Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b8e5e7b-e7e2-3b0d-98f3-86bcd72c69e3.roa
File:                     9b8e5e7b-e7e2-3b0d-98f3-86bcd72c69e3.roa (raw, json)
Hash identifier:          j2pJpZScJGLl1pXrgjGovybFtBxIXIxXcD/aD7GdgO8=
Subject key identifier:   E4:5A:01:19:F3:BA:E4:DE:54:82:A1:F9:B4:9B:B9:23:62:A5:C6:54
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F3CE2B46998C3DE467DD32900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b8e5e7b-e7e2-3b0d-98f3-86bcd72c69e3.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        144.129.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b4:69:98:c3:de:46:7d:d3:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=512a5d31-d55f-4a72-a77c-8d0793fa5942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:77:1b:6c:ef:98:8d:84:ac:38:3e:4b:d5:46:
                    79:2c:f8:cb:e3:22:90:da:66:59:1f:80:fe:e0:6e:
                    2f:4f:d6:43:ad:fe:50:a1:2b:e1:42:a2:db:a7:ed:
                    c9:3f:e8:27:82:55:64:42:84:e9:d9:cf:dd:83:86:
                    b2:f0:73:26:f4:c7:ae:c9:95:ab:d1:5c:4d:b6:de:
                    1f:14:f6:5a:af:d4:c6:01:53:f2:ec:01:5c:47:d1:
                    e0:ee:f3:e1:93:38:4a:f7:e5:35:96:ce:e2:a7:0e:
                    89:03:56:65:88:b0:64:2d:f7:e5:93:f8:b6:31:fb:
                    b7:63:48:10:39:88:01:e3:1c:60:2c:96:6b:3d:12:
                    a2:27:8b:f8:82:20:cd:34:81:e7:b2:7d:0c:60:c9:
                    72:81:60:33:49:e7:81:c6:e9:c8:7f:eb:5d:c4:eb:
                    13:a6:72:0a:6b:13:b4:d4:c8:d2:1b:f3:bc:ec:b1:
                    63:73:9f:b8:78:3b:a2:72:1d:01:6e:03:3a:bd:bd:
                    01:6f:34:8d:24:c9:e8:4b:12:5e:5a:da:12:d1:98:
                    37:e4:a4:d6:72:e9:35:50:b9:32:f6:a9:a9:e1:5e:
                    1e:e3:b7:4f:ee:e0:89:50:10:c4:d4:59:62:59:07:
                    ee:8a:f1:b7:de:af:86:13:f1:11:c3:70:ed:58:1c:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5A:01:19:F3:BA:E4:DE:54:82:A1:F9:B4:9B:B9:23:62:A5:C6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b8e5e7b-e7e2-3b0d-98f3-86bcd72c69e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.129.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:fa:7a:83:d4:8e:38:b2:f1:a5:f7:c6:f6:da:01:1d:14:eb:
         f9:11:41:8a:33:b9:67:ca:fd:66:a3:9e:42:8f:6a:4f:45:f2:
         30:36:04:83:10:99:01:a4:a1:16:0f:a2:5d:37:74:eb:6f:30:
         c4:51:86:40:83:1e:1a:61:58:12:6a:6d:14:d3:f5:6d:d8:be:
         c6:63:b0:bd:75:2d:94:fa:34:8b:7f:72:bd:ad:d1:8e:02:bb:
         50:55:ab:aa:f6:58:7a:50:1c:6d:d5:6b:6b:53:6f:63:da:c4:
         46:19:08:b0:eb:24:ed:ce:42:9a:66:5d:6e:88:f5:fb:b7:e3:
         03:c1:d1:b2:87:83:f3:18:13:76:80:5b:f0:2d:9e:b8:f4:91:
         29:fa:d0:83:55:df:d6:39:00:3b:24:70:76:9f:a1:65:e3:68:
         0b:26:d7:93:7f:9c:e3:66:9d:c4:f8:27:75:8f:ee:5b:0f:92:
         40:cb:3c:c9:3a:95:f3:a5:0d:f1:0d:19:a4:e8:eb:fe:88:f4:
         2e:df:f2:1a:99:5c:87:47:48:05:14:ee:eb:1e:6e:b6:4b:9c:
         85:d6:ba:18:b9:c1:f0:7c:62:d5:65:6b:a5:12:74:d2:b0:a4:
         f3:fe:b8:37:7a:c0:35:35:15:05:c4:ba:3b:aa:c6:22:01:d5:
         45:02:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:18 2026 by rpki-client