Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa
File:                     9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa (raw, json)
Hash identifier:          mkTO+HG2yvtRHDdeGCs4WWBV17KAb+zgGcx1MA3C6Go=
Subject key identifier:   5F:DF:9F:EE:30:0E:37:93:A9:AB:23:2D:1A:15:16:3A:3C:DF:AA:F7
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584E35FF123224E72716725EF900
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     25649
IP address blocks:        143.55.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:12:32:24:e7:27:16:72:5e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=1f9045e8-5add-4805-8552-3043c8a964bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:00:c9:e8:76:19:9f:76:ed:a2:10:6e:35:
                    f7:67:87:8a:14:60:24:07:db:52:7a:40:92:e9:ca:
                    14:b7:1f:81:10:db:b4:b1:53:d4:90:82:25:d1:57:
                    ae:39:94:81:86:70:7d:6a:74:3a:99:5c:b3:0e:47:
                    12:2f:19:86:37:aa:ff:e7:76:4e:0d:be:b7:f7:6f:
                    88:f8:2f:4d:ae:87:ab:33:a2:47:21:bb:f0:06:9f:
                    91:a3:79:2c:cb:4a:cd:25:8d:33:0c:f7:f1:8f:3f:
                    f3:e2:3c:54:97:57:7c:e4:2b:21:93:d8:d1:0e:3f:
                    b9:91:00:b5:31:bf:8d:81:98:5e:6f:0e:40:36:68:
                    c0:89:a1:81:75:c0:85:ed:61:39:d2:02:cc:8c:c8:
                    82:fd:83:93:7c:66:38:67:3c:ce:93:ea:e2:10:8c:
                    61:f4:e7:15:dc:68:33:b9:86:a9:28:d0:ba:88:2f:
                    50:fa:3a:6c:47:fd:b4:2c:18:bf:d4:b9:0b:cb:fa:
                    b4:e5:7f:75:22:ec:dd:60:1b:51:29:0b:f2:e7:c1:
                    7e:23:e1:02:a4:d2:a5:4d:ba:7b:98:62:ce:07:16:
                    9e:23:d6:58:ef:1e:41:75:86:b2:11:74:bd:ad:75:
                    92:94:12:3b:00:62:6b:9d:d3:25:3d:30:d0:49:6c:
                    63:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DF:9F:EE:30:0E:37:93:A9:AB:23:2D:1A:15:16:3A:3C:DF:AA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:d7:3e:17:08:e3:7d:4e:7f:50:9e:bd:a7:d5:d7:9e:b5:
         11:95:ff:02:43:18:8b:2d:4e:f2:42:eb:ba:76:93:67:95:28:
         c7:2f:ae:ff:22:1a:74:0a:53:ff:5a:b4:6e:1d:f1:81:76:a1:
         2b:4b:77:81:a9:74:f0:15:d3:21:6b:7b:42:7b:94:53:5c:ed:
         6c:fc:56:6f:07:8b:e1:36:30:94:f9:86:5c:23:74:77:a8:71:
         95:b6:48:e6:a5:25:b8:a0:79:70:09:6d:b7:dc:7a:64:1f:b3:
         9d:d5:68:7b:a4:5e:08:50:40:25:89:71:fc:3b:c1:ad:13:e6:
         3a:68:62:e0:de:45:e8:27:b3:99:10:ba:e7:f5:5c:35:d1:5c:
         81:0c:88:3e:8b:a1:69:1d:32:44:ad:e8:4c:42:6d:d2:35:25:
         7c:60:3d:be:27:ff:be:d0:65:d6:00:a6:e6:9b:01:7e:00:12:
         6f:be:09:56:32:d9:69:d8:82:13:d0:ba:c3:13:9b:17:37:58:
         d1:0c:35:6b:26:38:8d:32:83:fc:29:1b:cc:a5:8b:eb:9d:93:
         56:38:d8:4e:9e:5d:83:3d:ef:92:16:dd:6a:f6:b8:b3:18:25:
         84:5a:d0:a2:8f:47:da:64:01:7d:9a:82:bc:ca:7c:04:55:0f:
         a6:4c:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:47:11 2026 by rpki-client