Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8fa85da-78b5-371a-86b0-4146356d0a94.roa
File:                     e8fa85da-78b5-371a-86b0-4146356d0a94.roa (raw, json)
Hash identifier:          NaOm3zc3gVh05+tspNhrIdY61q3LkWdBv6XVFwgUcAs=
Subject key identifier:   CB:D9:5A:6A:91:D1:44:9F:11:08:18:CF:7F:84:7A:47:9B:0A:3C:10
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAAA046FFBA6A400270F90
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8fa85da-78b5-371a-86b0-4146356d0a94.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        142.170.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:aa:04:6f:fb:a6:a4:00:27:0f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e225cefd-41ce-4adf-8539-00741edd55af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:03:c8:4e:b6:6f:94:d0:13:cf:c0:fb:2a:32:
                    4e:a5:5e:42:39:44:77:46:89:3c:19:d9:46:bc:7c:
                    4a:e6:cf:12:bd:17:a2:d7:ee:fa:91:78:c0:84:1b:
                    03:d5:bb:e3:5b:a7:74:bb:68:41:b1:7b:cb:95:9a:
                    a0:30:75:a5:db:7d:b9:9d:67:3f:59:af:a7:91:ca:
                    62:2a:35:46:d9:7c:dd:f7:02:0f:3c:e2:24:6b:8b:
                    85:12:53:0e:ad:21:52:00:30:c5:d7:ed:43:37:50:
                    2c:70:7a:30:88:60:ed:e9:1b:d8:8c:72:de:56:35:
                    76:04:a3:a3:a1:39:7a:88:85:68:7b:ab:bc:7d:9f:
                    2c:c3:06:5b:69:97:99:5b:9e:85:72:0a:5d:a7:1b:
                    ef:3e:66:5e:27:59:b0:63:45:ee:2e:51:36:36:d4:
                    db:f4:f1:df:bd:49:b2:67:bb:00:d1:2f:18:5a:33:
                    24:88:b8:50:19:2a:55:92:eb:bc:f6:ef:19:d5:4f:
                    f7:8a:72:0f:8f:0d:e1:44:73:e1:f4:cd:10:cd:69:
                    7e:52:87:bb:23:68:52:55:06:c9:52:f3:92:f1:6f:
                    72:08:2d:71:78:ed:66:e8:c3:f2:3b:9d:0d:f9:40:
                    b0:7a:12:04:e9:47:46:07:c6:f4:65:4d:95:3c:ec:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:5A:6A:91:D1:44:9F:11:08:18:CF:7F:84:7A:47:9B:0A:3C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8fa85da-78b5-371a-86b0-4146356d0a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:54:a9:09:b4:27:dd:78:fa:80:5a:9f:b1:b9:3a:dd:45:
         fe:e4:fa:cb:37:1f:37:52:92:84:55:ba:fa:66:2a:a2:9b:47:
         22:ce:43:3c:96:b8:b9:76:48:41:71:03:71:5b:bd:93:bd:a6:
         f1:a2:1f:15:82:d4:e7:35:7e:33:c6:11:8a:e8:c7:76:46:23:
         04:e0:9f:4c:9f:6e:cd:32:8d:ef:6e:a0:e4:fe:7e:10:22:7f:
         d6:c4:df:7c:23:93:21:fa:27:60:47:9b:06:7f:b0:2e:a5:ae:
         d1:5b:97:ad:25:72:e2:27:69:b4:b8:df:c5:c4:bb:77:4e:51:
         cf:ac:0a:2f:79:46:71:3a:96:ed:6b:2c:b8:2f:43:94:2b:0a:
         de:4d:7b:95:18:8e:43:fa:c9:fb:7c:c8:1f:74:d6:ff:89:89:
         d9:16:96:80:bb:4a:41:7d:f2:fb:a6:c5:c6:a0:f0:fe:af:d8:
         cf:b1:80:8a:b1:64:90:8a:e7:06:28:8c:ef:1f:5e:8d:5c:bb:
         3c:09:b4:d1:b5:26:a8:ac:e5:b0:58:41:53:4f:17:06:23:c3:
         a7:1f:77:8b:d3:f2:cf:fc:6e:a4:33:7b:41:5c:8a:86:cc:51:
         ca:e6:4d:f6:74:e8:b8:12:e4:25:1f:b1:43:6c:8d:d8:cf:53:
         c8:2f:dd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:18 2026 by rpki-client