Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa
File:                     069fb1b6-9863-39f2-9fdb-e5a64d305939.roa (raw, json)
Hash identifier:          Nv8sjkr3ZyZ7P/06ppCLvv/GxVFn7KSrXSN+V/yedqs=
Subject key identifier:   A3:0E:53:42:E1:BF:39:D6:CC:CA:70:37:9E:83:55:3A:C2:89:8B:62
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584EA7881138F81684CB3B078380
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        143.223.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:11:38:f8:16:84:cb:3b:07:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f6690c37-f658-43b4-8fb9-869f468528a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:f2:a8:ba:58:64:71:0c:74:06:82:66:7c:
                    c3:64:7a:b8:d2:3e:b5:5c:2b:50:42:5a:98:f8:57:
                    7a:90:8c:9f:e6:f1:2d:91:f0:6d:92:d0:c8:90:e9:
                    4e:66:e9:93:2f:e8:59:28:a8:73:b0:49:fb:c5:46:
                    0d:37:66:6f:54:64:bf:40:9d:68:d8:25:8d:12:b6:
                    34:3d:7b:92:7b:fd:70:5b:25:82:a9:57:fc:61:52:
                    09:64:ae:a8:2c:ea:d0:4a:28:e2:24:8c:f2:a4:d9:
                    3e:a6:2e:ab:b0:e0:db:44:90:90:5d:0a:7f:b2:61:
                    ce:cd:7d:4f:4a:d7:55:d4:69:a1:04:b0:11:4b:50:
                    2b:5a:ab:d7:13:aa:eb:36:ff:1b:fd:fa:bd:25:8e:
                    21:bb:66:95:e6:8d:79:50:1b:0b:a7:ad:10:5a:10:
                    ab:23:a3:ce:83:09:71:93:b7:77:1e:c5:97:69:85:
                    3e:d8:6f:c7:5c:21:d3:32:50:7a:5c:8b:f1:6b:09:
                    9f:d4:44:8b:b1:42:e8:d2:1c:27:c8:68:63:77:87:
                    d7:33:7b:4c:99:7d:da:a0:53:d4:66:f8:12:2b:54:
                    23:e3:e4:75:bb:a4:a2:8f:5d:53:c4:91:b2:db:5b:
                    cc:4f:0b:13:5e:8b:40:63:f1:63:fd:80:78:ac:ac:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0E:53:42:E1:BF:39:D6:CC:CA:70:37:9E:83:55:3A:C2:89:8B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:f2:37:ae:60:2f:ed:0e:88:4b:f0:0c:e5:72:bd:52:f5:
         d4:41:fc:5e:ef:75:29:b1:31:48:c5:00:9b:6d:cb:63:0b:21:
         38:87:25:b8:a3:77:53:b5:ee:8e:b8:b4:be:7e:5d:c2:2a:07:
         1e:0b:14:42:fc:cf:bb:63:14:76:cf:03:53:dd:0b:a5:8c:fa:
         6c:09:6c:78:4a:4c:41:24:b1:95:6a:7b:a9:7a:07:a9:42:5f:
         4e:c8:a4:29:34:54:48:ab:8c:33:0e:fc:27:ef:49:32:4d:29:
         51:f5:b1:f6:1a:c6:65:b1:4c:44:f4:b0:00:21:d6:41:05:27:
         87:cf:7e:a0:d4:5e:71:38:32:6c:9d:76:ef:63:2c:19:6a:b9:
         37:1a:fa:10:95:cf:3e:51:fa:70:55:7c:91:f2:36:09:5d:94:
         80:13:16:a1:7b:2d:f8:50:04:9d:5b:49:48:1c:b9:2d:46:8f:
         7e:72:2c:d1:63:29:da:3d:39:40:69:b3:f1:84:b5:92:7e:45:
         73:67:7a:63:6b:8c:2d:2d:9f:dd:65:60:1e:0b:34:97:16:4c:
         7c:43:63:8a:ea:2c:49:ef:1d:ca:bd:04:7a:15:63:6c:08:fd:
         d6:f7:ce:27:d6:99:d2:03:d0:18:eb:b3:05:22:b6:3c:15:d8:
         8a:76:f4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:07:56 2026 by rpki-client