Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/9fd71bc3-8b08-3e0b-8e81-d23c8f363f61.roa
File:                     9fd71bc3-8b08-3e0b-8e81-d23c8f363f61.roa (raw, json)
Hash identifier:          dF4E3WgYJXIG3U6dSBUl9rSZB8FpGrVd5lctcRhY6m4=
Subject key identifier:   02:79:E7:DE:40:0D:16:7A:73:12:05:FA:F4:9F:5A:16:F2:A2:85:01
Certificate issuer:       /CN=f0998994-1f51-4070-9d55-9e3090085fb9
Certificate serial:       010D0C9F4328584F9BCDE9B7DB785086E5D16C40
Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/9fd71bc3-8b08-3e0b-8e81-d23c8f363f61.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     3356
IP address blocks:        143.112.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:e9:b7:db:78:50:86:e5:d1:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=e2715638-0862-4e2c-919c-8c21acf1dd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:75:59:e6:f2:54:66:a5:de:9e:56:7d:88:
                    de:4d:cc:a5:0c:cb:05:de:49:a8:50:d7:06:86:67:
                    31:4d:9a:9c:e1:9d:cc:ca:db:89:db:04:dd:c3:d5:
                    6f:e3:20:03:2f:91:58:55:97:fe:2b:ff:03:84:00:
                    1c:0d:63:84:64:37:ba:fb:61:5d:9e:06:cb:be:87:
                    3e:21:07:b9:0f:89:fd:4c:af:10:52:ac:59:7a:90:
                    46:8d:29:bd:6d:b1:78:bc:63:51:48:05:9d:42:f2:
                    42:eb:f6:98:7b:03:3a:25:d2:b7:b7:ef:6c:1c:f2:
                    3f:33:a8:91:42:1d:94:25:8e:6a:ae:5e:9d:3f:00:
                    4d:cd:5d:86:71:ec:48:13:35:0b:69:69:5e:ce:71:
                    ef:74:f8:69:30:7e:26:8c:52:a6:f3:11:d2:4b:cd:
                    74:7e:8f:f8:29:63:0d:bc:9d:fc:c2:33:c1:a5:49:
                    0a:04:7a:98:34:fb:15:3b:d6:07:8d:b2:30:df:3c:
                    9d:f9:bb:d4:cf:1e:ed:a9:2d:ef:6c:c6:0a:cd:cc:
                    36:f6:45:36:79:52:92:98:63:7a:ab:f6:f1:24:5b:
                    29:a1:d8:ca:ea:64:85:82:66:84:b3:c7:98:8b:6a:
                    e2:c4:a8:e3:8f:d4:15:cf:67:df:69:b7:34:0d:55:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:79:E7:DE:40:0D:16:7A:73:12:05:FA:F4:9F:5A:16:F2:A2:85:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/9fd71bc3-8b08-3e0b-8e81-d23c8f363f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl

            X509v3 Authority Key Identifier:
                keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.112.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:97:ef:77:bb:e7:f0:df:d2:d9:83:3a:20:cf:c3:dd:44:
         d0:e4:2e:81:34:d8:98:91:0c:a6:18:22:90:57:be:94:43:7a:
         8d:fa:58:ee:b5:84:4e:bb:54:84:fc:e5:11:20:47:55:07:75:
         4b:a7:e1:23:53:ac:42:0c:c5:9b:9c:00:4f:bd:43:f7:ca:9e:
         bd:2e:d9:d6:68:1f:17:69:28:b2:dd:6f:07:43:9c:1e:95:c0:
         86:4a:9d:00:72:78:56:97:13:07:3c:67:f4:c4:b2:01:57:87:
         eb:dd:2d:71:46:fc:f3:cc:29:4f:8d:aa:88:16:dd:7f:35:67:
         57:9f:27:95:7b:cd:0d:fd:1b:c8:87:d0:05:84:1f:f1:2b:7e:
         cb:e0:8c:c4:b6:fd:56:8a:89:4d:62:5e:10:5c:7e:e5:af:e7:
         69:ce:eb:cb:a3:f5:5d:76:dd:d8:b2:af:13:81:8a:ee:bc:a2:
         46:da:bd:1d:ad:32:10:2b:79:fe:1b:41:bf:f9:35:ae:55:f2:
         0b:ed:71:48:1d:22:ea:25:ba:6f:b1:ef:44:45:9b:c6:61:b2:
         eb:49:51:00:89:86:f6:5f:0c:5b:7c:b7:17:ff:d3:80:4e:6e:
         13:4a:51:32:10:c3:32:b5:73:57:0d:2b:79:3f:ee:b9:7c:e8:
         d3:cf:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:23:42 2026 by rpki-client