Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/41be6355-a82e-3f50-8f37-546d5186cb7c.roa
File:                     41be6355-a82e-3f50-8f37-546d5186cb7c.roa (raw, json)
Hash identifier:          50Ol1XeD1gtQaiqqd7Yui1eMW2UKU0S2mqMPR+1N0Tc=
Subject key identifier:   60:D1:D6:A6:0E:C8:4F:E6:8E:FA:CD:DC:3A:2E:A1:83:E5:CD:DC:26
Certificate issuer:       /CN=f0998994-1f51-4070-9d55-9e3090085fb9
Certificate serial:       010D0C9F4328584F9BCDE9EA414CFA1F5D457860
Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/41be6355-a82e-3f50-8f37-546d5186cb7c.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     202
IP address blocks:        143.112.0.0/17 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:e9:ea:41:4c:fa:1f:5d:45:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=0448178a-142d-4ead-a158-6ce65797757c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:08:fa:12:2b:1d:8b:a2:3b:e3:84:69:e6:
                    09:1d:c4:b7:14:4c:27:c0:83:3b:3c:00:f5:60:58:
                    14:fa:0e:1b:9f:5d:e6:a2:c0:54:5d:14:21:c3:d1:
                    d4:d2:68:8d:75:79:61:f1:16:4c:54:97:89:51:01:
                    d7:b4:9a:16:90:ec:60:e4:be:02:f7:35:4f:be:94:
                    96:04:ae:b4:a8:80:3e:c9:b9:94:f0:50:78:65:3f:
                    1d:ba:a6:73:2c:fa:8a:9c:85:a8:94:c7:07:dd:cb:
                    14:29:29:c5:c2:8b:82:8b:0e:3b:7d:c8:61:39:51:
                    4b:03:d8:c1:b5:ae:e1:4a:22:8a:08:92:fa:fd:d4:
                    63:20:dd:f0:7e:8f:59:f8:04:c1:ef:d5:28:59:eb:
                    10:c3:c4:a9:37:3d:ef:e7:cc:e0:86:61:2a:90:5f:
                    aa:88:5d:8c:1f:8e:fb:ed:5c:de:0b:75:05:bd:ae:
                    7a:fc:dd:15:11:9e:e4:ca:4d:fb:7f:75:cf:f2:df:
                    86:47:b6:da:f8:cb:1b:5b:95:c3:30:fd:b9:a3:5f:
                    d7:1f:07:cb:47:8d:48:31:80:52:c0:99:a2:cc:06:
                    4c:c3:c2:27:4f:18:4d:ca:1c:e3:93:91:f6:e8:ad:
                    10:c9:1e:cd:fd:97:80:06:fb:98:3c:ef:a6:62:95:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:D6:A6:0E:C8:4F:E6:8E:FA:CD:DC:3A:2E:A1:83:E5:CD:DC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/41be6355-a82e-3f50-8f37-546d5186cb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl

            X509v3 Authority Key Identifier:
                keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.112.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:da:43:e2:2b:57:6c:80:c3:fa:88:54:21:6b:ee:f9:60:af:
         ba:28:db:83:0f:0a:2c:a4:21:9d:e0:ef:b3:a9:f3:ba:00:ea:
         a2:b7:ed:e2:58:ed:82:5d:dd:4e:e4:80:85:23:2d:9e:30:c7:
         a5:16:fe:0f:c7:ca:ba:ea:7d:a8:ab:0f:62:b9:e7:6e:ff:40:
         d6:17:d9:4b:7f:6d:04:4b:f9:83:18:02:af:25:3d:bb:de:2e:
         49:ee:1c:f7:06:c0:ac:4d:13:4a:8f:f4:e4:28:9d:4d:b7:4d:
         e6:28:be:fa:f4:2d:39:65:7e:0b:e3:c6:75:24:c0:9a:78:97:
         f0:49:47:bf:26:23:96:76:5d:a4:ab:15:2f:8e:f7:2b:a3:fa:
         6c:1f:f0:00:e6:83:cd:b2:06:f4:9f:78:59:97:fc:7f:f6:6a:
         de:19:27:08:79:88:5e:cf:4e:81:71:7c:f9:32:c0:20:86:0a:
         e0:e5:8b:1f:10:87:8b:64:c3:31:56:47:cd:5f:a4:d2:37:f7:
         1a:d1:24:c3:e7:07:80:da:53:59:39:b7:b1:80:0e:9b:30:a8:
         18:d2:24:ec:b9:80:94:4a:ef:a3:35:ee:91:3a:d4:f1:c3:41:
         78:31:05:e4:90:49:1b:4b:bc:ff:ff:da:15:85:15:16:b9:5e:
         b2:1f:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:33:01 2026 by rpki-client