Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083/9a2dc494-0043-3df2-b0c3-c2ce0ebab8b8.roa
File:                     9a2dc494-0043-3df2-b0c3-c2ce0ebab8b8.roa (raw, json)
Hash identifier:          gQ4SvS0J0Li23AufA+VcJq3vxCQuU9wa2A67gr/VfWs=
Subject key identifier:   B2:D2:57:60:42:CD:CD:07:D2:45:52:D9:D9:7D:EE:A3:E1:6F:6B:03
Certificate issuer:       /CN=b04b9717-d283-4d66-a57b-733579400083
Certificate serial:       010D0C9F4328584F58F36CA506BD6BE625B438C0
Authority key identifier: E7:11:42:66:BB:20:EA:71:7A:29:8D:6E:7B:EF:C3:C1:4C:2B:3D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083/9a2dc494-0043-3df2-b0c3-c2ce0ebab8b8.roa
Signing time:             Wed 30 Sep 2026 14:17:03 +0000
ROA not before:           Wed 30 Sep 2026 14:17:03 +0000
ROA not after:            Tue 29 Dec 2026 15:17:03 +0000
asID:                     2914
IP address blocks:        142.249.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083/b04b9717-d283-4d66-a57b-733579400083.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083/b04b9717-d283-4d66-a57b-733579400083.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:f3:6c:a5:06:bd:6b:e6:25:b4:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04b9717-d283-4d66-a57b-733579400083
        Validity
            Not Before: Sep 30 14:17:03 2026 GMT
            Not After : Dec 29 15:17:03 2026 GMT
        Subject: CN=c9a737a5-3990-4054-8188-f1f78ee2b788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:26:3e:7a:ef:c6:14:f5:7f:ec:4c:52:71:73:
                    b9:ed:e7:b3:af:11:cf:d3:3a:f1:8c:9f:49:88:94:
                    65:2a:7b:99:48:85:5b:ff:4e:79:4d:16:68:b4:3d:
                    6f:59:41:a0:70:17:e3:d1:0d:34:3a:8b:f1:06:0f:
                    60:a9:bb:92:4b:ca:0a:8c:3e:08:d9:87:81:ab:1e:
                    8b:4f:bb:d5:44:e7:74:b4:70:2b:17:a1:71:37:fd:
                    b1:6f:59:9e:f3:82:be:56:72:93:ae:7a:6e:7b:86:
                    19:3d:49:c9:3a:f6:c0:ef:17:bb:d4:8d:92:94:54:
                    30:34:2e:9a:5f:64:2a:e5:0b:98:c0:79:cf:e3:cc:
                    3c:25:d8:af:73:95:00:52:12:f1:50:a2:2f:1f:c3:
                    f9:7e:74:d6:6a:48:67:4b:22:27:d3:ee:e5:2b:5b:
                    23:de:c5:4d:2f:aa:f9:c3:08:e8:fc:dc:59:3a:4e:
                    5b:91:92:0a:f1:2f:15:c1:22:51:7e:c2:e8:b9:9b:
                    05:23:b1:5f:cf:78:1a:fc:8d:76:2a:aa:fe:5a:cf:
                    ff:1c:38:29:2e:47:29:e2:21:ef:c9:48:23:7d:51:
                    10:ca:01:38:d4:e3:09:aa:79:d0:fb:71:45:5d:5b:
                    d4:45:86:de:c2:28:3e:42:24:31:77:b5:2e:1e:a5:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D2:57:60:42:CD:CD:07:D2:45:52:D9:D9:7D:EE:A3:E1:6F:6B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083/9a2dc494-0043-3df2-b0c3-c2ce0ebab8b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083/b04b9717-d283-4d66-a57b-733579400083.crl

            X509v3 Authority Key Identifier:
                keyid:E7:11:42:66:BB:20:EA:71:7A:29:8D:6E:7B:EF:C3:C1:4C:2B:3D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b04b9717-d283-4d66-a57b-733579400083.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:87:d2:6d:3b:f1:22:6e:a3:36:1d:a8:17:02:02:17:ae:3a:
         37:74:01:00:45:b2:ff:8e:a8:c3:99:4c:eb:bf:7d:51:69:a0:
         53:8a:db:55:ab:a9:7b:41:41:6d:5a:cf:30:0e:6c:9b:5a:9f:
         6c:00:a8:a7:65:6d:f3:6c:09:e3:62:b6:ea:8d:03:bf:d6:8e:
         d7:9a:2b:3f:e5:03:02:e3:b7:20:d6:85:af:85:e3:c1:cc:3b:
         9d:25:aa:de:45:c1:9c:e5:d2:7a:7d:9d:11:55:84:fa:bb:e2:
         ae:56:ef:8b:a4:42:ec:46:e3:2d:44:52:51:20:b8:29:8e:e2:
         9f:72:4e:30:47:32:06:95:d7:8d:42:4e:30:f8:24:eb:fe:86:
         4c:e4:8d:6d:76:6a:8e:72:ac:66:51:11:1a:49:99:d8:e1:03:
         51:f8:d8:cb:20:65:e2:84:00:35:7d:e2:75:20:73:eb:99:78:
         36:e8:e4:da:7a:b3:98:9a:ee:79:23:af:4c:37:ba:3d:ee:2c:
         48:b7:a1:d3:01:51:20:4d:5f:47:ef:97:8f:76:b9:00:42:f5:
         1f:11:79:e3:d6:b3:63:1d:1e:78:97:c0:11:97:38:0f:3a:fa:
         56:3b:a0:0a:30:e7:7e:73:96:95:28:84:a3:be:e2:6d:0b:7e:
         20:73:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:58:44 2026 by rpki-client