Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/c5ba6f1c-18f5-377c-99f7-8c1428395f5c.roa
File:                     c5ba6f1c-18f5-377c-99f7-8c1428395f5c.roa (raw, json)
Hash identifier:          Ij5x9aHO9ZS7CzjNU5xaVJ2N+4IrRV22XC53yO2CRUg=
Subject key identifier:   44:F9:E2:EF:56:F3:91:3B:4F:52:B3:17:61:36:D2:83:F9:39:62:DE
Certificate issuer:       /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial:       010D0C9F4328584F778367BD5D52CFE1F4E68DC0
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/c5ba6f1c-18f5-377c-99f7-8c1428395f5c.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     14927
IP address blocks:        131.143.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:67:bd:5d:52:cf:e1:f4:e6:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=bac87dd7-4935-4cab-95e8-c7da3f997c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:8a:24:72:00:ff:d0:37:ec:f7:08:54:06:
                    4d:b5:a4:be:31:4c:12:52:6a:c8:10:c4:a6:9d:91:
                    d5:8a:eb:77:d6:e7:51:a0:2e:29:42:b7:d9:c3:71:
                    bf:18:f5:76:72:46:eb:50:4c:20:51:92:bc:da:23:
                    a4:8d:73:21:e1:0b:a8:90:cb:c8:12:00:3e:2a:30:
                    97:96:a4:6f:5c:af:2b:4a:7e:49:46:6e:27:14:e5:
                    b2:c4:e5:9f:d8:f2:51:0c:60:66:ca:ba:46:03:53:
                    b1:49:b3:20:52:9f:cb:ee:e8:e4:f8:8a:21:ab:71:
                    35:20:bb:15:ee:e0:0f:fd:52:72:00:1b:6c:a1:95:
                    32:ff:33:69:69:68:aa:47:a7:44:e6:7d:35:bf:ae:
                    7d:6a:88:af:92:f3:46:54:9c:f4:2e:63:ec:a4:11:
                    58:9e:b3:4f:7d:ee:59:71:6c:5d:97:a3:f3:ff:8b:
                    74:a3:65:dd:02:be:92:a5:9f:72:d8:ee:85:98:ec:
                    ea:ae:7a:b1:ba:c7:89:1d:d6:7b:50:92:01:a2:17:
                    c0:25:b2:dd:fd:9a:90:d2:e9:4e:77:45:89:98:a6:
                    13:07:bf:27:c0:74:fe:9d:6a:5e:e9:ed:6a:61:91:
                    9f:9c:d3:6f:71:49:45:15:f3:d2:65:99:6e:66:c8:
                    c8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:E2:EF:56:F3:91:3B:4F:52:B3:17:61:36:D2:83:F9:39:62:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/c5ba6f1c-18f5-377c-99f7-8c1428395f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:53:cd:5a:bc:fc:05:30:bb:96:83:0b:c4:83:be:74:1a:aa:
         5b:9f:6c:2f:07:5e:fa:51:e5:26:42:0c:fc:c8:59:38:0d:8c:
         e1:27:8e:8f:87:62:9e:8c:d3:d8:19:b1:e4:4d:70:75:fa:76:
         e0:c0:9c:fd:13:9c:ae:44:20:d5:73:3b:4b:8b:ef:f0:5e:7d:
         4e:1f:15:9e:cf:8e:9b:d3:a6:1e:a9:16:9d:67:2a:2c:48:79:
         4c:ca:06:f8:8c:12:8c:d4:63:68:e3:e4:f4:0e:69:9c:8b:3f:
         70:a5:a2:64:92:18:02:9a:6a:1e:f4:0f:2e:1c:9d:7a:a1:3f:
         f4:b3:a4:5b:7d:39:38:54:ff:69:aa:8a:ba:0e:40:be:1a:00:
         12:2d:1e:fa:45:71:f2:19:8e:2b:ad:14:40:49:5d:6d:47:ed:
         bb:61:61:7c:56:63:1e:05:da:c3:20:54:d5:1f:87:24:f5:a5:
         57:14:22:31:ad:3b:a0:f1:a2:4f:b3:68:c3:01:e0:1a:2a:a9:
         5d:29:aa:25:ae:5a:14:6f:f7:65:65:09:ba:ae:3d:b9:0e:5d:
         36:b0:55:f4:68:d3:f2:75:0d:74:9e:0e:80:34:a4:1c:ca:da:
         e6:9d:9c:cf:ac:84:5f:de:4f:41:18:1d:b9:35:8e:3b:f5:31:
         67:08:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:28:18 2026 by rpki-client