Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa
File:                     dd490af9-ff16-3d5a-811d-3c00340dee95.roa (raw, json)
Hash identifier:          inpdcYKNAKHAusqwSmYdQnio3DFEQZGl8cTtfNm5Fq8=
Subject key identifier:   FB:20:5A:E9:68:74:A0:4C:57:37:0E:1E:C8:75:86:9D:A6:87:25:25
Certificate issuer:       /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3
Certificate serial:       010D0C9F4328584EFB47657F2460A74B5A7D9D80
Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        131.143.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:65:7f:24:60:a7:4b:5a:7d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=2ef37a08-9e91-4f7f-b8b2-b8d428e7dea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:ef:c9:e3:30:ca:09:b4:65:81:08:b2:05:
                    3a:90:8f:3f:70:bb:ce:1e:54:85:57:de:bb:f1:5e:
                    4b:84:b9:d6:85:2d:11:68:7c:13:bd:e6:ce:05:cd:
                    b0:88:ad:ab:62:17:7a:a9:13:61:4a:6f:1f:52:0a:
                    d1:e5:c6:2b:7f:34:6d:4d:ad:af:69:12:89:e4:85:
                    29:ce:d6:a0:e8:25:d6:8d:b8:16:46:58:5b:64:1a:
                    7e:b0:b8:9a:6e:7b:fb:3f:88:69:62:62:9b:1d:9b:
                    fa:ad:d4:aa:dd:31:fc:cb:6c:5a:60:88:b5:83:14:
                    cf:8b:c1:75:20:fe:fd:88:83:cd:74:96:74:ab:d5:
                    00:2d:e8:fc:eb:86:4f:9b:18:aa:a2:d8:ad:ce:56:
                    02:12:6b:39:c9:c3:05:7b:9e:6a:a3:e6:47:f4:dd:
                    52:ee:f5:2e:5c:0a:76:49:eb:6b:d7:dc:b1:0e:ca:
                    ab:4f:f1:f7:02:3f:80:d1:b3:49:37:ca:71:aa:a4:
                    0f:cb:15:bc:e6:c4:82:ff:1c:99:22:0a:eb:f6:52:
                    c1:9a:17:27:1d:12:bc:a6:bb:da:f1:64:b9:a4:40:
                    16:d2:80:55:60:0d:34:30:39:1f:de:75:33:ce:ef:
                    58:27:cc:9e:ca:19:3b:4f:20:ab:14:c8:d4:c0:4d:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:20:5A:E9:68:74:A0:4C:57:37:0E:1E:C8:75:86:9D:A6:87:25:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl

            X509v3 Authority Key Identifier:
                keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:5a:3a:93:5c:c8:68:4e:09:0c:78:fb:b6:0f:67:6f:2e:
         2e:ad:3e:45:b3:7d:22:25:cf:dd:56:29:bf:4d:72:37:23:ee:
         5b:a1:6a:a4:85:bd:61:b8:5d:48:0a:e1:19:e8:11:2d:80:a9:
         95:b9:2b:1f:0d:f2:53:26:78:8f:94:a1:5e:5f:33:9c:3b:98:
         78:52:04:40:22:97:95:89:d1:53:b7:36:af:c3:ac:89:16:52:
         8b:cd:6e:16:c7:d2:f6:0a:41:98:28:88:d4:55:2a:d1:19:ea:
         24:51:b1:58:5f:c7:d3:e4:9c:39:59:0b:b6:e7:6e:29:97:aa:
         47:4f:25:8b:fd:8f:1f:5b:45:9b:cf:07:53:9e:40:2a:ed:1d:
         4a:de:3d:1a:b1:bd:b3:9c:76:2b:8a:a5:34:11:51:8a:6a:9d:
         df:86:71:44:a5:df:82:98:2c:80:f5:87:fe:e9:87:93:1c:d5:
         e1:c4:d7:3d:2e:ce:d7:b4:f7:26:b3:2c:72:00:1d:77:98:87:
         57:be:60:94:5e:b4:c0:92:6f:6e:87:45:dd:e2:e9:e0:0e:91:
         71:25:ab:aa:6b:53:e8:fb:bf:0d:aa:bf:cb:93:53:94:ed:1e:
         21:38:86:70:dd:9f:5c:b0:14:9b:ee:ee:1b:d0:2b:04:0c:f3:
         04:bc:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:16 2026 by rpki-client