Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/d658f8ed-9fd8-3964-af53-0917094d3301.roa
File:                     d658f8ed-9fd8-3964-af53-0917094d3301.roa (raw, json)
Hash identifier:          6XL6L5HTjahMSjz6wlykrzQeB155MzsPjzwhsyaxnIQ=
Subject key identifier:   72:5F:11:D8:68:BA:34:FA:B0:5C:93:77:B1:EA:AB:28:9B:FA:4F:26
Certificate issuer:       /CN=f0998994-1f51-4070-9d55-9e3090085fb9
Certificate serial:       010D0C9F4328584EF92C688D381FB2A0EED7D080
Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/d658f8ed-9fd8-3964-af53-0917094d3301.roa
Signing time:             Thu 27 Aug 2026 06:54:16 +0000
ROA not before:           Thu 27 Aug 2026 06:54:16 +0000
ROA not after:            Wed 25 Nov 2026 07:54:16 +0000
asID:                     203
IP address blocks:        143.112.128.0/18 maxlen: 24
                          143.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:2c:68:8d:38:1f:b2:a0:ee:d7:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9
        Validity
            Not Before: Aug 27 06:54:16 2026 GMT
            Not After : Nov 25 07:54:16 2026 GMT
        Subject: CN=2c46947a-a2c3-4b1b-b548-757123fe14bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:15:fc:93:8d:c0:d0:e0:dd:b0:bb:c6:03:
                    58:b7:b6:2f:8b:f6:6e:62:9a:b3:e9:6b:7f:49:55:
                    3e:13:b7:35:be:6f:bc:5d:b7:5b:2e:82:13:68:67:
                    a0:9e:bd:22:31:ae:6e:36:21:4b:32:72:e1:19:a5:
                    d9:2d:4d:ae:95:bd:cc:6a:ba:07:f0:11:9f:cd:8f:
                    1d:da:d2:6b:68:2e:7c:3f:53:7a:07:b9:76:df:8b:
                    b9:07:d7:ed:b5:e9:7c:22:05:64:42:bb:81:bd:8d:
                    06:ce:47:7f:2d:c6:bb:77:e5:23:33:af:c6:00:72:
                    9b:7c:19:e5:c2:6d:6a:4c:e5:a1:5d:eb:7a:66:3e:
                    15:0b:74:23:4d:7d:34:24:4a:e0:a0:42:79:24:84:
                    61:c7:71:50:22:4d:19:7d:86:37:26:64:09:23:bf:
                    48:d6:df:d9:87:21:1d:08:4d:49:35:7f:03:6c:9d:
                    93:14:15:d1:5d:9c:81:67:09:fa:ae:11:4c:ca:5c:
                    27:30:50:59:e9:23:28:73:c7:0f:08:d1:0f:4d:4f:
                    0a:df:46:9b:f4:d1:5c:83:28:e0:ef:bf:0f:13:86:
                    97:71:a1:ec:2a:b0:24:da:2a:43:8d:77:73:11:7f:
                    08:2c:ee:0e:3e:47:02:16:5e:03:82:7c:47:64:db:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5F:11:D8:68:BA:34:FA:B0:5C:93:77:B1:EA:AB:28:9B:FA:4F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/d658f8ed-9fd8-3964-af53-0917094d3301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl

            X509v3 Authority Key Identifier:
                keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.112.128.0-143.112.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:47:d4:15:a8:f6:57:5f:3d:8f:6c:8a:e7:ce:7a:21:59:e5:
         9c:28:2f:28:45:0c:22:27:aa:52:db:37:c1:1b:da:f1:c7:77:
         63:f8:fb:fb:e4:25:fa:d5:40:12:ff:1c:d3:3f:01:33:5b:81:
         fb:77:74:ac:25:d8:0b:59:79:e5:5b:43:52:ec:b6:97:c3:1c:
         19:81:f1:53:05:bb:e9:1f:1a:d2:b3:6f:35:27:e8:f5:ba:f0:
         00:4d:a4:db:0f:c4:d9:7f:aa:5b:68:7f:4f:ca:d1:89:e5:61:
         16:50:9d:d3:47:22:23:e5:43:0c:7e:b0:34:bb:5c:e0:3d:2d:
         84:3f:0a:4b:40:a2:84:60:ad:8c:97:f1:f4:79:2d:5c:a0:ed:
         7f:7f:80:f4:4b:b4:20:fb:1c:13:c1:5f:d2:06:c4:7f:a8:f6:
         36:99:c4:63:a9:52:a3:46:8e:8e:13:c3:4e:9c:4a:f8:17:27:
         a7:79:82:f1:fb:1b:71:76:b1:f5:16:d2:7f:3f:04:0a:6b:4c:
         38:ea:a7:ed:88:4a:20:b3:2c:c5:95:51:92:66:57:7c:c1:30:
         89:ba:a7:ad:23:43:23:a2:ec:42:95:19:6e:9b:de:19:e7:57:
         cc:b8:65:bd:49:8a:58:d5:88:7c:7e:f6:ff:4a:86:62:2c:5e:
         a0:ff:74:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:53 2026 by rpki-client