Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/028ad6f4-e7c2-3ac7-ae5b-b50b76ebe3d3.roa
File:                     028ad6f4-e7c2-3ac7-ae5b-b50b76ebe3d3.roa (raw, json)
Hash identifier:          4GOPr6cp4u/2YjjPTnY2VfZCGIX+6xaL7rVJy9UT81E=
Subject key identifier:   A6:21:0A:B6:E2:02:3C:5E:E3:F5:86:F4:72:DA:95:E9:B9:10:3B:32
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584EE38CA99E328C6B7C0723CFC0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/028ad6f4-e7c2-3ac7-ae5b-b50b76ebe3d3.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     7862
IP address blocks:        146.23.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a9:9e:32:8c:6b:7c:07:23:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=f3a0fafb-c825-41de-b422-602df6561ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:dd:11:74:8f:50:b7:fe:cd:c5:58:e7:8b:
                    8d:e0:66:25:7f:7e:78:2c:bb:c7:0e:ce:b0:b4:c8:
                    6b:fd:79:a1:83:12:f3:a5:8d:89:46:52:05:d0:34:
                    19:8e:aa:e2:5f:3d:77:74:7f:13:9b:9e:ae:8b:3f:
                    74:16:af:b6:4f:c2:38:be:64:0e:8a:51:21:dc:5e:
                    af:f2:29:d7:de:0b:40:12:8b:78:87:27:51:14:67:
                    e2:e6:c0:49:31:51:1a:a6:7d:9e:3f:3b:e1:0b:29:
                    7c:68:9c:ad:b0:ba:7f:e4:2c:00:9b:40:03:d6:76:
                    ff:be:e6:36:34:7f:b8:c8:98:f7:64:c8:42:94:65:
                    4e:49:19:5b:fa:ef:ee:3c:04:de:fe:9f:17:43:9a:
                    15:c5:e7:fa:cb:db:0b:4d:cc:d4:20:c6:85:6f:29:
                    bf:db:99:86:ed:37:27:45:bd:d4:ac:a7:1a:30:70:
                    49:12:df:e1:2b:b2:0e:66:ef:b9:ee:f4:43:a8:58:
                    07:2b:fd:d0:4e:12:14:af:e7:87:aa:3f:e7:3a:33:
                    c9:c1:7e:2f:32:4b:31:d9:d8:78:68:e3:30:fb:09:
                    ea:9c:14:33:b3:39:d9:90:8a:db:43:4a:51:e5:f4:
                    7b:ec:d2:92:19:af:f6:24:a7:32:ef:24:c4:7a:01:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:21:0A:B6:E2:02:3C:5E:E3:F5:86:F4:72:DA:95:E9:B9:10:3B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/028ad6f4-e7c2-3ac7-ae5b-b50b76ebe3d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:e1:bb:51:93:74:f5:33:cb:06:c3:15:8b:58:16:5f:e4:
         73:70:f6:df:74:80:9d:61:24:b2:a3:a0:da:92:17:43:b4:2e:
         b6:06:dd:54:c5:a9:99:36:ee:50:e3:d6:7f:ca:e0:87:42:e3:
         a0:a0:7d:48:d1:04:60:8f:b1:c2:d2:3a:e7:66:00:f5:b2:67:
         33:54:17:af:16:38:42:d9:40:77:30:73:23:97:7f:fe:25:03:
         cd:e8:ef:1c:09:1c:68:17:69:8a:96:69:b6:65:b0:51:0a:73:
         e0:aa:53:02:2b:5c:d2:6b:f0:16:42:af:e5:5b:bc:d8:c0:21:
         87:d1:96:13:85:cf:d0:ba:51:7e:20:97:23:f1:d2:00:5a:6b:
         57:cd:d7:ec:e4:d6:f8:f5:be:75:51:ba:0f:9a:5d:02:f5:5a:
         29:78:73:f7:bc:e2:2b:2c:0b:b8:36:93:89:21:a7:41:2f:7d:
         f4:02:3b:5e:26:e3:31:78:07:60:20:e2:21:04:af:7b:5f:79:
         89:97:79:15:2f:4a:de:19:47:d5:34:39:81:7b:ac:0f:de:5d:
         a9:9e:22:a9:6a:e5:7d:e5:68:63:29:45:10:27:aa:17:bd:17:
         9c:3c:9c:9a:02:de:80:59:c9:31:a3:34:17:81:56:3b:d5:96:
         31:54:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:03:15 2026 by rpki-client