Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/bbf22a00-09d0-312c-9161-3ff96cfa5ce8.roa
File:                     bbf22a00-09d0-312c-9161-3ff96cfa5ce8.roa (raw, json)
Hash identifier:          OSi5MGDdsnnKGDH/XoLv6juvRExWsdHfLa9xt61OGsg=
Subject key identifier:   5F:EB:78:33:63:BA:D6:BD:12:23:DC:FD:75:F4:56:0A:86:68:19:AB
Certificate issuer:       /CN=223692b9-6752-4ca2-9cf2-90b3bea5d6dc
Certificate serial:       010D0C9F4328584F0AA234CD2085B9408D574360
Authority key identifier: 0B:BF:41:F6:6D:D9:5E:7C:E8:1B:E6:AE:B8:DC:41:53:86:07:6D:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/bbf22a00-09d0-312c-9161-3ff96cfa5ce8.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        143.98.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:34:cd:20:85:b9:40:8d:57:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223692b9-6752-4ca2-9cf2-90b3bea5d6dc
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=c68cec76-0ba4-488d-86ab-bf097c4e9309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:c6:4e:7c:65:21:01:1c:93:45:e8:ac:93:
                    ed:e2:6f:70:44:5f:98:49:d7:55:63:3d:41:11:09:
                    69:56:03:3c:f1:d6:88:23:63:5e:42:22:31:cd:6b:
                    9e:ba:cd:2e:5d:49:76:ba:1b:0f:2d:83:1d:d0:a0:
                    70:b9:cc:0c:b1:e8:d5:e1:e3:74:57:93:a2:8c:68:
                    38:94:8f:0c:0c:ed:3e:12:10:a0:87:0e:ff:c7:00:
                    88:f5:6d:ce:62:fb:4c:7a:eb:38:cf:1b:43:f7:7f:
                    46:fa:34:c3:b1:f5:d4:74:da:54:68:58:45:04:c4:
                    17:f5:ea:db:c3:00:d9:63:0a:44:cd:e5:33:bc:da:
                    d3:74:97:b8:de:d5:a6:2d:38:3a:66:b0:73:aa:f6:
                    3d:7d:7d:69:4e:bc:ad:96:be:86:bd:bd:54:01:79:
                    2b:f0:a8:84:b8:1a:ff:a8:67:e6:eb:47:f4:20:72:
                    89:91:40:2f:ce:93:bd:ae:27:58:ed:8c:5b:6c:51:
                    5e:fa:43:b2:e8:41:23:96:64:ba:7d:9a:fe:02:fb:
                    0d:20:cd:d9:d4:0e:27:8b:51:1f:b3:f0:2a:69:8d:
                    a2:27:6f:84:53:da:0a:4f:a7:02:bc:ed:b1:36:ae:
                    8a:2e:02:01:ec:c5:90:e3:03:d9:9e:2f:85:3f:99:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:78:33:63:BA:D6:BD:12:23:DC:FD:75:F4:56:0A:86:68:19:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/bbf22a00-09d0-312c-9161-3ff96cfa5ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:BF:41:F6:6D:D9:5E:7C:E8:1B:E6:AE:B8:DC:41:53:86:07:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:87:3e:a9:e1:93:fd:be:e8:ef:47:6f:8d:13:d4:27:5d:
         de:d8:a7:57:41:66:33:4a:ba:74:71:fb:b3:bd:53:56:6e:2c:
         8a:8a:e7:93:bd:0d:47:9e:a8:30:11:f6:00:33:e6:bf:05:98:
         0d:73:bd:e9:0b:71:0d:ba:3e:8a:69:e8:f6:ef:22:ab:09:f8:
         e9:6e:f9:1d:80:26:66:9c:6c:0d:da:5a:10:75:a9:0f:0f:ba:
         28:6a:ee:8a:17:a8:76:8b:15:03:77:fa:e0:81:b8:10:eb:28:
         ce:6d:d2:39:84:a6:54:f0:0e:b8:66:76:cb:cd:46:8a:87:da:
         73:d3:60:99:25:7b:8c:14:c5:7e:45:88:d7:df:9f:58:17:1a:
         49:ed:50:b9:23:c2:ef:bf:a8:de:9a:c9:25:7b:37:a6:bc:2b:
         b3:8f:21:68:ea:04:b1:ce:cb:13:28:5e:94:1a:91:62:5b:c3:
         b9:5b:b1:68:53:fe:c5:d2:47:b6:6e:90:2a:c9:04:40:03:58:
         08:14:c0:56:0e:55:bd:06:67:bf:1b:29:52:1a:a5:d9:c4:bc:
         a7:12:9b:36:27:26:e1:0d:d0:07:26:0c:0b:e0:62:6f:40:ed:
         99:e0:05:e5:7b:c1:0d:f0:ec:25:90:ea:21:18:2f:97:22:3a:
         db:31:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:47:19 2026 by rpki-client