Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/9bf274ce-2c9e-309c-a931-39f8f234c3e1.roa
File:                     9bf274ce-2c9e-309c-a931-39f8f234c3e1.roa (raw, json)
Hash identifier:          Gd75I6Xd0mVz4E8WbvLnQkJAHaSORw9ZudH47jbgHMk=
Subject key identifier:   70:5E:E0:5B:C8:B5:17:2B:C8:C7:E7:9A:9C:0E:31:FB:57:D3:41:59
Certificate issuer:       /CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
Certificate serial:       010D0C9F4328584EA788D1CDCCA324E2EA31A8C0
Authority key identifier: F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/9bf274ce-2c9e-309c-a931-39f8f234c3e1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401307
IP address blocks:        142.54.8.0/22 maxlen: 23
                          142.54.8.0/23 maxlen: 23
                          142.54.10.0/23 maxlen: 23
                          142.54.12.0/22 maxlen: 23
                          142.54.12.0/23 maxlen: 23
                          142.54.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d1:cd:cc:a3:24:e2:ea:31:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=07a6e21f-5aac-4eb2-a505-df190f6b2cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8c:1c:1d:94:e7:40:4f:45:64:6c:87:b4:32:
                    01:32:f7:10:4e:e9:30:e4:b7:f7:8e:68:f3:c4:37:
                    22:bc:e2:e3:10:8d:3d:e2:0e:90:21:f5:76:d9:60:
                    8f:bb:a8:33:8d:24:68:30:f2:42:d1:ca:98:32:c0:
                    fd:6e:53:b9:48:13:c0:04:8c:33:c2:84:1d:ad:44:
                    a3:da:b8:96:c6:e2:e3:a1:ac:ea:db:66:de:a0:12:
                    47:0e:60:77:2b:f8:e8:3b:2e:8f:c2:7e:f8:f8:8b:
                    f6:64:d3:fc:92:ed:1c:f9:0c:3b:fd:ad:17:d6:d5:
                    b8:1c:d3:16:f2:6d:d2:9b:c6:02:d3:cd:76:60:81:
                    80:32:39:9e:1f:ba:a0:8b:ca:a9:7c:8d:b2:23:d2:
                    4e:63:bc:42:66:2c:4c:6c:fe:15:0b:12:25:f0:fc:
                    37:48:6f:4c:e8:48:cb:8a:e4:18:74:6c:a1:40:8f:
                    eb:d9:2f:91:fa:f7:b9:60:20:41:19:c2:dc:fa:9c:
                    dc:70:df:38:4b:ae:5e:97:64:ed:8f:8b:0a:f2:10:
                    6b:15:11:6d:98:fb:1d:84:f4:79:dd:d1:2e:12:82:
                    91:11:a3:24:cc:06:36:dd:65:38:2a:08:72:43:90:
                    64:d9:e0:b7:ff:6e:4c:a6:f3:ba:92:d4:9e:9f:50:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5E:E0:5B:C8:B5:17:2B:C8:C7:E7:9A:9C:0E:31:FB:57:D3:41:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/9bf274ce-2c9e-309c-a931-39f8f234c3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl

            X509v3 Authority Key Identifier:
                keyid:F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:22:8e:75:ca:47:db:09:fc:0e:69:78:36:e5:ce:92:17:
         05:72:a0:93:f1:df:0e:9b:1a:5b:09:6e:47:da:33:a7:d1:9b:
         d5:d4:8f:ec:c3:2d:9c:86:a2:5d:2b:3c:af:7c:f9:54:e3:ec:
         1a:b9:80:24:c8:c8:26:14:f2:6a:94:7e:92:b3:95:dc:42:5d:
         2d:7f:5b:4b:78:7a:2f:f4:f5:0f:68:b2:ac:9b:75:7c:bc:ad:
         9b:58:74:a9:0e:ce:4d:fe:10:35:d9:d7:4b:b3:be:68:f2:88:
         66:94:5a:7e:56:45:d4:a1:85:9b:7c:0a:28:ec:70:73:7a:9e:
         cd:6f:71:fc:4a:72:2e:c9:f0:26:60:83:b7:70:e6:f2:9f:a6:
         fc:a1:27:a3:78:33:95:d0:60:0e:c6:bf:fa:f8:23:8b:24:c1:
         43:5c:28:f6:19:a2:12:20:5e:a4:b0:07:fc:cb:d4:92:85:fc:
         f7:04:61:54:b3:58:51:72:86:b1:b2:0b:c8:d9:71:0f:f7:f5:
         58:8c:46:84:f2:71:09:fe:d7:b1:da:0d:ee:4d:2f:7a:35:6a:
         d9:e3:a0:91:bb:47:df:72:66:6d:f6:05:37:cc:42:3f:b7:9c:
         c4:d0:09:ca:02:b1:86:95:7a:28:d5:e3:b9:95:e1:b7:80:9e:
         65:ba:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:02 2026 by rpki-client