Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa
File:                     641289ff-4442-3d1e-9fea-b77b6846946e.roa (raw, json)
Hash identifier:          2Mqf2W8wayNGgV1EqZGk993Q0CHbVPJ2Uq7JZroBa/Y=
Subject key identifier:   5D:2F:A5:68:7B:2B:D4:51:E0:6D:3B:69:C0:60:8D:6F:AF:A4:50:18
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584EA5AA7820FA85B2A018FB9B80
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     8075
IP address blocks:        142.0.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:78:20:fa:85:b2:a0:18:fb:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=bccc2058-3f9b-4142-9e7d-ab524a03ab52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:1c:b1:ce:33:4b:8e:5d:74:1c:03:2a:10:
                    cf:65:c8:48:7b:39:cf:fd:15:21:b8:3e:86:55:3e:
                    96:d3:9f:44:84:f8:d3:b4:4e:ea:11:69:bd:32:af:
                    d1:d5:0d:e4:2e:65:a3:b7:03:bb:cf:33:24:2a:9d:
                    d8:ce:8f:d4:85:61:38:f8:04:7b:44:0c:45:21:d6:
                    ee:06:3a:26:a6:f8:82:02:37:a8:73:cc:a8:85:2b:
                    19:d2:e4:02:ea:38:74:22:2e:f7:8d:fa:10:15:05:
                    11:5c:5f:60:dd:16:19:a4:2c:2e:2a:9d:6f:56:04:
                    ec:a0:45:2a:1c:e4:07:5f:c1:70:bd:aa:8f:a3:85:
                    9c:a0:b6:0e:3d:9c:44:ae:52:a0:ee:29:95:6a:d4:
                    f5:79:4c:e5:bf:8d:6b:76:de:60:73:bd:f5:19:77:
                    fc:cd:97:ca:57:b9:5a:8d:d7:75:8b:e8:77:7f:87:
                    6a:75:23:b2:23:71:11:91:5c:b0:e2:40:a1:ef:62:
                    13:0a:20:c4:70:ac:73:ba:02:61:6d:a6:7e:15:26:
                    bd:de:5e:6a:cd:7d:87:4b:32:ec:17:d9:9c:2b:7b:
                    5e:9a:5f:b8:9e:4d:c3:e3:df:f8:58:b0:d1:ae:ec:
                    d2:96:68:42:24:a9:24:92:62:9a:2c:c5:27:1d:69:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2F:A5:68:7B:2B:D4:51:E0:6D:3B:69:C0:60:8D:6F:AF:A4:50:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:99:17:4d:1d:c1:62:e8:e7:87:54:3b:ef:e7:43:56:de:1d:
         5f:be:b8:44:83:92:ed:94:0d:3a:c8:33:5f:f9:5a:64:9d:f1:
         67:c6:33:c1:20:2c:92:98:b9:e8:33:11:79:34:48:a6:da:6f:
         ef:1a:ca:01:be:df:7b:a8:25:09:9a:0c:20:db:74:6d:73:9d:
         69:39:89:c3:63:45:cc:a3:c4:ef:c8:d6:5b:f9:11:27:a3:29:
         2a:c7:dd:0c:19:99:07:8f:b9:ad:9e:ba:6f:41:e8:3b:6f:b0:
         1d:7e:42:8f:3c:83:7d:c7:76:f5:55:f4:43:b3:bb:af:2a:e7:
         61:7d:aa:66:26:37:c0:dc:2c:94:e7:c5:b8:80:ca:6f:87:f1:
         97:dc:d8:58:ed:51:14:ae:c5:82:bd:1e:dc:c2:ba:5a:e5:5b:
         e3:df:a7:c3:d0:79:fe:ec:7a:e4:41:9f:0c:33:9d:0b:f8:b7:
         b0:25:9d:05:5c:83:d8:5b:b3:bc:de:b8:37:a2:d8:55:b5:2e:
         b1:a1:5c:df:c8:c7:c3:c8:02:03:77:06:cd:55:55:9c:59:f3:
         b8:c6:27:cd:a8:e8:e2:0e:a4:3e:9e:ef:e2:e7:50:cc:41:67:
         0a:05:16:f4:85:dc:be:ba:75:f5:51:f2:ab:8d:d0:74:56:ea:
         f9:c0:31:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:15:20 2026 by rpki-client