Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/20f774f6-19be-368b-8390-f1a839a6bbb9.roa
File:                     20f774f6-19be-368b-8390-f1a839a6bbb9.roa (raw, json)
Hash identifier:          Zknng1mqsnFtO2zblRkyY04NB8AABsZQ92BgIBvUOOM=
Subject key identifier:   44:FC:A7:6A:BC:63:44:9E:29:BC:C8:13:6C:35:9C:41:D0:2D:5B:4D
Certificate issuer:       /CN=1ff41215-3026-434d-963c-327afdcf5cbe
Certificate serial:       010D0C9F4328584EBF6EF3A33FBDE95976B6FE80
Authority key identifier: AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/20f774f6-19be-368b-8390-f1a839a6bbb9.roa
Signing time:             Thu 06 Aug 2026 14:31:28 +0000
ROA not before:           Thu 06 Aug 2026 14:31:28 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        164.153.143.0/24 maxlen: 24
                          2607:d0c0:cffe::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:6e:f3:a3:3f:bd:e9:59:76:b6:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff41215-3026-434d-963c-327afdcf5cbe
        Validity
            Not Before: Aug  6 14:31:28 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3f43c71d-9aac-4da1-8487-8cd8bdedb9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:68:35:0f:43:66:e0:41:7f:f8:06:bc:64:
                    2b:51:e8:5d:6b:c7:9b:f1:1b:d0:dd:07:62:8a:b7:
                    72:c0:df:bf:e6:cb:74:e7:29:84:16:4c:58:ff:ee:
                    08:89:85:59:aa:bd:d0:50:f9:e6:5b:1f:a6:6d:45:
                    64:e0:1a:3f:29:53:60:bf:e2:a3:00:0c:36:33:6e:
                    72:33:91:4a:af:7a:0c:35:d8:d5:26:29:24:b2:36:
                    3b:9f:0f:b2:7c:64:0a:e4:36:21:83:28:b6:ee:f3:
                    42:78:c0:fe:39:95:5d:c2:bd:92:fc:6a:a7:1b:3a:
                    a2:2f:8c:43:54:9b:13:0a:a8:3c:95:30:0c:80:e9:
                    39:a2:b2:66:5f:dd:87:8b:13:41:b9:cc:62:2d:1b:
                    73:b6:16:75:a1:9c:6a:1b:50:61:c1:97:e0:0f:66:
                    da:d2:01:23:42:06:17:b7:90:bc:9a:3e:64:bc:17:
                    5a:84:9d:e7:8f:58:4c:59:89:d2:4e:70:4d:3f:3d:
                    14:d9:72:78:e9:b8:40:ca:b2:95:5a:12:70:a8:72:
                    bf:9a:6e:a6:25:c5:17:03:2e:f7:db:b4:d9:8d:e1:
                    98:f2:cd:d4:2a:62:df:5f:e8:e1:de:86:00:6d:e7:
                    dc:77:b0:2f:03:38:c3:09:a0:2f:a1:bf:e2:45:4a:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:A7:6A:BC:63:44:9E:29:BC:C8:13:6C:35:9C:41:D0:2D:5B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/20f774f6-19be-368b-8390-f1a839a6bbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl

            X509v3 Authority Key Identifier:
                keyid:AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.143.0/24
                IPv6:
                  2607:d0c0:cffe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e4:69:b6:b3:bc:c1:c6:7f:3c:8c:c4:c3:40:9f:4e:28:98:
         00:4c:cd:64:02:43:b5:8a:fc:b7:ac:26:02:01:6a:03:d4:a3:
         c7:df:a4:ea:a5:61:9c:88:08:dc:55:04:85:d3:65:7b:d9:d1:
         fa:ba:62:34:82:1f:6e:d5:d8:da:01:fd:f0:3f:0d:11:c1:87:
         b3:d0:e2:94:e2:93:d5:af:79:63:5c:f0:e0:52:14:a8:20:7b:
         8b:bb:75:a9:82:5b:37:b2:d0:1a:cd:52:a9:0f:a2:ab:fa:14:
         5d:ad:43:d2:bc:f4:9a:f2:55:c7:85:86:62:37:0d:e1:04:d5:
         b4:41:5f:3c:27:12:2e:a0:bd:89:4f:3a:85:83:87:d2:e1:40:
         5b:45:0f:c8:8a:06:23:ee:33:4d:c1:87:07:e0:b5:99:1e:03:
         87:ef:55:22:81:0a:92:58:67:e8:da:7d:31:63:53:82:d4:d9:
         92:20:3b:93:14:5a:70:37:9d:b8:27:3f:e1:04:ce:6a:a6:cc:
         34:ef:34:ba:4b:40:c8:87:a6:e1:62:c8:ba:ca:17:b9:4b:de:
         f4:e6:31:7e:c6:ff:7c:62:13:3a:f2:62:4e:fa:97:24:d3:e2:
         88:68:a7:46:cc:f8:b7:dc:a0:35:a7:92:83:68:63:fe:e4:a8:
         c1:ce:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:41:03 2026 by rpki-client