Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa
File:                     a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa (raw, json)
Hash identifier:          Z+TrrbLwUK4UBLpN6tsBBMC6Wu3LpmcsAsTziBZ4G9A=
Subject key identifier:   2F:FA:A2:EF:65:48:27:A0:51:76:50:2D:A8:57:69:10:2E:FA:DA:90
Certificate issuer:       /CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c
Certificate serial:       010D0C9F4328584EF5B20AB19FF49ADF78C1D6C0
Authority key identifier: 6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     399468
IP address blocks:        131.143.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:0a:b1:9f:f4:9a:df:78:c1:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=a90bde0b-8f84-4add-a938-f1be89a73f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:76:a6:77:89:bf:49:4a:1a:43:c5:8f:97:
                    ea:ee:50:87:e5:dd:e6:f8:86:44:fd:fd:03:c6:c5:
                    f2:b7:07:29:01:63:31:c6:19:cc:a6:c0:4b:98:44:
                    d3:f9:84:84:94:89:fb:cf:45:8d:96:f4:6b:86:80:
                    0a:46:20:e9:a5:b3:af:12:6f:75:c3:59:a0:23:a3:
                    31:f1:d7:64:7e:58:db:a4:28:7c:66:9a:cd:cf:96:
                    87:15:52:fc:19:c6:85:f0:bc:1d:23:d7:ed:5f:98:
                    84:fc:17:1d:fc:71:87:d5:5b:75:77:84:b0:c1:ba:
                    34:e9:76:1d:91:f9:a6:a0:9d:10:48:ef:5a:bd:6a:
                    44:ca:f1:29:ba:0c:50:b4:61:8a:bf:cd:37:b9:fd:
                    06:d0:25:1a:d5:31:ff:e1:91:75:a6:83:b8:c6:c9:
                    d5:27:b3:db:39:13:c2:c6:29:f2:64:96:64:6f:84:
                    12:45:47:8a:91:9a:c1:5d:56:1b:28:fb:db:5a:91:
                    ea:26:bb:ec:d6:c5:38:6b:be:12:3a:55:0a:db:26:
                    a4:c1:34:14:83:ec:de:44:f6:3c:97:d4:09:dc:d8:
                    50:d3:0e:fc:72:2a:5a:ad:bb:4a:c5:1d:d0:8e:54:
                    71:be:a6:86:8a:cf:dd:5b:bb:b9:f8:0d:40:0e:99:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FA:A2:EF:65:48:27:A0:51:76:50:2D:A8:57:69:10:2E:FA:DA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.crl

            X509v3 Authority Key Identifier:
                keyid:6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:a2:ea:8d:eb:e4:81:28:a8:e1:d0:95:8c:2d:7a:cd:d4:
         26:19:b1:e8:48:93:6f:68:07:fe:92:b0:fe:6d:e9:45:2c:ff:
         b1:5e:9f:0e:27:4e:e8:31:4b:04:66:df:e6:50:11:96:b3:da:
         64:83:9e:81:fb:32:12:96:61:8d:4d:5c:08:59:c4:1f:d0:f1:
         f2:77:78:07:c3:04:c9:b1:50:19:4c:3f:fc:40:fb:18:f3:72:
         4d:8c:c1:d1:f3:72:52:e4:02:da:9a:0d:9d:63:e0:b0:e4:7b:
         f6:03:c1:0e:8c:55:00:a5:a2:7e:ea:4f:da:80:eb:a0:38:40:
         b4:2f:cd:d0:9f:c7:76:87:d5:f0:fd:96:c0:ac:98:14:a0:55:
         f7:af:75:b9:f8:9a:37:b4:1c:a3:d2:b2:f1:1c:cb:5a:97:6c:
         04:58:3b:a1:b0:82:f6:1d:7e:47:eb:ca:19:84:39:9b:22:a8:
         99:09:ac:39:37:8c:f1:a0:12:44:06:ac:cd:c9:03:ac:20:e4:
         de:d1:d9:32:a9:21:35:f2:a8:0f:c7:2c:58:35:d9:65:e6:b2:
         93:6b:7d:11:50:0d:c0:92:7d:2f:c8:77:98:ad:7b:fc:c6:32:
         72:92:aa:62:a6:13:d2:51:54:2c:7c:da:2e:8f:04:03:d0:01:
         61:4a:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:25:23 2026 by rpki-client