Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/7625f911-051f-3f51-bb15-58329f815e84.roa
File:                     7625f911-051f-3f51-bb15-58329f815e84.roa (raw, json)
Hash identifier:          RbjAwtmt1OCAhT8x/ao/TejxQIPiR17veGs2k7FP/XA=
Subject key identifier:   F0:19:9A:45:AB:12:8C:02:1C:38:3C:BE:6B:0B:C1:1A:70:A4:B6:88
Certificate issuer:       /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial:       010D0C9F4328584E11B42D10570849287DA15480
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/7625f911-051f-3f51-bb15-58329f815e84.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     399542
IP address blocks:        131.143.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:2d:10:57:08:49:28:7d:a1:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=e1eac10a-6b30-4d55-b707-fcb9bda7b1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:b9:aa:85:0c:a5:64:72:00:23:c3:9c:b1:
                    1d:c2:fe:54:41:2d:72:bf:bc:d3:ae:e0:91:07:c3:
                    27:08:20:5d:e7:c7:b1:8b:4e:d4:6e:20:2a:f1:69:
                    9d:f4:bd:6e:a0:06:d5:1e:cc:39:b9:08:54:de:17:
                    fe:26:b8:f7:aa:4e:29:65:ba:8d:2b:c1:44:df:a5:
                    62:c3:f1:bd:dc:c7:15:39:eb:0f:8d:98:f1:56:ff:
                    f5:8a:d0:90:ad:fb:ca:d3:31:2c:74:60:bf:4f:c2:
                    99:32:4d:b5:3c:21:99:4d:11:08:3b:77:88:8f:af:
                    57:98:9e:f8:19:de:12:26:2b:bf:ba:78:ca:36:7e:
                    ac:af:f1:ad:ac:6c:27:4a:ec:92:81:16:6b:16:fa:
                    45:7b:77:b3:6a:e6:bd:cd:18:45:a9:85:fa:06:55:
                    24:a9:86:2d:4e:5d:a2:58:68:86:5d:1e:ae:83:d7:
                    a8:b6:9b:da:90:94:33:08:db:e1:40:2e:30:f8:b1:
                    73:9f:47:1f:1c:07:19:c4:8a:7a:52:c5:0b:2a:b7:
                    ec:05:7b:69:7e:60:31:54:40:1d:1e:2f:67:ed:85:
                    fc:e5:5d:cc:61:c2:5d:f9:29:3f:93:7e:7b:fa:63:
                    41:e7:bd:0f:9b:19:43:0d:d7:18:59:4e:b0:c4:04:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:19:9A:45:AB:12:8C:02:1C:38:3C:BE:6B:0B:C1:1A:70:A4:B6:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/7625f911-051f-3f51-bb15-58329f815e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl

            X509v3 Authority Key Identifier:
                keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:a2:de:fd:3e:18:30:80:91:63:ad:f9:9e:83:53:7c:f4:
         f0:50:17:58:d2:4e:d1:66:5a:ba:62:bf:6c:17:06:75:47:49:
         1d:f9:85:a7:42:bf:eb:f1:26:51:7d:01:cb:5f:56:5a:3f:3a:
         a4:15:aa:cf:59:64:b6:ca:03:1b:cf:e5:df:fa:cd:c6:fc:ee:
         3f:a1:eb:5f:b9:19:ac:7c:b7:f9:7e:c9:b5:54:70:94:65:7f:
         2e:e4:65:aa:c3:69:95:4f:ff:d2:61:71:88:7f:d9:99:97:db:
         c4:32:1f:95:4b:2b:58:ff:8a:80:ac:1a:09:b8:94:a3:91:a6:
         84:44:59:ea:de:f2:0f:b9:23:b6:a4:ed:80:d4:c8:38:aa:53:
         05:81:ff:f3:d7:d9:50:30:fc:d4:a2:f3:95:02:6d:99:66:42:
         0f:94:f5:26:2f:9a:90:70:2a:17:aa:df:6f:99:8d:af:c5:7a:
         8e:6d:64:38:af:5f:d5:db:07:97:b2:2f:70:45:8c:10:3b:05:
         41:17:53:2c:fb:82:75:c7:ad:2f:0f:f8:d9:86:df:e7:e2:29:
         99:9c:6a:75:b8:b4:5e:c4:e2:3c:41:56:71:1c:9d:2b:a2:8d:
         cc:9f:2a:9e:ee:1a:55:70:b5:c0:15:9c:32:f7:52:48:69:a9:
         1f:3b:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:00:09 2026 by rpki-client