Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/ff4d5abf-ee67-3861-a3ee-cb77507bd014.roa
File:                     ff4d5abf-ee67-3861-a3ee-cb77507bd014.roa (raw, json)
Hash identifier:          XUzFp6gW5inK6uigOjoh71K4dvXvqvxVu/pzWSZMwa0=
Subject key identifier:   B5:63:0B:24:EF:C5:17:41:30:42:93:E9:B4:A4:31:80:CC:D2:97:9F
Certificate issuer:       /CN=54f335e9-72b0-4332-86a1-4a11593d7ef7
Certificate serial:       010D0C9F4328584EF06DF1068E058BD18CB0C180
Authority key identifier: 43:45:D2:28:E7:C6:DA:D1:82:D2:E1:A1:28:12:ED:E0:30:01:88:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/ff4d5abf-ee67-3861-a3ee-cb77507bd014.roa
Signing time:             Mon 24 Aug 2026 03:44:02 +0000
ROA not before:           Mon 24 Aug 2026 03:44:02 +0000
ROA not after:            Sun 22 Nov 2026 04:44:02 +0000
asID:                     2914
IP address blocks:        131.143.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:6d:f1:06:8e:05:8b:d1:8c:b0:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f335e9-72b0-4332-86a1-4a11593d7ef7
        Validity
            Not Before: Aug 24 03:44:02 2026 GMT
            Not After : Nov 22 04:44:02 2026 GMT
        Subject: CN=cd05b670-2de2-436a-822e-cd7603e1fd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:45:61:b0:d0:6e:95:d3:6b:1d:ba:b6:d7:
                    12:f7:99:be:5f:ee:f5:8e:8f:b9:67:7c:d9:4e:7d:
                    a9:75:22:38:09:a9:a6:cc:bb:75:2f:90:57:35:a9:
                    f3:13:aa:0e:b6:c9:99:8d:77:68:bc:aa:c0:0d:22:
                    a2:65:ee:98:6b:71:19:8d:ae:88:64:40:3a:63:e3:
                    53:3d:7f:e9:ba:83:3a:9c:06:83:8e:5c:eb:3c:62:
                    24:f6:62:e6:45:a6:7a:dc:36:81:cb:82:98:b5:7b:
                    35:4a:c3:71:6a:a5:f3:d2:3f:e8:38:24:a7:73:f3:
                    00:52:4c:5e:93:2a:68:4e:2e:f9:7f:2c:24:0e:e4:
                    8b:a7:26:8b:19:c3:cc:90:9c:f7:b0:8d:0c:0e:d3:
                    b0:b9:7f:3b:b0:e0:4e:69:07:2d:b3:60:bb:7e:b4:
                    d9:ac:f6:db:e3:1f:a3:7e:16:06:a5:a7:eb:02:8e:
                    4c:da:e3:13:e6:81:0a:69:ca:73:5b:55:72:b6:75:
                    c7:82:92:5b:2f:d6:4a:80:74:c4:16:d9:85:6d:99:
                    4e:92:97:c9:ba:17:75:50:a8:fe:a7:78:eb:dc:38:
                    bd:6c:12:a5:02:eb:01:bf:d1:c1:5f:b5:b8:5a:2e:
                    63:d9:b3:65:7b:03:a5:c5:04:f5:b3:ac:52:56:77:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:63:0B:24:EF:C5:17:41:30:42:93:E9:B4:A4:31:80:CC:D2:97:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/ff4d5abf-ee67-3861-a3ee-cb77507bd014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.crl

            X509v3 Authority Key Identifier:
                keyid:43:45:D2:28:E7:C6:DA:D1:82:D2:E1:A1:28:12:ED:E0:30:01:88:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b6:8d:8a:23:04:8b:20:76:6d:66:f2:ec:74:ee:9a:6b:a4:
         af:e4:1e:68:cf:3f:45:fe:55:2b:8b:00:31:30:c0:a7:8a:03:
         b2:cf:e2:52:1e:0b:cf:f7:34:25:ab:49:02:4b:90:38:84:2c:
         74:f3:40:97:ba:53:e4:02:8d:74:fe:ba:80:cf:39:65:58:c6:
         38:bf:4e:6c:10:76:b5:7a:05:13:9b:58:f2:2c:79:78:b9:01:
         2c:fe:8e:e5:d1:3f:58:1d:19:96:7d:77:2f:19:01:ea:38:24:
         fd:ad:eb:e7:a5:a4:10:d2:e7:bd:0a:6e:f6:37:a1:3f:74:14:
         fc:8f:1b:86:08:60:bb:0b:ce:2b:fa:fd:76:7b:05:85:4b:25:
         99:1f:e0:1c:31:eb:53:9f:53:fb:d7:0f:b4:e8:84:72:7a:59:
         b8:08:e5:be:0a:41:44:c4:16:5b:e5:4e:06:3c:d4:2e:85:1b:
         51:ba:92:2b:39:a8:20:c2:16:1f:b8:00:2c:94:3e:98:59:a3:
         2e:5c:a3:b8:6d:d8:6d:de:b3:cd:01:56:15:9c:3c:a2:c5:30:
         ad:b4:4e:08:ba:8a:3b:7a:d6:94:0f:5c:76:00:66:3b:ca:90:
         86:ff:00:87:d9:92:84:ff:26:5e:82:9d:e4:e0:61:d9:cd:51:
         dd:74:6d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:21:20 2026 by rpki-client