Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/f1d50459-b2c6-3b79-ae46-38d8a85b0950.roa
File:                     f1d50459-b2c6-3b79-ae46-38d8a85b0950.roa (raw, json)
Hash identifier:          l7K5Tg3ycfCAub3GEqWOqOWBr2YeZi5f01m4CgPXvgg=
Subject key identifier:   C4:0E:04:33:84:72:5B:1A:CB:19:29:FD:92:17:4B:A3:BE:D0:76:FF
Certificate issuer:       /CN=03cb17c9-7597-4c95-a127-009654391416
Certificate serial:       010D0C9F4328584E82C4DAC88B80473F81E72280
Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/f1d50459-b2c6-3b79-ae46-38d8a85b0950.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     40776
IP address blocks:        131.143.21.0/24 maxlen: 24
                          2602:f8ab:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:da:c8:8b:80:47:3f:81:e7:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cb17c9-7597-4c95-a127-009654391416
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=fa982ff5-6207-47c4-a164-656aea9e8f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:a2:df:61:5b:1e:3b:d1:62:4a:f9:23:7b:
                    d6:15:4e:50:14:15:d0:dc:25:aa:4f:8c:ab:ca:d6:
                    d1:a0:27:ac:9e:cb:0a:66:39:bf:58:c8:64:9c:3e:
                    fc:74:e5:eb:24:cf:9d:b7:00:6f:34:53:0b:db:ae:
                    cd:87:b0:fd:2b:2f:66:a4:7c:be:01:6c:f2:72:e9:
                    e6:91:2a:cf:77:c7:55:07:82:a9:34:a0:bd:2b:75:
                    b0:87:c5:a0:22:27:d0:a7:9b:77:f7:b4:03:e9:f4:
                    b1:ab:06:47:af:a1:4b:ba:6e:83:87:64:f0:33:54:
                    75:96:1d:4e:85:19:50:d8:1c:f0:c1:c6:2f:d1:bb:
                    6e:4b:77:d8:84:ad:38:2a:b5:00:c8:1a:a8:71:ab:
                    96:1d:1d:e1:f0:84:91:58:54:bf:88:5a:cb:f8:64:
                    2b:00:0f:80:aa:09:71:e9:17:44:fc:4b:2a:9f:14:
                    41:d0:b1:bb:ec:48:26:c8:7e:68:51:e2:e7:63:98:
                    1c:25:7b:0a:01:b3:e6:3d:25:a6:b9:d2:c1:c0:89:
                    51:fb:27:8c:bb:c0:26:b7:b3:0c:8c:8e:32:fb:4b:
                    6b:ef:3c:fb:0e:ab:fd:5d:f2:65:56:40:f5:ae:77:
                    18:3b:e7:40:b5:31:2c:d3:9a:b8:dc:fc:33:29:16:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:04:33:84:72:5B:1A:CB:19:29:FD:92:17:4B:A3:BE:D0:76:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/f1d50459-b2c6-3b79-ae46-38d8a85b0950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl

            X509v3 Authority Key Identifier:
                keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.21.0/24
                IPv6:
                  2602:f8ab:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:a3:72:e5:f1:00:d6:e1:1f:87:b8:c9:a0:86:fd:54:ec:
         b7:75:1f:ab:2a:73:d1:fa:4f:94:3f:2d:21:90:41:0a:72:e7:
         b4:99:be:ca:7c:8d:a3:fe:7d:73:34:95:26:88:29:df:09:4b:
         d8:22:80:f2:f3:b4:4a:85:09:47:a4:de:dd:40:51:59:54:6b:
         c5:64:d7:8c:d8:e9:c5:da:35:0d:3c:3d:9a:af:78:b1:9b:5c:
         bc:e3:87:8d:db:00:9e:9c:48:26:a7:da:37:ba:8d:62:f2:3b:
         5a:d6:97:bd:20:ef:fb:1e:37:9b:9a:8c:8c:fa:43:ad:bd:90:
         6e:9d:5c:cc:df:a0:6e:87:7d:11:af:6d:51:15:4e:8e:c0:24:
         05:d7:f7:2d:a9:44:10:b6:46:a7:fe:38:aa:74:73:88:ff:08:
         e8:1b:c4:3b:51:8f:d0:8a:62:9e:ef:29:d8:51:e2:7b:92:b0:
         28:c5:83:34:91:21:1b:a6:1e:58:be:6d:8d:b8:25:10:02:0c:
         7f:a2:65:2e:37:4e:27:07:d1:07:2e:8f:74:17:f9:98:bd:5b:
         ee:6b:c5:1f:9a:80:77:d7:5f:a1:a5:2e:06:92:3a:49:51:4d:
         f6:0f:5a:21:61:68:af:7f:3c:75:dd:b1:e8:a2:ea:c9:75:b9:
         ee:39:75:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:15:53 2026 by rpki-client