Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa
File:                     c56e8694-75c1-3f72-8741-dd71e0f83e20.roa (raw, json)
Hash identifier:          DRTwRRROpDsJc7/j/xeC1/uI0lE//CJz7WDS7OOJ0/k=
Subject key identifier:   63:AD:6E:CA:B6:09:8F:29:F3:8D:1B:1B:D5:59:E8:A1:4C:70:39:C3
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584EDC920881355529757E449180
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     23280
IP address blocks:        143.223.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:08:81:35:55:29:75:7e:44:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=9f7c1bb8-6578-4a4a-9cd5-2796ace508e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:92:00:49:df:30:cf:06:1d:cb:0a:b6:19:
                    17:83:6c:85:5e:1e:4e:f9:a9:f7:38:a3:6f:72:d5:
                    9b:42:47:3f:78:53:02:89:80:23:c6:45:21:c4:f8:
                    62:48:49:6d:ac:f7:cd:6c:51:5d:d3:66:1d:f2:d7:
                    d3:63:f0:ff:05:8e:03:33:10:e2:88:fa:34:0b:ac:
                    c2:68:8d:89:12:74:a2:8e:d0:85:91:98:ef:43:a0:
                    7f:84:19:40:70:0b:af:4b:e1:5a:91:4b:98:13:a1:
                    4d:0c:fc:ba:87:cf:54:e6:3f:ec:91:b9:fd:52:3e:
                    a2:5b:07:0d:ce:58:bd:64:2d:96:40:fb:c1:59:1d:
                    cf:02:de:74:3f:c2:00:de:5d:19:70:5a:46:8a:eb:
                    d7:04:17:0e:b7:a5:06:dc:14:f5:55:5e:3a:46:09:
                    c6:14:a1:6f:b7:9f:b4:98:94:5e:7f:ae:1f:ad:94:
                    4b:05:69:17:57:2d:dd:49:da:19:14:9b:95:87:e2:
                    34:8f:ba:03:0f:1e:c1:5f:51:1d:46:f1:82:85:7f:
                    51:3c:06:8c:67:4a:a3:4e:08:32:eb:b6:a3:36:8a:
                    2a:dd:3c:07:75:d4:c8:03:63:a0:f9:be:ce:66:de:
                    30:2b:87:74:1a:aa:4a:f6:f6:2c:bf:33:06:1e:4e:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AD:6E:CA:B6:09:8F:29:F3:8D:1B:1B:D5:59:E8:A1:4C:70:39:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a5:10:9d:2e:ec:dd:c8:76:2d:a9:dd:61:28:30:e4:be:76:
         2b:71:c5:69:65:50:60:6b:f1:73:82:df:1e:07:c1:32:e1:a1:
         f4:99:73:b3:a5:b0:fe:dc:bc:7c:e9:e1:22:70:6e:3f:ef:1e:
         5c:af:a9:f1:04:bf:49:f6:46:74:29:67:34:5e:3f:90:a1:d5:
         83:a8:9e:b1:65:bc:6c:5e:ab:55:94:91:53:76:28:22:39:d4:
         e8:79:31:b8:56:88:2a:65:4a:c2:94:04:a3:31:b1:cc:85:9e:
         42:42:cb:69:fa:24:f4:b9:e4:78:7a:aa:4e:37:7b:05:97:69:
         d1:7e:45:90:0c:41:ed:d8:59:43:f0:d5:b5:00:ca:97:ee:48:
         f2:51:c4:ff:b6:9b:f3:62:61:7e:98:e7:4f:34:cc:c8:c9:a4:
         e0:69:47:72:14:40:ab:56:fb:19:d2:e0:40:4c:b3:9d:d0:12:
         70:cf:4a:57:73:72:a2:ac:b6:b8:55:4f:6b:46:a8:cb:39:5b:
         da:a2:00:4b:b0:00:fc:f8:0b:46:26:92:76:a0:5d:58:f7:24:
         12:0c:71:1e:ff:c2:1a:69:29:77:e9:e6:7b:1f:67:2e:91:66:
         3e:67:53:f6:e1:eb:11:eb:60:90:c6:65:5a:c9:41:91:a1:8c:
         aa:9d:eb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:25 2026 by rpki-client