Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7/6b727b04-89c4-3e55-ba9b-9cdf1ae40f86.roa
File:                     6b727b04-89c4-3e55-ba9b-9cdf1ae40f86.roa (raw, json)
Hash identifier:          qwsCMXTa8z622Vfbah9GB7tVvtZo0e7zGvqzr9xMzEg=
Subject key identifier:   E4:D5:0D:9E:DC:68:45:29:B5:EA:02:6D:A0:DA:10:23:D4:2E:12:A0
Certificate issuer:       /CN=f6affd2b-413d-4a49-a056-fbcc911df0f7
Certificate serial:       010D0C9F4328584EB417038254383339989C9880
Authority key identifier: 36:86:C6:31:85:37:39:7C:7A:A4:C3:2A:AB:55:3C:FB:A7:0B:47:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7/6b727b04-89c4-3e55-ba9b-9cdf1ae40f86.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     396982
IP address blocks:        131.143.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7/f6affd2b-413d-4a49-a056-fbcc911df0f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7/f6affd2b-413d-4a49-a056-fbcc911df0f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:17:03:82:54:38:33:39:98:9c:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6affd2b-413d-4a49-a056-fbcc911df0f7
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=a44a67fe-0923-4649-8b1f-fbed2ec12446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:bd:ef:df:f0:3a:8b:8e:15:80:60:88:ae:
                    66:02:80:ad:5b:2a:73:e5:15:a6:ef:84:7b:41:e2:
                    3a:b0:e8:b0:78:c3:82:64:ea:8f:02:70:27:1c:ea:
                    51:dd:2a:fd:63:f4:f9:ef:f7:16:65:0e:9e:81:3f:
                    30:d0:dc:be:50:ad:2f:9d:48:10:12:59:44:30:28:
                    7c:c9:35:30:15:c3:6b:bd:59:f1:e8:fc:77:42:c5:
                    f0:1e:ef:b8:9f:48:49:4d:de:9b:96:cf:56:ed:38:
                    c2:1a:ef:c4:75:c2:84:98:ca:82:ee:c6:f4:b1:98:
                    3d:0c:e6:d9:88:39:fe:a5:54:e8:23:13:8b:98:6c:
                    f0:f9:a1:7e:bb:81:0d:4c:e7:ef:f7:33:83:43:6e:
                    68:9a:c0:a8:66:76:07:8a:1e:47:17:70:f7:1d:0d:
                    2d:9f:69:b8:64:9a:00:6a:db:8e:b4:2b:98:ba:cc:
                    be:39:36:10:87:84:43:4b:ef:5a:07:41:14:c9:f2:
                    a7:45:a3:7a:87:8d:c9:f9:ad:ab:72:c4:96:7a:38:
                    bc:7a:b6:26:98:3a:ea:03:9f:d4:d0:83:24:26:11:
                    6a:39:61:09:67:f4:db:81:03:25:6f:73:d2:1d:ea:
                    d3:74:d6:fa:08:84:08:d4:fc:f7:48:7d:77:51:bb:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D5:0D:9E:DC:68:45:29:B5:EA:02:6D:A0:DA:10:23:D4:2E:12:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7/6b727b04-89c4-3e55-ba9b-9cdf1ae40f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7/f6affd2b-413d-4a49-a056-fbcc911df0f7.crl

            X509v3 Authority Key Identifier:
                keyid:36:86:C6:31:85:37:39:7C:7A:A4:C3:2A:AB:55:3C:FB:A7:0B:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f6affd2b-413d-4a49-a056-fbcc911df0f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:36:85:8d:58:01:de:a0:fc:d5:c5:d9:ed:13:00:17:9b:
         b4:ab:51:f1:1a:a7:c5:ac:5f:81:35:ae:fa:58:86:81:c1:5a:
         fd:8e:92:1b:74:a6:e8:74:38:31:45:b2:1b:47:96:1d:7f:da:
         9e:8e:2b:0f:43:56:fe:1e:7c:0d:0a:11:7a:9d:a1:95:2b:f3:
         4b:36:b6:e4:7a:44:69:e1:8e:b9:da:0e:ad:b9:7c:e1:65:ff:
         f6:df:64:a3:31:ff:42:65:19:62:03:4a:da:d7:69:10:47:3a:
         d9:ba:a7:71:66:3a:e6:35:62:43:7b:cf:8a:32:8c:67:c0:46:
         fd:ec:bd:0b:c8:7d:ff:27:d6:db:68:6f:98:74:4a:4e:0b:55:
         4a:6b:e1:ef:9f:6f:1a:e4:c0:78:51:ee:c2:e9:1c:83:13:9e:
         b5:7c:94:ea:18:ba:03:f9:91:4a:bc:39:24:92:2d:0e:8c:eb:
         e9:5a:80:79:4a:39:5d:99:fa:d6:21:d5:c9:b1:82:be:dd:dd:
         25:3c:6b:45:d5:b2:f1:ce:6c:d8:99:c0:db:a0:7e:a4:40:3b:
         2b:f3:ff:99:bd:ab:d0:ff:53:51:1c:d4:fc:92:ff:24:ac:5e:
         0b:a9:8d:2e:30:45:d0:f4:b0:82:e8:27:57:95:fb:d5:a3:52:
         f2:9f:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:57 2026 by rpki-client