Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/13858570-4999-32f4-b881-6895fd21b1cc.roa
File:                     13858570-4999-32f4-b881-6895fd21b1cc.roa (raw, json)
Hash identifier:          DN9bk+drnDdKeEGsysHUmUre2+B7Fp0PJvNbUDWV5j8=
Subject key identifier:   C6:8E:C7:D0:2F:B5:4C:D8:4B:E0:B1:0D:DA:81:CB:12:06:7F:31:31
Certificate issuer:       /CN=2c02bf4a-5763-4b76-899c-563f0f4ef065
Certificate serial:       010D0C9F4328584E47B70E5241162EDD1E983880
Authority key identifier: 97:B6:60:1E:34:E7:62:3E:8E:B8:16:B6:7F:AF:9C:57:54:37:9E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/13858570-4999-32f4-b881-6895fd21b1cc.roa
Signing time:             Wed 24 Jun 2026 17:19:44 +0000
ROA not before:           Wed 24 Jun 2026 17:19:44 +0000
ROA not after:            Tue 22 Sep 2026 17:19:44 +0000
asID:                     21921
IP address blocks:        143.223.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/2c02bf4a-5763-4b76-899c-563f0f4ef065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/2c02bf4a-5763-4b76-899c-563f0f4ef065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:47:b7:0e:52:41:16:2e:dd:1e:98:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c02bf4a-5763-4b76-899c-563f0f4ef065
        Validity
            Not Before: Jun 24 17:19:44 2026 GMT
            Not After : Sep 22 17:19:44 2026 GMT
        Subject: CN=e86ab760-b3e4-42ba-b8fe-35190452af63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:06:69:88:42:59:a4:01:22:07:b1:61:ba:
                    20:59:8f:e6:6a:cf:14:25:ba:a3:a2:c6:22:cd:b3:
                    e9:68:27:bc:83:50:a4:5c:05:85:49:d8:c3:b3:89:
                    e6:be:ed:30:97:03:46:5c:37:bb:41:54:2a:ec:4f:
                    05:a3:5e:51:43:31:73:86:ab:24:00:3f:a8:3a:0a:
                    f5:63:e1:56:ba:4b:ee:ed:fe:18:db:df:94:f5:48:
                    79:02:8e:c8:82:93:92:c5:79:f1:41:9f:42:22:bf:
                    88:e5:4c:77:52:4f:f7:ff:11:3d:5b:b9:d7:02:31:
                    a7:85:88:f6:5e:03:35:86:e8:8b:af:32:9d:0b:99:
                    56:74:9d:40:7f:39:dd:b1:f2:c6:bf:ee:1d:5b:92:
                    0b:12:8a:bb:50:02:40:22:2e:aa:74:dc:73:97:90:
                    5b:2d:32:07:70:4a:80:21:33:d7:bf:12:da:7f:25:
                    09:92:d6:3b:93:4f:d8:ae:fd:8d:c1:16:bb:7c:db:
                    e5:9e:e5:dd:d5:bc:cd:3b:53:c1:4d:5d:ad:72:2e:
                    a8:99:93:5c:e7:1e:22:b2:e6:a5:f8:5f:ef:e2:23:
                    21:4f:3d:06:39:11:f6:f9:44:02:98:92:22:e0:8d:
                    72:73:7b:96:0a:d5:2d:44:5b:6c:b4:93:07:01:5d:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:C7:D0:2F:B5:4C:D8:4B:E0:B1:0D:DA:81:CB:12:06:7F:31:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/13858570-4999-32f4-b881-6895fd21b1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/2c02bf4a-5763-4b76-899c-563f0f4ef065.crl

            X509v3 Authority Key Identifier:
                keyid:97:B6:60:1E:34:E7:62:3E:8E:B8:16:B6:7F:AF:9C:57:54:37:9E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:eb:10:e1:df:0c:bb:3a:b7:08:b2:2e:07:3b:bd:0f:d0:fd:
         0a:fa:df:d3:fe:02:c6:19:37:0e:5b:2a:fd:30:ca:7e:34:fd:
         e4:b2:9e:52:3b:57:f7:db:9a:d7:7f:c5:f0:a4:24:d5:0e:91:
         2a:69:76:18:cd:3c:dc:fd:e1:d7:31:80:91:7b:06:03:2b:b7:
         b7:66:e6:5d:ee:38:70:4f:a8:14:2f:46:9a:f7:e2:2f:53:a8:
         24:c3:47:80:05:42:83:b0:d7:f8:fd:fa:f0:2b:3e:84:f6:af:
         1b:32:45:69:5c:e2:7e:28:01:1e:02:8d:c2:e9:40:f0:00:42:
         6c:0a:41:9c:e9:18:23:fd:92:e9:23:4d:26:6a:12:c2:6a:94:
         88:66:36:c1:95:c8:9c:c7:f5:dd:c9:c2:5e:df:fb:23:cb:c0:
         89:37:69:7d:2d:c1:58:01:c0:7b:60:d0:d0:a7:27:19:67:04:
         ce:d8:24:d1:d2:5a:15:8e:ce:33:a9:5c:32:af:53:d1:72:cc:
         40:2d:ac:a2:ad:9d:cf:ba:c8:a6:09:bf:32:b0:8d:69:a3:be:
         06:b0:2e:f1:6c:4d:d6:8f:82:8d:ab:3d:c4:31:94:c9:b2:b3:
         e9:54:88:f9:fc:99:56:f0:26:d8:bd:43:be:d5:75:38:f3:e7:
         c9:4e:9c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:50 2026 by rpki-client