Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/d6a53574-302d-3ec3-8e49-4a53e1d1ee4c.roa
File:                     d6a53574-302d-3ec3-8e49-4a53e1d1ee4c.roa (raw, json)
Hash identifier:          /oB+61REd0gGC9wd/qtr0mUOJSDRCQBkoNPVkZ0LQZw=
Subject key identifier:   8D:EF:2C:CF:EB:66:85:8D:2B:0E:C6:E3:F5:10:15:E5:E2:98:8B:29
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584DD78B2813105DBB72EDE73480
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/d6a53574-302d-3ec3-8e49-4a53e1d1ee4c.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     56201
IP address blocks:        136.143.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:28:13:10:5d:bb:72:ed:e7:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=709227c0-6adb-4927-b79c-0d4d9d6bbfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:5e:c8:74:b2:38:f7:93:44:75:44:23:4b:
                    18:a6:d2:3a:9b:44:0c:07:a2:3a:f0:5e:ca:99:95:
                    7b:88:67:64:18:55:9d:b6:15:23:8e:ee:e8:bc:4a:
                    82:0c:47:14:a4:76:11:9d:bb:bd:86:01:b6:54:12:
                    8d:90:80:9d:61:2a:66:cf:64:4e:38:b9:d7:f5:f2:
                    b6:1d:14:47:eb:b8:bc:ac:fa:a0:bb:92:e9:7e:62:
                    cf:11:da:cd:b0:eb:3c:40:b1:fb:ef:e3:38:48:0e:
                    55:a1:4e:ea:88:52:78:7e:bb:be:38:f8:78:f7:94:
                    c0:f6:3f:1d:bf:48:04:39:ec:0e:83:22:0e:73:3a:
                    a8:69:39:08:16:f3:a6:2e:df:ab:86:13:69:ed:a7:
                    e8:42:12:f5:07:18:98:f4:33:1f:0f:2e:70:c1:1d:
                    8f:a6:14:3a:cb:5a:d7:4f:14:2a:a2:cf:47:6f:fa:
                    2e:b4:c0:c2:d5:f3:1f:0e:55:d5:80:d5:e1:ea:99:
                    ea:a4:f5:fd:56:0d:91:86:4a:99:ce:15:71:9c:87:
                    01:b0:3a:51:3e:d4:03:99:55:9a:75:b4:82:2d:06:
                    ad:95:66:60:ba:3d:cf:18:3b:47:6b:35:d3:5d:07:
                    99:a8:43:44:2b:e2:b0:57:c0:85:2a:59:36:9b:e0:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EF:2C:CF:EB:66:85:8D:2B:0E:C6:E3:F5:10:15:E5:E2:98:8B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/d6a53574-302d-3ec3-8e49-4a53e1d1ee4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:88:ef:1c:d9:d8:71:c2:3d:a3:46:50:db:5c:f6:91:3b:45:
         dc:4c:be:96:68:98:7a:58:10:7f:48:99:33:05:75:0b:3f:c0:
         ee:01:1b:06:36:c1:56:b4:e8:c8:86:64:af:4e:0a:72:ea:49:
         59:11:0e:ff:2e:f0:6e:fa:e5:0c:bb:e1:3f:27:2a:98:fb:01:
         77:99:c8:ca:09:f5:0e:35:2c:24:8d:7b:23:42:e5:fa:0f:51:
         ff:ee:5b:98:14:34:3c:3f:c9:0f:7f:1d:a0:90:bc:41:ff:16:
         f8:36:25:7a:08:2a:33:5e:ce:86:dc:db:ab:b0:46:70:cb:5b:
         2e:58:13:f0:bc:49:7a:9f:e4:c9:c1:6c:b3:98:f1:61:2e:00:
         a5:81:8b:75:d0:7f:df:4c:bf:e0:94:13:1c:10:3a:b8:72:15:
         29:db:8f:31:c6:b1:62:df:98:0e:af:95:48:96:f1:57:bf:b6:
         99:e7:1a:67:f9:bc:7b:ad:15:85:de:bd:3c:b5:4e:e2:e8:7d:
         53:10:6a:39:ae:c9:2e:4c:3b:7a:41:c6:fe:cf:b3:04:50:04:
         c8:2e:be:78:14:a1:78:cb:8b:e2:bd:e2:75:8b:f8:d4:c8:17:
         0b:16:cd:54:ca:f6:e7:fd:4b:0f:f0:73:f5:76:12:dd:86:ff:
         b8:ae:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:47 2026 by rpki-client