Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
File:                     119734ec-a725-3c00-8d22-2b32823cedd9.roa (raw, json)
Hash identifier:          3xFyQAgdn7n4VY4QAXfqqp8jdhcFEBHYAN+wxZqft9A=
Subject key identifier:   78:D6:C9:9A:22:17:43:E1:64:68:37:4E:84:82:11:6D:3D:5D:96:60
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584E4129DB6A9E06F6943D869663
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     7862
IP address blocks:        146.23.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:db:6a:9e:06:f6:94:3d:86:96:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=8bdc1566-a692-479c-879e-7408a84708a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:3b:2d:c7:86:62:f2:cc:a5:ce:e8:96:a5:
                    e4:08:99:a3:4e:37:8a:f7:19:e8:f1:4b:3a:a0:b9:
                    76:7a:c7:f4:f6:b9:5f:a7:1e:7f:77:7a:10:40:d0:
                    85:b8:3b:ef:0a:5b:98:28:66:23:4c:61:d5:bd:cc:
                    aa:53:7e:ed:fb:78:47:fa:70:e6:52:d4:0a:e4:37:
                    43:ad:bb:d1:91:68:2f:5e:a0:4d:c4:6e:b5:55:ee:
                    94:16:b5:14:75:83:ce:a6:16:04:c3:88:80:9f:1b:
                    7e:26:23:16:6a:41:12:86:54:81:83:09:bb:e7:d0:
                    22:d6:e7:15:ec:92:b1:77:c0:45:74:56:f8:d7:47:
                    68:29:68:dd:5c:3f:1a:71:0f:55:60:13:2c:8c:35:
                    dc:56:98:6a:f4:c4:52:9e:b0:a5:ca:dd:23:a6:43:
                    b2:e7:7c:db:f6:ef:fc:bb:d0:6f:5e:2e:7e:4c:cd:
                    f2:f7:47:2b:bf:04:39:56:1e:41:a9:98:2c:8c:e2:
                    43:6c:c1:0d:03:0e:2b:91:27:62:e3:5b:74:df:66:
                    47:8e:41:75:36:12:91:c9:f0:2b:fa:65:2e:45:66:
                    3f:06:77:41:58:8f:92:35:d0:d4:ce:de:9c:6e:15:
                    96:72:93:68:5d:9a:db:5e:e1:42:65:0a:53:b2:43:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:C9:9A:22:17:43:E1:64:68:37:4E:84:82:11:6D:3D:5D:96:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:c7:fc:3e:30:c9:c9:d2:88:66:5b:ca:5f:fe:a8:83:66:a2:
         b4:14:d8:17:8a:ae:d0:7b:5e:87:52:39:99:da:fe:1a:ef:b4:
         3c:1c:02:4e:b4:e1:71:24:a3:bb:71:2f:0e:d8:ea:ab:08:4d:
         d5:b0:22:67:1d:71:05:be:e4:56:37:43:c5:f1:9b:7f:bf:79:
         8f:e9:a4:77:88:d3:5b:59:7c:a1:e2:ae:14:10:1e:9c:89:46:
         65:80:d2:d9:08:f1:76:20:78:90:44:a9:fe:84:cf:ef:4a:2f:
         af:56:5d:c7:7b:ea:4f:80:cb:65:a0:90:53:89:39:45:8a:07:
         d5:a0:b7:c0:50:78:71:ac:5d:cc:9e:ef:26:a1:6c:cb:49:9b:
         17:ca:47:01:d2:d8:7c:d9:7e:1c:15:7d:0f:79:7a:cc:4b:8d:
         e3:be:ff:85:fb:dc:7f:25:d9:64:d3:12:c6:ef:44:cb:47:b3:
         fd:23:f8:7d:2a:9c:1f:09:34:ad:7b:32:4d:12:b0:22:c8:fa:
         bb:7f:ab:52:df:01:d6:56:cb:99:6d:58:bb:aa:ea:8a:58:53:
         0e:33:5b:5a:52:19:bf:26:86:73:88:2b:f1:6c:f6:87:0e:6f:
         f8:d4:88:73:a3:1e:65:0b:a3:e7:1a:6e:a9:2f:aa:0d:09:e1:
         d0:8d:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:48:47 2026 by rpki-client