Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8b313345-934f-31ae-aa57-0d4e38da8778.roa
File:                     8b313345-934f-31ae-aa57-0d4e38da8778.roa (raw, json)
Hash identifier:          zN5Jzvg7Q2Er04d9YoyJ5IIY0KR6SZIYRqubbka1OQg=
Subject key identifier:   7E:36:F9:54:1B:1B:2A:AA:FD:5F:25:E0:F9:63:BB:F7:47:62:96:72
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584EAFE6F3C32AA86D979E1A2300
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8b313345-934f-31ae-aa57-0d4e38da8778.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     7862
IP address blocks:        146.23.0.0/16 maxlen: 16
                          146.23.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f3:c3:2a:a8:6d:97:9e:1a:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=d874d211-a054-434a-9e2d-7c9e72117b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:a2:e2:e7:8f:a3:38:cb:d0:6f:6a:22:81:
                    64:6c:c5:02:7a:9a:c9:3e:9b:62:7f:e5:d1:1e:64:
                    af:9e:ce:3b:51:d4:ce:a0:4f:21:f4:8f:ab:39:f3:
                    01:09:79:88:75:61:00:c6:e8:86:1b:46:96:54:5f:
                    d6:68:f3:43:bc:e3:4c:1c:1e:bf:16:3e:49:26:2d:
                    2c:36:28:7a:7d:bd:e7:3d:41:f0:c0:ca:73:73:9e:
                    d8:83:9d:c5:a1:36:d6:24:c9:60:59:9c:c6:f5:2d:
                    82:52:e9:e2:75:f2:f6:f1:ba:25:ce:e2:fb:bd:d7:
                    13:cf:5f:cb:95:56:15:77:2d:82:f7:fd:89:fa:1b:
                    71:a1:35:6d:7e:d3:0a:13:08:a3:50:11:ce:e2:e9:
                    f0:bc:d7:67:44:26:ee:b0:1f:4b:96:32:da:99:21:
                    d4:1f:97:91:30:a3:32:8c:28:e6:8b:24:c5:67:08:
                    94:c8:db:e7:9e:f9:40:83:3c:7b:88:59:ca:89:ff:
                    00:ff:67:4c:8c:d4:d9:df:86:39:a4:33:14:2f:b1:
                    43:66:93:4c:40:15:ac:a3:c3:5a:fa:9e:b5:be:13:
                    f0:15:5e:ca:3f:28:9c:eb:9d:6f:9e:76:76:81:b5:
                    d2:3d:75:30:79:f7:02:39:1c:b0:b5:cc:c0:5d:1f:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:36:F9:54:1B:1B:2A:AA:FD:5F:25:E0:F9:63:BB:F7:47:62:96:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8b313345-934f-31ae-aa57-0d4e38da8778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:db:6f:5e:e7:eb:cf:af:01:19:e8:e4:af:eb:ad:72:6e:
         61:90:72:71:eb:88:02:d1:9c:3b:b7:39:95:f1:f9:2d:2c:0c:
         0e:dc:84:f5:86:cf:19:b6:76:07:6a:c1:b2:a2:ec:db:de:87:
         fc:c8:ab:a1:c1:c4:d5:80:da:17:eb:56:b1:b5:db:66:1c:5f:
         44:f6:6d:b1:5f:1b:42:75:e2:ca:80:e2:9d:7d:79:98:3c:61:
         03:2f:ef:a4:29:9e:75:93:6e:e8:30:a9:6c:11:e1:3f:f7:9f:
         54:76:67:6c:a9:8b:85:ea:98:89:84:b4:55:ce:fd:4e:0d:a5:
         ed:37:13:68:30:ce:dc:9e:fc:06:fd:71:1a:9b:bf:3a:21:59:
         ed:90:ed:43:74:bb:09:ec:b7:4c:5e:11:45:43:1e:ea:f3:de:
         ea:cf:84:7a:bb:14:73:2c:fb:c2:32:5d:b1:bd:6a:27:6a:55:
         9d:d3:44:e4:3c:32:7c:83:78:6a:35:9e:72:4f:c3:77:17:28:
         1c:6d:89:e8:b5:21:17:8a:be:61:47:16:0f:18:d9:10:7b:b4:
         dd:b0:d1:a3:a1:8e:c3:03:2b:55:8b:9a:ad:88:33:1f:f9:e7:
         85:cb:69:15:86:52:f7:fd:39:0f:74:b5:24:7f:b1:54:58:b1:
         df:20:f4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:23:36 2026 by rpki-client