Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa
File:                     c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa (raw, json)
Hash identifier:          toVaxR7zsys4nAfN19TSu5SfBtQ+L8UYFSMQxurEgGU=
Subject key identifier:   A6:B9:F2:45:4C:74:96:63:A5:E5:B8:E1:0C:AF:7B:8B:8C:58:47:4B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06723EA77D1C9C8F8C51F100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     855
IP address blocks:        142.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:3e:a7:7d:1c:9c:8f:8c:51:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=39baa284-e993-41b0-9e77-803e9e365df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:bd:98:0f:87:04:cf:f8:b6:38:a5:b7:1f:
                    02:75:09:81:f3:f8:65:16:79:79:bd:8d:fb:ce:f4:
                    e4:70:7f:22:b0:02:9d:92:4e:f2:3b:b4:3e:67:5e:
                    1f:c7:90:ad:48:d8:fa:16:a1:8a:c3:0e:cc:56:fe:
                    30:9d:a2:4d:fc:75:1b:ff:1f:71:7e:d4:cd:c2:8e:
                    29:cb:a9:21:5a:d3:e8:89:c0:69:c8:8b:a0:4b:ed:
                    b1:59:38:90:ea:56:58:e7:59:e4:88:8a:ed:97:0c:
                    22:cc:de:02:55:a7:9c:b1:3f:60:db:01:9e:88:4d:
                    d7:f6:1c:aa:e3:20:64:7e:2b:bf:79:64:50:eb:29:
                    13:0d:f6:a3:33:02:78:c3:c0:b1:36:c7:01:08:24:
                    d2:d8:9f:5f:d7:24:20:b9:3b:ca:11:77:89:e9:b9:
                    e5:02:8a:40:4b:d4:3c:3c:e1:ea:43:4f:60:3b:4a:
                    b3:2e:a9:a8:b8:67:e6:18:92:df:67:bc:bf:52:1b:
                    9d:69:3a:1b:0d:cf:1a:d5:e9:b7:d0:6f:e3:ec:bc:
                    80:7d:94:ab:90:cd:52:42:d1:5f:42:25:18:b3:7a:
                    56:c1:e2:eb:42:73:f2:4a:d6:f4:7f:2c:2a:06:c3:
                    dc:c4:37:b2:50:62:33:d8:4b:1d:b6:5b:02:a5:d1:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B9:F2:45:4C:74:96:63:A5:E5:B8:E1:0C:AF:7B:8B:8C:58:47:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:f9:5e:ce:87:ae:f9:d0:95:8a:3a:c4:57:8b:c6:27:71:
         1c:ce:e7:50:3d:52:4a:c2:4f:be:b4:2a:61:76:53:96:69:cd:
         36:ec:01:1b:84:54:9e:b8:e5:17:7a:8b:60:9e:fb:50:18:f6:
         d3:c8:ee:44:a2:4f:b7:58:3d:d4:35:a1:8b:33:06:5d:6e:d7:
         fb:59:d7:41:0f:f3:7c:33:9e:c2:38:88:ac:06:0b:e8:d7:50:
         f6:c1:f0:5a:a3:42:19:7c:45:dc:5d:e5:9c:60:5c:05:00:ce:
         d9:fd:40:76:05:ed:00:c8:53:48:0c:47:31:8e:83:e9:c3:e2:
         55:18:5e:1d:c4:41:f4:56:79:0c:b3:aa:bf:1a:2f:dc:e3:15:
         7c:47:e1:72:8b:66:28:87:24:0b:af:dd:48:a8:f6:a3:b9:4a:
         12:4d:9b:4e:eb:d4:c7:9a:8c:b4:91:92:fe:91:4d:7c:23:39:
         07:18:e8:97:63:ef:02:2d:98:13:43:15:48:93:58:77:60:78:
         34:64:3b:3e:11:72:ed:2c:d4:9d:ca:d0:c7:3e:47:4f:1d:97:
         af:12:b7:a5:d5:39:f8:7c:3f:c1:44:c4:e6:93:eb:cc:56:1e:
         fa:d7:ed:e4:3b:4d:ca:c5:e4:6a:82:c5:9d:0e:9d:f0:02:96:
         c2:f0:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:54:11 2026 by rpki-client