Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/5e169695-0142-30c7-913a-f1c6cdfefa3c.roa
File:                     5e169695-0142-30c7-913a-f1c6cdfefa3c.roa (raw, json)
Hash identifier:          WijSg5wbuSTu0HWCZ7QnjCOISLv53ogHlDs2NVbDNyc=
Subject key identifier:   5D:66:B7:86:9C:61:6C:E9:29:6B:C6:A0:68:94:6B:56:E9:8E:E6:73
Certificate issuer:       /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
Certificate serial:       010D0C9F4328584EA786DF625B350A837E336DB0
Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/5e169695-0142-30c7-913a-f1c6cdfefa3c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397837
IP address blocks:        205.143.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:df:62:5b:35:0a:83:7e:33:6d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f02ce26a-352e-47f5-99ce-00c011260280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:82:d8:58:1d:2a:04:db:b9:59:a3:3f:90:
                    d9:8e:e8:ba:2b:7f:1a:37:85:53:35:9e:5c:a2:66:
                    09:20:c7:fc:70:e2:bb:8c:3a:ef:c1:f2:79:ef:d5:
                    c3:e0:ef:59:e7:b2:36:a1:cb:1a:4c:5c:25:a0:cb:
                    6a:82:bb:bd:ba:12:56:54:60:2d:9d:e3:28:d8:69:
                    1d:9e:6e:4e:30:b3:9f:f9:fe:ff:90:a0:1b:c6:7d:
                    e9:0d:81:d7:19:6f:8a:b8:96:c4:0b:8c:1b:8a:8f:
                    c6:c1:04:17:76:f4:c2:3b:e6:8a:ec:01:fd:73:84:
                    43:22:20:cb:e1:9b:14:a1:61:1f:14:fc:1a:2d:47:
                    83:f8:c9:3e:19:fd:c1:df:9d:9e:c6:ee:77:5f:ce:
                    29:fc:bb:6b:f6:13:b4:48:8b:31:2c:e9:53:e5:54:
                    33:e1:67:f5:b0:2d:7a:44:24:54:91:77:4c:a3:38:
                    c1:79:a7:f6:67:9f:f9:ae:2f:ba:64:b4:ad:9d:bd:
                    40:fc:74:03:5d:b8:b5:12:cb:dc:f5:c6:02:46:57:
                    79:25:74:b8:91:92:bd:d8:21:5e:10:93:57:61:85:
                    6b:87:cd:b1:be:b7:be:14:0b:c2:60:8d:88:40:01:
                    39:a8:e9:c5:01:be:0a:4e:b5:d8:28:f5:d2:4a:33:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:66:B7:86:9C:61:6C:E9:29:6B:C6:A0:68:94:6B:56:E9:8E:E6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/5e169695-0142-30c7-913a-f1c6cdfefa3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl

            X509v3 Authority Key Identifier:
                keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:dd:39:3d:32:97:45:a1:65:be:6c:01:48:6a:63:08:00:93:
         b0:56:11:ba:42:e4:f5:ba:fa:79:ad:b1:e1:85:ad:de:89:38:
         d8:d3:c3:33:40:36:78:70:ae:ec:73:f7:5c:fc:fa:1f:1b:37:
         95:48:35:0f:de:e0:88:4b:89:f0:0c:7d:bd:11:84:3d:8a:71:
         d4:e7:9f:9b:21:8c:5a:98:9e:ea:12:f2:21:7b:aa:73:8d:ec:
         17:68:e9:b1:07:d0:83:64:e6:98:81:bc:ce:a3:7f:5d:16:2d:
         db:98:98:de:e0:e8:e0:92:51:2d:78:d8:48:84:dd:e4:1b:47:
         17:2d:1e:26:bc:74:c5:db:48:6e:61:ce:60:36:05:7e:6c:e2:
         4e:87:e1:bf:b1:95:ec:f7:f0:8e:cf:93:19:03:70:a9:3d:bf:
         31:31:92:6b:32:e4:b4:4f:10:3d:6e:92:ba:0a:d7:9a:e8:4d:
         c0:94:56:40:cf:52:4e:e6:ae:7d:32:d2:6f:06:25:8a:9d:d8:
         ff:6b:db:61:09:f7:75:73:d8:c1:9a:5f:e0:91:2b:52:00:96:
         c4:6c:a1:f0:85:4c:73:8f:f2:58:17:eb:e5:0c:bd:37:c9:4c:
         4e:7f:81:06:d7:f6:79:29:6a:ed:0c:5d:10:c0:7d:b7:41:07:
         1e:13:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:42 2026 by rpki-client