Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d91e554b-742e-37b2-9707-9fcb0a7fb508.roa
File:                     d91e554b-742e-37b2-9707-9fcb0a7fb508.roa (raw, json)
Hash identifier:          /ny2AzS86Iwvselm1zA0m0SkQNAEni4VjlC5U4Osqtc=
Subject key identifier:   02:91:BB:19:FD:C3:CD:9B:38:56:61:56:2C:A9:64:9F:6A:2D:70:A6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584EA44513589F78CC45C9461934
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d91e554b-742e-37b2-9707-9fcb0a7fb508.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     577
IP address blocks:        142.134.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:13:58:9f:78:cc:45:c9:46:19:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=2e791600-6961-4603-bd97-79a47697f584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:02:5f:2c:4f:c0:ad:36:3a:86:4b:98:a5:
                    5f:06:f3:89:6d:02:c1:99:1e:fa:64:aa:46:28:2d:
                    98:a3:be:d5:58:ae:15:17:c7:dc:81:7c:69:17:9b:
                    c4:c7:c5:25:79:61:09:aa:54:bd:51:35:e2:37:36:
                    a0:15:e5:86:a5:ca:41:74:c4:79:17:eb:8f:a1:6c:
                    f0:db:52:4c:5a:fa:cc:cc:34:43:e8:7b:37:5c:ab:
                    27:c5:f1:87:ee:a0:60:16:de:d2:a3:c2:d5:16:1c:
                    08:c1:39:5b:19:91:d7:ea:bc:39:d3:9e:a6:2b:4d:
                    9d:12:41:2e:f1:af:3b:00:e0:7a:a9:a8:ed:28:10:
                    bb:39:92:5e:73:ef:b7:c6:71:f6:73:14:62:d4:47:
                    35:23:f6:f0:78:d9:8b:a3:3f:dc:e9:af:2e:58:09:
                    8a:f7:ee:1a:86:35:93:df:7e:0a:8a:94:67:77:a9:
                    55:d2:58:af:08:9a:c8:99:42:c9:a4:73:a2:91:9e:
                    89:7f:d9:d3:8b:d6:84:99:ca:15:77:4d:42:f6:90:
                    61:4e:55:c4:69:46:48:2e:20:ef:bc:17:51:41:b6:
                    4f:b1:f4:82:d5:7f:e7:ff:b1:fe:bb:30:1b:5f:ac:
                    7c:fb:ed:24:c7:34:94:07:3c:de:40:7b:2d:bc:74:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:91:BB:19:FD:C3:CD:9B:38:56:61:56:2C:A9:64:9F:6A:2D:70:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d91e554b-742e-37b2-9707-9fcb0a7fb508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:77:ab:ba:c1:f9:ae:4c:85:fe:8a:15:38:bb:fb:88:7e:da:
         cc:27:38:39:c1:e2:d4:af:70:51:bc:de:a1:df:3e:6c:79:96:
         87:12:d2:d6:ba:3d:5a:c0:59:18:cd:cf:8e:c4:25:c1:0d:f7:
         8e:1c:bd:a1:e3:a9:68:76:1d:75:1f:ea:e5:6b:b9:3b:87:ae:
         82:ba:b0:54:65:ca:ee:44:93:b5:6f:c4:c2:08:88:57:76:f5:
         c4:63:34:7c:18:e5:89:e8:54:cd:ea:4a:b7:6f:c1:3c:23:47:
         91:91:12:2a:b7:72:62:b5:fe:f5:5f:1c:22:b6:4a:05:69:bd:
         62:40:b9:ce:e3:7f:eb:fc:ca:4b:f6:a4:ca:ab:e4:07:6f:c1:
         de:19:4a:c5:dd:93:e2:89:62:00:54:b9:37:d6:fd:ca:67:71:
         87:10:a0:c0:e2:48:a7:01:23:ac:02:f4:48:2a:d0:b8:2f:0d:
         3d:b4:bf:c9:47:cf:c7:97:fb:51:1b:6c:52:2d:ed:0d:3d:fc:
         c6:94:54:78:7f:dd:eb:86:b8:53:76:cf:5c:93:3c:8f:41:50:
         aa:41:ae:98:cb:2c:9f:5d:c3:e3:ce:1f:4b:7f:53:b5:6f:88:
         2d:64:34:3b:66:4c:88:15:dd:f7:d3:8a:99:58:06:89:bc:f6:
         41:8e:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:24:25 2026 by rpki-client