Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/f7762066-c7c8-3be6-a1a3-dea0af5dc1c1.roa
File:                     f7762066-c7c8-3be6-a1a3-dea0af5dc1c1.roa (raw, json)
Hash identifier:          rO8s6bX6lfZmXp9sr0PC0ZI4nh0tN+ikYKLLj5PQPfs=
Subject key identifier:   6D:3C:73:58:A3:D5:D6:8E:5D:16:82:46:BC:F8:42:7A:68:8B:7B:5B
Certificate issuer:       /CN=d53c327d-4db5-439b-a376-ef8e86042891
Certificate serial:       010D0C9F4328584D95F004A4AAFD29A77EFD3780
Authority key identifier: 2B:70:B1:C4:53:85:E2:E3:19:EB:71:97:EC:C2:D3:99:E3:80:05:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/f7762066-c7c8-3be6-a1a3-dea0af5dc1c1.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     36427
IP address blocks:        143.229.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:04:a4:aa:fd:29:a7:7e:fd:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53c327d-4db5-439b-a376-ef8e86042891
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=79a86f6b-118d-443b-b70e-d0656c28a1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:7c:f2:04:d9:04:84:48:2c:b8:91:99:1e:
                    85:f6:42:29:0f:2b:61:37:e9:90:70:3e:04:ca:5c:
                    e4:ba:6d:cb:15:01:aa:21:c2:10:fe:61:6b:cf:03:
                    9a:b9:e5:94:9e:93:60:45:13:90:5e:ac:e8:1f:72:
                    5d:d8:5b:bd:0d:1f:ab:09:a0:45:b1:4e:9e:e4:75:
                    5e:0b:38:a6:12:bd:1c:60:53:e2:95:e2:b4:63:98:
                    6b:20:4e:ee:76:e4:9b:c4:1c:8e:88:b0:ca:d7:9c:
                    88:19:03:f2:d6:b1:d5:b8:66:d7:1e:1e:0b:b2:fa:
                    90:c3:c4:e3:92:20:5a:04:5c:64:2c:21:25:4c:01:
                    e8:9f:cb:40:c2:c1:d2:56:f2:55:b6:c5:b7:0b:5f:
                    3a:68:66:9d:01:5a:ab:d4:42:01:c5:65:e3:c3:d2:
                    59:33:50:d4:ee:5c:11:24:82:73:96:88:03:07:4e:
                    d3:f9:0b:bb:58:de:6d:4a:83:0c:6a:26:34:ad:d7:
                    bd:15:8a:f9:fe:66:8b:d9:18:7f:74:0f:1c:0b:a8:
                    d4:9f:3e:60:4e:ea:9f:8e:49:4f:5a:20:f7:00:fa:
                    3c:f7:e0:20:ca:6c:be:8d:3c:58:6b:64:59:9c:43:
                    82:f0:d6:f3:55:8f:b7:9b:10:0c:1a:54:95:03:d9:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3C:73:58:A3:D5:D6:8E:5D:16:82:46:BC:F8:42:7A:68:8B:7B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/f7762066-c7c8-3be6-a1a3-dea0af5dc1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.crl

            X509v3 Authority Key Identifier:
                keyid:2B:70:B1:C4:53:85:E2:E3:19:EB:71:97:EC:C2:D3:99:E3:80:05:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:69:ea:3f:e9:ca:2f:c9:7f:96:95:9d:09:62:74:1f:1c:eb:
         83:f9:05:a9:63:d9:e4:03:ef:f5:a9:51:27:4c:a7:8e:50:35:
         25:a6:78:d3:cc:0e:ae:18:73:d6:ff:0d:fa:d1:4d:fb:8a:b0:
         04:b4:78:90:08:e0:bb:06:c5:f4:97:e0:d3:f8:02:89:4f:d2:
         79:50:c1:fa:76:e8:28:bc:79:33:79:bd:4d:1d:b5:76:56:a1:
         2f:9e:63:93:7d:3a:40:20:21:48:cd:1d:62:47:86:ef:61:9a:
         2b:21:33:f9:84:ae:3e:1b:a8:48:f0:2f:21:37:23:43:12:a1:
         8f:24:dd:ae:a3:1b:30:fb:bc:68:16:f2:8a:70:e8:26:f6:41:
         07:c8:e3:fc:db:87:87:e7:65:10:4a:ff:80:fd:31:0a:68:ab:
         d2:36:a0:45:c4:01:d4:01:d5:d4:03:1e:f8:ed:82:2f:d3:1d:
         34:48:72:26:51:74:cb:d2:bb:45:83:41:d8:ec:44:da:66:a6:
         cd:81:2b:4c:db:ed:ab:7f:ff:08:c9:36:91:8a:c9:e3:e3:e4:
         f0:98:e3:94:c2:b4:51:11:bf:a5:1a:43:da:05:50:2c:76:e5:
         e3:4d:92:5e:c2:80:ee:42:2d:4d:6b:6e:04:81:ab:2a:58:6c:
         5e:6c:79:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:49 2026 by rpki-client