Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/290e34cf-89f5-3494-ae58-7a9041d7d975.roa
File:                     290e34cf-89f5-3494-ae58-7a9041d7d975.roa (raw, json)
Hash identifier:          oNUY5AJxJtDyPh9GOuAwRdt3nvtyqG3iAb88mm0F4Z0=
Subject key identifier:   68:DB:BF:D8:42:37:3B:7A:89:DD:F3:1E:CB:12:9B:EB:77:AE:A3:2F
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584E8DA22DF3E02031A6246B9080
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/290e34cf-89f5-3494-ae58-7a9041d7d975.roa
Signing time:             Sun 19 Jul 2026 18:24:16 +0000
ROA not before:           Sun 19 Jul 2026 18:24:16 +0000
ROA not after:            Sat 17 Oct 2026 18:24:16 +0000
asID:                     11404
IP address blocks:        63.142.144.0/20 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:a2:2d:f3:e0:20:31:a6:24:6b:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jul 19 18:24:16 2026 GMT
            Not After : Oct 17 18:24:16 2026 GMT
        Subject: CN=3deeccab-f9ff-45a4-8718-27c4b6725eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:9b:96:27:59:1b:43:16:6f:55:a0:c2:05:
                    18:b9:cf:e8:70:d6:9e:b4:e6:6a:3d:ed:30:99:66:
                    6a:59:0c:f1:64:91:5b:88:1a:14:91:d2:18:69:0a:
                    fb:09:08:b7:bc:dc:eb:97:b9:cf:6d:63:1b:3a:0b:
                    f7:da:c2:56:c6:ab:70:81:bc:b4:64:f9:b7:b2:fa:
                    a7:4a:f1:d2:fc:23:55:22:7a:80:10:e3:48:ec:40:
                    aa:f9:d2:c6:bb:3c:22:82:a9:99:85:65:55:f3:ee:
                    d3:8f:34:c5:da:00:4e:a8:e9:1e:a1:23:7f:82:3e:
                    0a:5d:6e:67:2a:b3:5c:e3:b8:d1:71:61:14:1c:4f:
                    94:31:a4:c1:73:25:5a:0a:5d:78:e4:6a:a2:fb:c9:
                    ca:b3:11:7c:64:0b:28:8d:03:d0:0a:0c:9b:9d:0e:
                    22:9b:ef:99:63:60:b8:fe:b0:29:4b:42:33:24:1c:
                    6c:6f:b6:4a:f6:f0:6f:62:e0:14:20:d1:25:30:b6:
                    1d:31:0c:a2:42:74:0a:7c:9a:92:bd:cf:a7:59:21:
                    17:54:de:69:0f:1d:e6:00:f0:7e:9c:96:6c:b8:33:
                    76:3a:5e:ef:99:f8:e8:eb:2d:74:03:64:f1:3e:19:
                    96:5a:19:e9:90:3c:ba:1f:22:b1:dc:65:65:f9:8f:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DB:BF:D8:42:37:3B:7A:89:DD:F3:1E:CB:12:9B:EB:77:AE:A3:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/290e34cf-89f5-3494-ae58-7a9041d7d975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b2:3c:e4:f5:d6:87:cc:b5:80:9a:95:8c:5c:fd:c3:c5:75:
         34:04:1b:85:8f:d3:fb:1c:16:e7:34:14:13:32:6f:7b:f1:15:
         19:af:df:51:83:46:17:1a:35:ce:22:c1:9a:50:1b:29:24:1f:
         d3:39:e4:ae:09:7b:39:c1:0a:19:69:7d:03:8e:7d:57:5a:91:
         40:ce:44:2f:6f:06:c1:bb:e5:eb:70:09:fc:f1:e1:5c:6d:ef:
         7d:c7:c4:ec:e5:62:29:e1:a6:be:01:be:0b:1b:ca:3d:38:cf:
         3d:04:ba:81:0c:0b:59:f7:14:74:14:cb:e8:34:40:4f:09:9c:
         06:54:ea:0f:72:1d:67:6e:76:b2:b3:37:8b:58:46:45:48:6d:
         91:0d:8a:c9:cf:7a:f8:90:bc:f6:f9:63:61:52:13:e6:38:56:
         d3:b7:ab:4b:46:2b:23:3f:80:e8:ba:44:e1:9f:aa:d1:c8:54:
         9a:21:8f:97:d0:32:d4:97:f3:d8:8c:97:3d:0f:99:93:eb:c8:
         78:a6:ea:0a:b6:12:80:43:94:c4:04:74:ed:d1:6f:12:1f:3a:
         16:23:b0:97:e2:8d:a2:ff:88:d9:58:0c:25:16:ac:e1:93:3e:
         0f:29:68:de:07:ea:b0:a8:8f:89:07:66:3b:b8:72:c5:0e:92:
         0b:d1:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:31 2026 by rpki-client