Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/7259c3bc-2077-39aa-986a-96014624d621.roa
File:                     7259c3bc-2077-39aa-986a-96014624d621.roa (raw, json)
Hash identifier:          PxO7mVxWylBUXFqLyr2+DTWM7Hc3GZIQaYiMvliJ8ng=
Subject key identifier:   63:82:5D:9D:24:E7:F9:BB:A3:4D:FE:BB:85:CB:C1:C5:34:B4:85:20
Certificate issuer:       /CN=dfc6770a-8775-4ba8-9d91-68facba79b33
Certificate serial:       010D0C9F4328584EBB11B3CEB9072BFCCC9CBC40
Authority key identifier: FC:15:E4:40:61:B7:C4:E7:24:7E:68:F9:54:6D:00:9F:25:56:D2:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/7259c3bc-2077-39aa-986a-96014624d621.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     18702
IP address blocks:        131.143.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b3:ce:b9:07:2b:fc:cc:9c:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc6770a-8775-4ba8-9d91-68facba79b33
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=87286137-8b34-4729-b5cd-9310f4d88cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:31:d8:af:bd:1e:42:6a:60:3a:1e:b0:44:
                    5c:ad:9e:53:85:b0:5c:e8:eb:cf:9e:3a:30:c5:38:
                    b7:84:bc:87:35:9b:d0:2a:e4:85:50:b1:4a:5f:ad:
                    dd:a7:2a:e0:74:e7:eb:b1:cd:2d:30:32:7b:e8:68:
                    11:71:99:5c:5a:7c:90:23:90:c4:77:7a:b5:ed:7c:
                    04:78:26:cf:16:b8:e5:2c:57:97:8a:a0:6b:5c:82:
                    60:78:e5:00:ff:f2:bf:34:3a:3e:84:2b:6b:9a:d4:
                    56:2e:74:4c:2c:d8:4f:b4:39:2f:eb:d5:22:ac:46:
                    52:ac:4c:19:13:45:ff:db:78:1a:de:04:44:0b:07:
                    60:cb:21:87:a1:e0:24:e9:93:f2:f6:2e:0f:0e:50:
                    41:83:9b:6a:ef:ae:05:fd:f3:46:8f:45:58:8a:a1:
                    de:4d:e4:14:08:ce:f0:50:79:f9:03:06:37:e7:22:
                    e5:b6:67:09:d4:42:e1:f2:12:49:23:7c:55:6e:79:
                    0b:dc:d0:3d:ea:d2:84:4b:f9:73:5e:ba:b7:cb:b5:
                    50:25:d5:c1:1c:06:98:51:29:90:a4:f7:1a:73:e6:
                    50:70:5a:71:22:62:df:eb:01:47:c0:68:07:d1:69:
                    f0:70:9a:67:8a:87:e0:ac:b8:ee:0a:1a:84:e2:32:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:82:5D:9D:24:E7:F9:BB:A3:4D:FE:BB:85:CB:C1:C5:34:B4:85:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/7259c3bc-2077-39aa-986a-96014624d621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.crl

            X509v3 Authority Key Identifier:
                keyid:FC:15:E4:40:61:B7:C4:E7:24:7E:68:F9:54:6D:00:9F:25:56:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7b:38:1e:54:a6:eb:94:30:d4:94:d6:56:4a:cb:3e:40:78:
         b6:6d:85:17:be:1f:50:a4:ab:93:a1:51:45:eb:6b:f6:13:40:
         39:8a:d0:9d:86:61:e5:dc:9a:9d:32:b5:0d:f5:67:9c:5a:b1:
         37:05:05:82:59:7e:fd:91:fb:34:2a:13:1a:4d:80:9f:73:10:
         78:75:6c:79:da:67:9c:a4:f8:cc:7b:1b:71:50:d2:f0:3d:8d:
         ab:c9:c9:6d:88:01:ff:1b:23:21:7b:8e:cb:5c:59:1b:7a:d2:
         50:0b:69:3f:7c:fa:1b:b5:e9:b8:cb:5e:5e:a3:5e:4e:a2:6f:
         a4:d7:25:a5:29:14:de:e3:5f:e9:a0:c5:e3:34:52:f2:9a:37:
         c6:ea:d2:d4:14:c2:5c:a3:1f:78:37:57:30:4a:17:be:60:84:
         5b:44:a4:eb:e4:e0:e2:79:e9:b1:3b:2c:c0:1d:01:3a:ad:19:
         34:9d:41:06:0c:e7:8c:2b:0c:80:5e:f4:42:5e:14:9e:01:99:
         f8:9c:61:1e:11:99:fe:9c:a1:45:14:83:f4:99:58:a9:17:2c:
         6e:4e:52:76:52:b1:77:57:8b:a2:55:8a:7a:41:da:26:0a:a3:
         dc:81:7d:da:40:bc:2c:40:e2:42:2b:e0:56:b7:ba:06:41:56:
         a4:09:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:36:59 2026 by rpki-client