Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8b313345-934f-31ae-aa57-0d4e38da8778.roa
File:                     8b313345-934f-31ae-aa57-0d4e38da8778.roa (raw, json)
Hash identifier:          PJJjecpVyFFgXli4bPXvoENLshZzRb0WSh4NTBXcj5M=
Subject key identifier:   4F:12:F6:63:8B:FC:15:64:CB:34:28:37:6A:B8:84:75:34:A0:85:69
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584F51D2ACCD1ABCDB6378AEDC00
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8b313345-934f-31ae-aa57-0d4e38da8778.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     7862
IP address blocks:        146.23.0.0/16 maxlen: 16
                          146.23.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:ac:cd:1a:bc:db:63:78:ae:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=84ce3690-be47-4eeb-ab15-863ff59358a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:c6:b2:ef:6a:80:d9:3a:28:dd:26:b2:64:
                    04:c8:a5:34:25:6d:d0:30:76:ea:80:df:3e:e6:bb:
                    a7:08:79:1b:43:b7:c3:2c:52:ce:e1:57:c5:ac:3d:
                    7a:3d:6a:f9:1f:80:5d:ae:15:aa:38:78:db:04:8e:
                    82:f0:f4:8b:ce:7f:4c:bf:b6:d6:7c:ef:cc:67:35:
                    98:4e:0e:fb:4b:51:cc:40:e2:d0:82:84:66:f9:65:
                    92:1e:7e:99:9c:3a:e3:de:00:e0:04:44:01:0e:5d:
                    bc:9a:66:b4:ff:c5:ca:f6:3a:79:00:8c:62:ed:7b:
                    9a:8c:0c:b2:d2:4b:05:e0:89:4f:51:2d:46:54:b4:
                    60:54:6a:0d:de:31:6d:f2:c6:04:d8:5d:69:7d:b1:
                    e3:8e:31:a4:7c:04:44:0e:b9:35:54:f4:b9:bb:ec:
                    ea:e7:63:d6:d6:7e:7d:2b:3d:18:05:6f:03:ab:35:
                    22:c7:d8:8d:b6:e6:f4:44:4f:ff:f2:b9:67:b0:6e:
                    5d:0a:b9:09:d9:c8:28:04:38:cf:2c:b1:cb:6e:ee:
                    02:0b:5f:e5:e6:e1:a9:c6:b9:17:58:bd:42:da:33:
                    ac:7a:61:d3:52:6e:a3:f7:ff:e0:b9:22:27:a8:f0:
                    a5:95:84:0a:dd:42:81:f2:23:ba:3a:bb:e6:3b:e6:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:12:F6:63:8B:FC:15:64:CB:34:28:37:6A:B8:84:75:34:A0:85:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8b313345-934f-31ae-aa57-0d4e38da8778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:03:12:1c:3e:6e:c1:e6:ba:a1:1a:2b:b7:53:89:29:88:
         2c:cb:1f:d0:2a:83:4e:31:18:7c:aa:72:e0:ef:9c:54:ce:64:
         78:3b:2a:f8:9e:cf:b4:01:c3:69:00:41:dd:d3:47:52:4f:5d:
         27:3b:44:97:7f:50:ec:b4:36:db:e9:c1:5f:c2:ff:e9:c4:7b:
         74:c7:47:29:d4:19:db:ce:b1:8c:e3:fc:17:18:cb:e4:83:ad:
         47:8c:05:0d:0d:b0:b3:7a:1a:5c:31:07:c3:fc:be:48:f4:67:
         7b:4a:16:f3:15:5a:b0:eb:fb:06:5f:ca:3e:4b:e3:94:f0:8e:
         c5:f1:8d:60:95:a5:83:51:1a:b5:04:60:d1:a4:b1:fa:55:22:
         86:24:9e:4c:f0:40:6b:4d:e0:e8:85:33:5a:40:34:10:80:e0:
         dd:fe:b5:75:9d:01:fe:66:c3:03:e2:8f:c2:40:c4:16:70:c8:
         f3:d0:db:28:89:d6:c9:ec:f8:dc:70:a3:1c:2d:4b:cc:64:52:
         a6:f7:78:f4:97:3f:9d:cd:45:fd:12:a4:6e:14:bf:af:75:00:
         f4:fc:c6:1c:05:f9:a1:b5:68:6f:ce:2a:65:0a:45:64:9e:54:
         55:02:8d:8f:4d:46:33:be:67:ea:7c:53:18:50:68:b7:04:36:
         cb:34:da:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:03:30 2026 by rpki-client