Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/b8218469-156f-3e98-94f1-df82bfc8463b.roa
File:                     b8218469-156f-3e98-94f1-df82bfc8463b.roa (raw, json)
Hash identifier:          5da9392WcDZ8vDL+g6wVVerK/NETma1Ua1cMezUql9c=
Subject key identifier:   98:44:97:75:5B:1C:19:9D:6E:68:7C:2F:A8:4E:28:47:69:6E:B7:FA
Certificate issuer:       /CN=6851dce3-9572-4e18-8d38-8815a366e21c
Certificate serial:       010D0C9F4328584D791635D803B6539B19939340
Authority key identifier: 4F:65:B1:22:EF:40:E6:20:AE:2C:78:A1:25:2E:7E:3F:46:D6:81:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/b8218469-156f-3e98-94f1-df82bfc8463b.roa
Signing time:             Sat 11 Apr 2026 16:59:08 +0000
ROA not before:           Sat 11 Apr 2026 16:59:08 +0000
ROA not after:            Wed 08 Jul 2026 11:29:43 +0000
asID:                     399468
IP address blocks:        131.143.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:79:16:35:d8:03:b6:53:9b:19:93:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6851dce3-9572-4e18-8d38-8815a366e21c
        Validity
            Not Before: Apr 11 16:59:08 2026 GMT
            Not After : Jul  8 11:29:43 2026 GMT
        Subject: CN=4dce9fd9-d8b7-470a-9c6c-61d93b14b53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0c:48:b2:0d:ff:04:56:af:4d:e8:8b:b9:8d:
                    bb:b7:29:4f:45:a9:3c:4c:f1:75:0a:d3:c0:a6:23:
                    13:a4:5b:85:fb:f2:41:48:3f:ce:ac:41:7b:7a:2e:
                    02:91:5c:97:68:97:b8:1e:e6:e4:2a:56:8c:cb:90:
                    be:0e:02:81:e6:fe:3d:2d:37:b8:ef:1d:27:6f:a7:
                    d4:ae:f3:d3:f6:ec:cb:0b:62:ae:da:de:75:7a:ee:
                    01:98:41:60:6d:4d:fa:9d:fc:8c:20:01:63:4f:75:
                    64:c8:fa:ea:9c:39:56:25:a5:f6:59:c3:6f:a9:b0:
                    c6:02:fb:81:69:f2:f6:3a:27:ea:da:a0:1b:63:33:
                    be:b0:5c:60:f6:6f:56:bf:aa:6a:3d:8f:d1:c0:2e:
                    10:08:72:e5:f7:2c:e2:ca:0a:f8:48:f6:27:eb:b8:
                    84:7f:25:af:4a:05:79:01:53:e0:30:dc:4b:88:81:
                    7a:82:c3:bd:b7:ce:af:c8:d2:bb:b2:63:b9:f0:ae:
                    62:e1:14:8f:db:6f:be:db:76:a5:a0:82:b4:d9:2f:
                    35:9f:68:ad:f1:87:29:c2:f5:a6:03:d5:07:c3:cb:
                    7e:e4:b3:0d:11:2f:ad:89:48:41:7b:1f:56:d6:66:
                    39:43:d8:18:0c:7d:c0:66:15:4d:e1:5c:e3:05:77:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:97:75:5B:1C:19:9D:6E:68:7C:2F:A8:4E:28:47:69:6E:B7:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/b8218469-156f-3e98-94f1-df82bfc8463b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:65:B1:22:EF:40:E6:20:AE:2C:78:A1:25:2E:7E:3F:46:D6:81:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:31:85:79:58:ab:db:25:e1:7c:83:a4:09:95:37:23:9b:30:
         75:aa:6b:87:e6:d5:57:20:43:9f:ef:54:92:74:96:9b:b5:4e:
         de:21:09:81:dc:54:7c:a4:6c:d9:82:21:8d:f7:7d:b3:8b:de:
         c9:4e:f4:96:ed:f5:7f:ce:90:e7:64:ce:49:34:11:da:58:95:
         5c:82:c6:94:fb:1c:4c:3e:09:d0:25:42:89:87:7a:69:6c:86:
         bc:39:36:73:e2:2a:80:55:99:cb:47:c5:8b:f4:c5:fd:d4:f2:
         2d:81:48:2d:3f:cc:da:23:39:8b:35:39:1d:55:c3:68:26:07:
         6d:ad:96:3c:5c:fe:4a:a9:02:c2:2e:db:d1:01:ee:1d:27:b4:
         01:ba:9e:48:c1:be:6e:63:89:ea:ea:bc:c5:00:f1:62:34:ca:
         bb:eb:84:7b:9e:8c:c2:9f:ba:3c:ad:f0:65:05:bf:dc:ba:25:
         8b:20:a8:88:eb:26:12:1c:e9:c1:c5:20:e9:1f:ee:76:13:9f:
         a5:1a:69:ed:6c:b4:ed:2a:cb:8d:eb:43:21:b2:18:cb:ad:9a:
         05:d7:85:21:56:43:2f:98:1b:3a:b0:4f:fc:b5:d2:90:c9:95:
         2a:d9:fe:3f:bc:ba:5a:15:50:2a:ce:40:6e:79:16:51:a4:f9:
         e7:84:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:08:00 2026 by rpki-client