Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/6b77e875-25fe-3e89-ab4d-50429d306658.roa
File:                     6b77e875-25fe-3e89-ab4d-50429d306658.roa (raw, json)
Hash identifier:          RZHA3d9SwT+cc7nB0zGArw4VxXe7Mtk/oVItFg4ONLI=
Subject key identifier:   EC:72:20:6F:AD:21:23:CA:42:16:F6:97:9D:EA:10:13:C0:21:C4:93
Certificate issuer:       /CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d
Certificate serial:       010D0C9F4328584F393CF685C11D9F0FBF836500
Authority key identifier: 91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/6b77e875-25fe-3e89-ab4d-50429d306658.roa
Signing time:             Sat 19 Sep 2026 05:39:22 +0000
ROA not before:           Sat 19 Sep 2026 05:39:22 +0000
ROA not after:            Fri 18 Dec 2026 06:39:22 +0000
asID:                     29120
IP address blocks:        143.58.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:39:3c:f6:85:c1:1d:9f:0f:bf:83:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d
        Validity
            Not Before: Sep 19 05:39:22 2026 GMT
            Not After : Dec 18 06:39:22 2026 GMT
        Subject: CN=7cff4a16-e329-4799-800a-52ef34cbb930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:5c:bd:fe:49:2a:12:76:89:0e:92:2d:1c:
                    e1:1f:c7:fb:97:87:23:12:e8:3e:88:96:3b:77:88:
                    82:14:4c:ca:b3:75:81:58:fe:74:db:a6:e2:f3:fe:
                    7a:2e:4a:3b:2a:89:e9:ce:e0:7b:e5:c1:7b:10:20:
                    c8:0d:cc:51:ef:f2:ef:df:11:29:a8:f8:ed:cc:02:
                    14:e8:4f:ad:04:ca:08:82:d5:ce:7a:86:60:11:a5:
                    69:30:ab:87:24:56:d3:9a:56:80:f0:d4:5e:76:b2:
                    18:62:ac:52:29:79:30:e4:41:55:20:f8:94:30:6e:
                    6a:b5:43:4c:98:ac:76:4b:e9:c5:ba:36:c4:1d:c6:
                    ff:ca:37:60:f9:8c:d1:5b:f5:e4:84:28:44:61:7e:
                    e3:81:7b:05:7f:aa:13:bc:9c:af:fe:ab:b9:aa:68:
                    42:08:a5:ed:8c:42:9d:44:7c:25:23:5d:70:05:19:
                    32:31:99:b6:b8:12:55:ba:35:65:01:25:99:cd:99:
                    8a:c4:4e:53:9a:06:ac:e1:a0:0c:18:30:ff:14:d8:
                    57:08:75:a3:b6:7c:c7:21:fa:fa:7a:ca:38:d6:c2:
                    12:8f:bb:34:c5:e9:e0:36:31:d2:4e:ca:1c:8a:20:
                    9e:2f:a8:2c:51:e5:13:41:56:bd:ab:7b:42:1a:c9:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:20:6F:AD:21:23:CA:42:16:F6:97:9D:EA:10:13:C0:21:C4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/6b77e875-25fe-3e89-ab4d-50429d306658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl

            X509v3 Authority Key Identifier:
                keyid:91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.58.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:bc:98:13:e2:ac:f8:bf:a6:fa:c5:01:eb:3b:52:2c:89:
         6f:58:c4:61:ef:c6:b1:05:dc:47:53:94:73:ac:44:a4:78:32:
         96:d4:3e:ed:52:97:0a:5c:ae:3c:82:4f:8d:a8:8e:56:54:6d:
         06:96:15:47:db:25:52:43:19:d2:b5:5d:af:3f:88:f2:98:8d:
         ef:1d:97:58:69:b0:fb:f2:8c:73:9c:ce:50:e0:85:3a:a3:67:
         cb:a8:de:54:3d:53:3f:b8:0c:75:86:a5:af:4f:91:2b:ee:1a:
         4a:7d:61:de:d3:53:8d:ca:05:75:c6:56:f7:7c:c0:05:d7:f3:
         a9:35:9b:12:7c:c8:57:6b:31:3b:7a:68:a6:0f:df:bf:c4:48:
         5d:70:8b:a7:0e:75:a7:29:3d:1d:c9:cf:4a:69:fb:2e:27:2d:
         60:56:72:74:ea:36:e7:a7:48:eb:0d:a1:88:c6:40:a7:23:9e:
         2d:2f:8d:10:b6:f7:97:66:d5:e7:64:c9:be:05:20:98:73:a9:
         f3:ae:9f:e4:40:d7:1b:05:91:69:3f:bf:62:f7:59:d9:d3:90:
         08:71:7b:2c:5d:d6:c4:4b:3f:9b:b8:7a:4d:eb:b1:ae:19:9d:
         0b:9d:96:32:9a:43:68:4a:22:61:70:66:14:b1:06:a3:a5:8d:
         f1:7a:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:50:44 2026 by rpki-client