Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5a8ebfe2-e8da-309e-aa49-722400968fcb.roa
File:                     5a8ebfe2-e8da-309e-aa49-722400968fcb.roa (raw, json)
Hash identifier:          msbK81/w0G8cw8Pt4Ugt9o1amRuZO/skIdW/7KmmttI=
Subject key identifier:   91:BD:0F:B0:3D:34:99:FD:CD:D6:B1:3F:61:49:B8:62:DD:AE:AC:25
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584F268CF99972A6737244D23AB0
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5a8ebfe2-e8da-309e-aa49-722400968fcb.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     16509
IP address blocks:        131.143.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8c:f9:99:72:a6:73:72:44:d2:3a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=05023f09-d14f-4618-9c73-0e9c764c29f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:51:a2:59:28:a9:ff:3f:90:56:3c:0f:25:
                    a2:4f:65:25:00:ca:f9:98:ec:b7:d2:d4:b4:8f:17:
                    7d:a2:5c:fb:e8:25:d0:41:9f:a3:a1:39:a0:1b:ac:
                    20:94:c1:dd:ae:51:39:45:ea:d4:6a:18:35:ea:a2:
                    ac:17:15:16:73:5f:d8:c1:a1:0d:49:db:52:d8:c5:
                    02:f4:12:7a:31:30:24:13:64:06:ba:91:4d:a7:85:
                    50:1b:c9:66:96:50:ef:39:4c:14:08:49:75:7a:ff:
                    78:d3:93:a4:91:c2:85:22:4a:cf:b5:d1:56:38:8f:
                    63:2c:bb:6b:6f:b4:f2:ce:01:f2:8d:c2:e0:df:b2:
                    f1:68:9f:1a:5e:4a:2b:82:9f:ff:60:a7:62:19:c4:
                    c7:3d:32:74:b2:b9:d7:64:2a:0c:f8:00:6a:78:ec:
                    63:f9:0f:81:94:b1:47:68:fe:6e:39:b3:d2:35:32:
                    2a:77:a0:8c:26:ea:8a:35:ea:4a:74:4e:44:59:1e:
                    69:0d:dd:c2:ab:55:8a:1d:42:ad:cb:9f:9a:d6:31:
                    1a:cb:e4:65:22:1e:b7:1d:31:5b:6a:6c:db:ad:4c:
                    9b:ed:2b:c3:c3:27:9d:e6:d3:2d:74:08:b5:55:43:
                    76:2f:cd:d9:41:32:22:6f:c5:6b:bf:5f:76:36:bf:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:0F:B0:3D:34:99:FD:CD:D6:B1:3F:61:49:B8:62:DD:AE:AC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5a8ebfe2-e8da-309e-aa49-722400968fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:94:ad:73:de:57:0d:3b:cb:2c:9a:98:04:19:f3:10:54:53:
         fa:05:c1:fa:60:b9:da:05:f1:ab:5e:ef:1e:7a:31:26:07:59:
         35:f9:ee:0c:22:d7:62:cb:c9:39:9c:0e:30:aa:00:61:05:d3:
         bb:be:0d:75:df:c6:e6:48:5f:71:c7:78:41:91:4f:1b:b3:f0:
         47:40:5e:c7:10:36:06:55:b5:52:2d:f0:eb:d3:a9:22:7e:03:
         78:53:37:29:59:97:a4:46:62:3f:e2:82:1f:e9:00:ef:7e:92:
         c9:0f:ba:42:1a:be:b1:b8:c0:0b:4c:e2:d3:c2:ab:73:c8:fc:
         33:af:44:8b:d5:ed:51:7b:ba:b8:4f:07:49:7f:0b:ed:2b:fe:
         f0:47:0b:ed:dd:1c:ec:b1:c8:0c:9f:2e:0c:22:3c:01:28:30:
         9b:50:3a:69:a9:f1:3a:07:af:50:32:ab:43:a8:94:ab:72:92:
         7c:f3:99:7c:5a:75:21:35:60:9d:e6:5d:49:c6:e4:41:a7:90:
         c0:35:4b:f9:11:77:73:5d:ab:92:39:70:46:4e:15:66:c1:0f:
         c6:d7:1c:74:e0:e5:1a:02:a6:60:08:98:dc:38:cc:28:36:81:
         48:9a:70:37:b4:ba:c3:ff:d5:ba:e2:16:76:d9:57:c4:f4:d8:
         d5:71:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:33:50 2026 by rpki-client