Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb7806e4-eb22-3e9b-84e5-a09de17e9dd2.roa
File:                     bb7806e4-eb22-3e9b-84e5-a09de17e9dd2.roa (raw, json)
Hash identifier:          Nf3LLKIMMEJ6CMINsC+DitXjEUTkpI7eowCEaCrfr1A=
Subject key identifier:   B8:9E:E5:4A:AB:B0:B1:57:5D:E1:95:69:3A:16:D1:2C:7A:2F:80:68
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722B6B07A4237B37FC5800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb7806e4-eb22-3e9b-84e5-a09de17e9dd2.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     855
IP address blocks:        142.176.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2b:6b:07:a4:23:7b:37:fc:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=60f18072-1632-4a46-90cd-0a8b760c1190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:22:3b:0b:25:a1:61:76:58:45:4f:20:24:
                    9d:e6:35:d1:9b:e5:ae:86:b3:48:ce:27:52:50:aa:
                    61:90:78:7d:30:40:49:7b:39:97:9f:64:10:98:04:
                    b6:72:de:8b:d4:d4:54:ef:08:25:72:2f:c7:f2:32:
                    c7:bd:b9:aa:1d:ed:33:d9:04:92:f0:aa:c6:56:95:
                    31:91:7e:65:b5:70:4d:e4:89:d1:e3:c0:09:b4:83:
                    7e:ad:73:d2:66:2b:2b:78:03:ed:a0:c9:ae:91:e2:
                    a3:a4:df:39:7f:1a:07:38:41:52:00:3c:ea:cc:cf:
                    cf:2c:c5:e9:8f:18:87:21:77:6f:76:cc:46:ed:e6:
                    ee:35:db:4e:a3:f1:80:db:23:39:09:ae:ac:58:af:
                    2b:a8:4b:99:19:a2:42:19:b4:6b:70:67:3e:d2:ac:
                    bb:f3:23:da:30:b5:05:cd:05:2f:e5:e1:19:0f:8f:
                    29:34:2a:75:3c:91:c0:3a:c1:62:61:f6:bc:c7:5d:
                    85:25:8c:9b:f1:87:41:0f:ee:a7:5a:9d:f1:04:76:
                    f2:54:7a:2e:42:ab:8d:61:c1:4c:a7:e0:e1:b1:e4:
                    af:ac:a5:53:07:77:1d:40:39:70:b5:ad:bd:c8:31:
                    11:48:fc:1a:91:75:60:b7:2b:d0:99:0e:ba:41:91:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:E5:4A:AB:B0:B1:57:5D:E1:95:69:3A:16:D1:2C:7A:2F:80:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb7806e4-eb22-3e9b-84e5-a09de17e9dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:62:66:14:53:55:57:ab:03:4d:67:79:01:bd:e9:52:59:f4:
         65:a6:e4:52:bb:62:bd:cf:00:d1:39:4e:d3:31:d1:00:8e:cb:
         09:1e:31:2a:68:1b:20:a1:8a:4a:2b:a2:30:be:3a:4b:92:91:
         b7:cd:23:76:94:f2:3b:f9:42:6b:b8:34:38:90:41:1c:6d:54:
         a3:e6:8b:77:07:02:c1:8e:c3:b5:76:19:eb:15:37:a0:9b:ee:
         3a:85:6b:4a:67:af:88:c1:65:36:45:7c:24:14:e6:d5:92:a5:
         c2:5a:55:8b:f3:ef:6f:03:02:43:bc:94:ac:1d:64:0d:ec:3d:
         1b:f5:5d:2e:19:fc:11:50:3c:a5:67:5f:ae:22:10:4f:08:3c:
         3f:4d:d0:32:e4:57:62:71:21:fc:b0:d5:b4:60:5b:e1:29:6a:
         25:7e:00:88:d0:e8:3d:75:0b:ee:da:1e:6f:a0:1e:50:92:83:
         39:12:5a:f9:bb:0b:2e:a3:d7:7a:1c:74:64:0e:0a:48:4b:55:
         14:1c:5c:28:18:e8:5b:15:50:43:29:e0:63:0f:60:e4:44:31:
         4c:20:56:d0:92:de:72:18:b1:25:bc:70:10:3c:bb:b9:26:11:
         f8:41:e1:75:a4:a1:6e:42:81:75:7d:20:60:f5:94:6e:ab:68:
         49:9f:a3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:25:43 2026 by rpki-client