-3dd1-a539-d8a16d741530.roa
File:                     86fce722-1195-3dd1-a539-d8a16d741530.roa (raw, json)
Hash identifier:          UhcZ5GlUYQmFu5vTo1lIP2pK1FpbgPNMbENnrAxPDWw=
Subject key identifier:   AD:ED:E7:6F:60:1A:5C:C6:F0:7A:35:4B:0E:E5:79:F6:8C:94:BF:D3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F4987D832AC5AABCAF1716500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86fce722-1195-3dd1-a539-d8a16d741530.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     577
IP address blocks:        142.134.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:d8:32:ac:5a:ab:ca:f1:71:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=43fa208d-6616-4306-b8a5-10885538c759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b9:ba:84:82:f3:61:2e:3e:a6:17:d6:a9:20:
                    3f:c1:12:1a:7a:aa:13:27:64:f4:ef:c4:b9:2b:e2:
                    72:56:4d:26:6e:1b:79:9f:74:73:ca:c2:f1:5a:aa:
                    6d:d6:3f:1c:e3:23:94:a9:29:4a:71:93:bd:ec:fa:
                    0d:be:4e:c3:8b:c6:e9:78:cb:b0:fd:f8:88:dc:4d:
                    a2:80:cb:c4:3b:51:14:65:e4:27:a5:1f:24:5c:76:
                    fb:e5:87:b6:30:46:0a:37:b2:6a:9d:97:0a:0d:25:
                    4d:75:69:bf:92:8c:89:ae:39:f7:65:c9:33:45:f2:
                    eb:1f:a9:33:94:49:f7:ee:b0:72:b4:fd:d0:f6:e4:
                    cb:e4:e8:13:24:ab:c8:03:fe:de:87:6f:e0:99:5b:
                    50:9a:c0:85:4d:fb:a3:ed:c5:a6:79:20:2b:39:91:
                    2e:61:eb:5a:d2:1f:2b:a8:26:74:a3:b8:b2:5e:f1:
                    d0:d6:47:6b:8d:71:86:4d:7d:66:34:4e:0c:3f:af:
                    f7:a4:6d:b3:a8:05:d2:dc:3f:6f:cf:16:60:48:59:
                    2e:e1:04:75:be:94:1d:39:49:88:a6:b5:2a:bd:91:
                    db:aa:74:87:b3:08:c0:f4:3e:5a:f7:be:55:05:32:
                    1b:d5:b3:f4:92:6d:02:f1:2f:77:00:4b:5d:5d:6e:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:ED:E7:6F:60:1A:5C:C6:F0:7A:35:4B:0E:E5:79:F6:8C:94:BF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86fce722-1195-3dd1-a539-d8a16d741530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c6:90:07:ef:61:1f:ed:c6:a1:d1:53:09:af:1b:ec:b2:b8:
         0e:79:9b:2c:26:3e:f7:13:b6:bb:6c:c9:31:3b:a3:75:1c:c0:
         6a:1f:68:aa:73:67:bd:5c:99:f1:86:0a:96:e5:e6:9b:88:ce:
         5c:47:e2:4c:9a:3a:1c:bf:da:06:d3:a6:df:eb:b3:2a:ab:88:
         db:e6:56:72:67:ce:78:8f:e2:56:41:84:90:44:b7:cc:ca:73:
         af:96:cc:3f:ff:4d:3e:8c:b2:b2:aa:7a:c2:f6:60:96:2e:23:
         41:93:b2:8f:f7:2c:fe:f3:a8:3e:4d:43:bb:0c:f0:65:db:b8:
         86:3e:ba:8c:59:96:86:74:b5:3b:c6:7e:6b:a1:52:07:26:7f:
         b8:81:71:90:c0:c4:23:8e:50:bf:8b:83:d5:3f:50:67:6d:ca:
         5a:89:fe:f4:50:ba:9b:b7:a4:19:a3:d1:4d:37:50:cb:0b:91:
         bd:b2:b2:69:0e:47:2f:b6:24:7b:b1:22:e4:de:c6:be:6a:08:
         e6:af:7d:07:27:d0:f2:f5:61:bd:31:63:20:8f:4a:4b:bc:56:
         ec:50:ed:00:36:6f:26:b8:fd:fd:31:4b:61:99:22:76:cf:5d:
         2c:2e:1d:45:c4:ad:22:49:af:4c:fc:a3:b4:a2:5e:8a:7b:ed:
         c7:f4:b1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:43:51 2026 by rpki-client