Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
File:                     fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa (raw, json)
Hash identifier:          SGQYbZ3lq0/wiDVyeg3UULYvl7w9mq8vf7uS7rDg2Bo=
Subject key identifier:   65:0A:31:88:C1:8B:D1:93:54:F3:FE:19:2A:91:E3:8A:E7:11:FC:86
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F4328584E3A2F177677846DEAEACB4780
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        143.220.128.0/23 maxlen: 23
                          143.220.130.0/23 maxlen: 23
                          143.220.132.0/23 maxlen: 23
                          143.220.134.0/23 maxlen: 23
                          143.220.136.0/23 maxlen: 23
                          143.220.138.0/23 maxlen: 23
                          143.220.140.0/23 maxlen: 23
                          143.220.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:17:76:77:84:6d:ea:ea:cb:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=3b3e938a-ed9c-4408-8b70-148be3ecf937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:52:64:8a:50:66:87:7a:c4:a2:90:8a:f3:
                    3b:a8:4e:16:22:07:4e:f6:33:e4:54:08:d2:09:f5:
                    32:5c:d8:6d:ad:d5:ce:e7:8f:ca:79:02:d4:a2:ea:
                    83:c5:5b:60:6d:94:65:5e:b7:cd:19:8e:f7:33:aa:
                    16:3c:18:e5:78:90:ec:6d:c4:ae:4c:5c:11:2b:6f:
                    72:9a:b9:79:61:79:a9:80:e9:91:c2:b5:52:dc:2a:
                    2a:8a:e1:4c:c6:81:ee:83:93:c8:5a:b2:b1:db:59:
                    d3:a0:08:7c:56:d9:24:0b:93:58:c5:4f:a6:fc:8f:
                    e0:a5:ab:f8:2a:15:ec:9e:45:28:2f:ad:e9:51:3b:
                    fe:c0:2c:59:5e:e2:dc:af:44:dc:32:74:0a:de:15:
                    20:1b:71:b6:a0:19:70:db:b0:a4:74:88:9b:65:26:
                    39:e6:86:72:f9:b5:4e:e3:5c:f3:1a:ea:43:7b:96:
                    c6:b7:7a:47:45:9b:c4:7d:8c:79:5d:48:62:14:7b:
                    f3:44:92:1b:a6:24:97:9d:80:13:61:e4:da:c1:65:
                    1a:ef:f1:f5:7e:c9:07:f6:11:4e:b0:76:a1:d1:2e:
                    b2:21:fd:7d:66:84:85:9b:c5:b5:3a:08:b3:c0:32:
                    3f:2a:3c:1b:e8:18:10:21:12:47:fe:4c:cb:ef:f9:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0A:31:88:C1:8B:D1:93:54:F3:FE:19:2A:91:E3:8A:E7:11:FC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.128.0-143.220.142.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:a8:9a:01:37:d8:07:03:6e:96:dc:b7:95:f0:9e:b7:83:
         87:76:6e:8c:58:e4:7d:f4:de:e9:3f:2c:16:fc:64:f2:7a:68:
         a2:30:7f:cd:8c:33:bc:c1:a2:5b:41:66:23:ea:90:56:8a:23:
         73:ef:23:12:95:aa:8d:5d:f9:ec:70:07:3e:b9:b5:f2:ba:fb:
         9c:07:ec:d7:6f:ea:42:42:64:4a:1a:86:8a:fb:b0:53:40:15:
         fa:b9:c1:68:53:fa:89:b6:18:32:b2:1b:af:8b:4b:de:e0:fe:
         72:45:65:03:c5:8c:ee:ba:7f:81:3b:a5:d6:c0:8b:3e:19:29:
         7a:44:0f:ad:64:03:ca:61:40:04:d1:ab:c9:ca:de:e5:10:cf:
         0f:5c:5b:fb:66:40:cc:0e:3b:b7:2e:18:cb:ce:07:e0:f0:c7:
         11:a3:25:63:7e:4b:88:72:cf:89:d9:79:94:04:f2:d0:de:a9:
         41:c5:e5:06:1b:8d:01:7e:8f:39:33:d7:f1:f7:d8:c1:29:82:
         70:f5:b9:0f:d7:de:6f:7f:5b:df:67:f6:76:ac:16:83:80:2e:
         7f:c6:1b:9a:4d:83:4d:64:9d:61:b8:ef:17:86:a1:5c:a2:62:
         42:20:d3:76:19:a3:15:bf:47:ce:4c:60:98:1f:1e:a2:10:9c:
         c1:3e:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 22:56:19 2026 by rpki-client