Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/92beb05f-dd6a-3053-91fc-a47177c801a3.roa
File:                     92beb05f-dd6a-3053-91fc-a47177c801a3.roa (raw, json)
Hash identifier:          syIqLJXj9ukbt/kY59YqeMgVjZas2Fzq2MVofn2YPdI=
Subject key identifier:   47:06:10:05:A8:C6:33:6B:DC:7A:07:8B:B9:49:5C:F9:49:83:F1:9E
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584DE41B2C708C556BE290DB0300
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/92beb05f-dd6a-3053-91fc-a47177c801a3.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     49304
IP address blocks:        131.143.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:2c:70:8c:55:6b:e2:90:db:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=1dbefbb2-3c35-4e6c-ba38-ae1f6941006b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c9:5b:b2:e7:27:26:27:4b:a3:26:02:2a:ea:
                    d7:0a:dc:97:f7:7e:6c:ac:4c:9e:39:c6:93:b7:4b:
                    d9:d7:12:d1:0c:cc:78:a9:23:43:75:d9:7d:69:4c:
                    2a:e2:88:08:fa:34:03:af:ed:16:92:1d:1f:89:61:
                    0a:e9:89:22:81:49:9d:bc:d9:5a:52:cd:14:1b:e7:
                    4f:ad:76:99:c4:e5:bb:37:6b:ad:c0:ed:c6:c2:f0:
                    8e:6f:fb:48:6c:a7:85:09:39:5c:ad:74:1c:fe:ad:
                    8f:e2:9b:88:05:c2:0e:18:ab:f0:93:3e:01:26:b4:
                    9f:9c:56:b2:67:e0:ed:c1:fd:9a:48:c1:e3:e4:ae:
                    6a:9c:31:f5:7a:3c:3f:c5:c2:e5:e2:f9:60:c0:a7:
                    6c:23:78:2c:b3:87:67:76:fd:d8:48:d9:b0:22:c4:
                    0c:2e:b1:b1:bb:b1:7a:34:9e:f5:5a:da:9e:c3:a6:
                    fb:b8:25:16:b7:ee:38:cd:ad:24:c1:0c:34:1f:fa:
                    40:d2:cb:9a:85:0b:c9:4e:a5:cb:bc:19:45:b4:fb:
                    ad:2b:14:7a:a7:c3:80:d6:0f:c8:6f:86:cb:a0:5f:
                    d2:a2:40:8e:19:eb:cb:55:0f:b3:19:56:8b:6e:26:
                    43:a0:0e:3a:95:a7:a1:18:4a:57:41:f7:aa:b0:56:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:06:10:05:A8:C6:33:6B:DC:7A:07:8B:B9:49:5C:F9:49:83:F1:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/92beb05f-dd6a-3053-91fc-a47177c801a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:57:0e:02:37:e9:31:70:ea:1a:fb:d6:3b:b5:eb:ab:cc:
         49:fb:3c:74:14:75:27:84:4e:43:90:91:42:04:04:db:13:43:
         63:e4:b5:0d:3a:9e:17:66:29:46:d6:84:e8:b7:ab:56:08:4c:
         2f:e6:75:75:49:35:f3:14:a6:80:9f:39:0c:e1:e2:af:11:04:
         90:2e:74:32:61:8c:68:64:c2:e4:59:20:32:3f:28:ea:c7:61:
         6b:7e:f3:83:75:ee:ee:69:1a:8d:e6:7f:eb:bd:1a:6e:dd:9f:
         4c:e8:89:e9:e9:b0:cc:1f:5a:31:cc:bd:d8:91:f0:df:ac:5c:
         72:f1:91:b1:da:73:13:7c:17:36:eb:ce:b0:fc:03:2c:6e:a0:
         aa:71:64:93:97:d9:44:b0:1e:f9:a5:ba:34:cf:a2:69:e8:6c:
         bf:f8:30:5b:17:f3:e0:c7:06:00:01:2f:f6:b4:2c:83:d4:7c:
         e5:f4:40:fd:31:4d:8c:11:16:e5:0e:b1:36:35:b2:95:e0:f7:
         57:84:3d:21:83:79:4b:95:99:de:52:47:f8:44:47:59:7d:74:
         f7:72:81:c7:ed:3b:bf:0e:25:6e:56:c7:0a:3b:7f:3a:66:d6:
         dc:29:65:37:5b:03:fe:82:b5:48:8d:43:70:af:34:49:29:38:
         58:a6:69:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:18 2026 by rpki-client