Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa
File:                     dd490af9-ff16-3d5a-811d-3c00340dee95.roa (raw, json)
Hash identifier:          VNEBoR9N1Uyj03uk1oxRB01OfKx0ulAQVNuYNOkjZU4=
Subject key identifier:   AD:4E:73:9F:3B:E0:C7:34:CD:F4:C8:23:7E:4A:22:81:F2:2A:C8:77
Certificate issuer:       /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3
Certificate serial:       010D0C9F4328584E58E4978848472882D4C5B480
Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa
Signing time:             Tue 30 Jun 2026 21:00:12 +0000
ROA not before:           Tue 30 Jun 2026 21:00:12 +0000
ROA not after:            Mon 28 Sep 2026 21:00:12 +0000
asID:                     5650
IP address blocks:        131.143.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:e4:97:88:48:47:28:82:d4:c5:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3
        Validity
            Not Before: Jun 30 21:00:12 2026 GMT
            Not After : Sep 28 21:00:12 2026 GMT
        Subject: CN=9ae5b214-f3a6-466f-be57-fa203fe3e288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:55:72:93:31:44:a6:a8:98:1d:27:6a:84:
                    32:1d:25:6e:29:8a:83:36:e2:fe:f3:75:b2:c2:85:
                    83:a0:a5:dd:0d:3d:c7:ac:d0:f0:74:d4:f7:1d:dc:
                    4b:e9:b3:a0:ca:09:83:ed:fb:cd:50:54:74:41:fc:
                    b1:3f:90:f3:5c:15:bc:a3:ee:97:ae:fe:87:e6:4f:
                    aa:4e:58:3d:b9:ca:e8:44:d4:6c:e1:ce:22:04:11:
                    a7:10:6d:cc:9d:81:65:2c:c5:96:b6:04:d6:00:cc:
                    1c:82:20:ea:b7:40:cf:01:d6:ec:bd:06:10:bc:86:
                    4f:0f:c6:5e:30:a3:55:80:c5:eb:1d:2a:6b:9c:13:
                    3a:29:1f:c7:7b:c6:30:fd:8c:5a:0b:64:29:17:ad:
                    28:33:35:e1:c9:12:e3:d4:2c:e5:f3:3b:86:7f:37:
                    8d:7b:07:d1:93:ed:8e:57:a8:bd:46:b8:e8:b8:17:
                    cd:f1:70:8b:3a:aa:3c:e2:f5:87:4f:74:5f:ab:56:
                    8c:e3:cd:e7:97:e2:b6:13:9a:36:f8:73:88:23:e9:
                    c9:ab:28:c2:f4:d3:48:18:75:72:ae:c7:41:61:ba:
                    4b:18:65:1c:31:bb:0c:8e:d6:06:e5:5e:cc:26:a4:
                    92:68:f2:5a:42:3d:45:0b:2e:1f:04:87:e1:87:f8:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4E:73:9F:3B:E0:C7:34:CD:F4:C8:23:7E:4A:22:81:F2:2A:C8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl

            X509v3 Authority Key Identifier:
                keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:50:aa:46:df:75:ca:70:a1:c7:dc:0d:69:f7:bd:94:12:be:
         73:f0:09:e7:13:2c:d6:d5:bf:9b:77:01:a4:6d:96:3c:e3:78:
         ea:79:2d:f4:5d:fe:1a:65:6a:b3:1f:94:3c:c3:45:69:b8:2d:
         f6:6b:fe:6a:b2:d6:ca:65:54:77:5c:65:5c:aa:28:23:e8:61:
         49:3e:a1:c4:53:1b:4f:d1:bf:05:6c:e6:a0:a5:50:f6:b7:5e:
         91:58:9d:d4:be:ea:70:1f:94:08:f3:67:28:60:49:6a:90:29:
         eb:be:e0:10:4f:49:21:37:78:18:c9:9c:e1:28:62:1e:22:8b:
         d5:7d:e0:f2:39:47:ff:7d:9b:d8:6a:46:30:6d:c3:ed:48:e2:
         ea:b8:d2:7f:67:15:5f:76:e4:2d:ce:bb:bc:6d:df:55:e7:11:
         57:64:fc:c9:b9:82:cd:ab:7a:73:94:14:f3:e7:56:a0:ae:14:
         46:8a:7b:15:b7:13:48:d2:62:fe:de:85:81:75:fe:dd:81:8c:
         a7:4d:7a:fc:e6:97:9f:7e:e9:1e:1f:22:86:8f:7a:c4:da:e8:
         17:fd:8c:d2:71:de:d0:9f:51:be:fa:90:e4:4a:fe:4d:b3:00:
         b6:51:9d:19:97:24:bf:3a:c0:f0:02:ce:73:6c:18:f6:e4:38:
         9f:da:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:49:54 2026 by rpki-client