Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0750b44-73ca-3469-a478-324abfbef3d9.roa
File:                     e0750b44-73ca-3469-a478-324abfbef3d9.roa (raw, json)
Hash identifier:          JOeMF6C84gNHPMUbOsn+iM/f9pZebo2fEmYFqC12HPw=
Subject key identifier:   43:89:34:E8:65:66:2C:44:71:1E:B0:E4:91:8D:E7:FD:6D:C6:DE:56
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584C794C45A27D0F8D16FF6B7580
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0750b44-73ca-3469-a478-324abfbef3d9.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     23280
IP address blocks:        143.223.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:45:a2:7d:0f:8d:16:ff:6b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=50ef84f1-6325-4f80-a2f6-bfeb89633e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:d4:a2:f9:81:41:69:61:0d:af:fd:42:fd:
                    bb:48:f5:f3:5b:76:aa:98:43:d0:2f:10:70:84:8e:
                    87:8b:5c:4b:c8:a2:17:9f:57:cc:cc:bc:80:38:b1:
                    6f:aa:f3:36:98:ab:9c:bc:c1:d4:f7:bc:28:e1:43:
                    88:01:4c:20:14:ab:4e:99:9f:99:1d:e2:e2:1d:74:
                    f5:65:3f:85:e4:7c:b2:3e:0a:fd:c3:e8:a2:05:e6:
                    6c:6f:0b:93:c7:0b:9e:b2:b2:e8:6c:7d:fd:1d:17:
                    36:fa:12:9c:65:d9:a9:6d:24:88:09:6b:b4:3e:e7:
                    c1:72:b8:d4:23:e8:18:2b:de:76:ca:61:1e:60:09:
                    76:08:6a:43:5b:5f:95:f7:66:db:c9:76:9f:83:2d:
                    b5:a8:f5:be:72:76:77:e7:d5:55:ad:3e:ba:91:4f:
                    10:83:13:51:68:cf:58:6c:86:81:42:8e:be:3e:e4:
                    2e:b2:e7:e2:d2:cb:46:11:b1:bc:2e:4d:a5:27:c2:
                    e8:5c:0a:46:11:e9:f9:08:de:4c:20:d6:db:ce:ef:
                    fa:e4:b0:7c:99:11:74:c5:c9:f1:9e:ad:05:f8:e8:
                    8f:9a:1c:cb:20:58:29:ca:cf:f4:10:1e:36:7f:b8:
                    35:95:77:a0:cd:4e:85:46:fb:71:68:69:bd:ac:46:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:34:E8:65:66:2C:44:71:1E:B0:E4:91:8D:E7:FD:6D:C6:DE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0750b44-73ca-3469-a478-324abfbef3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:dc:ad:c1:21:58:58:5b:cf:6f:61:6d:cb:3a:a9:94:b5:3f:
         12:cb:f8:14:2e:5d:a0:ab:7c:cf:ff:f0:b5:ce:b0:76:d4:c5:
         c6:36:2d:65:1c:f0:f2:11:06:62:3d:6f:9e:98:bf:90:96:6a:
         e6:68:90:19:29:c4:7a:39:8c:7a:7f:03:7d:22:17:eb:19:e0:
         2d:c8:f5:0a:49:44:15:31:19:b8:f2:74:db:0b:8e:85:41:91:
         06:a5:c7:b1:6e:d4:ff:b4:c3:85:43:a0:9c:8e:68:6c:66:c0:
         59:a3:44:cb:66:ca:6f:33:e6:8f:b2:c2:8d:e4:19:3f:35:bb:
         f2:40:f5:b5:af:7e:29:22:0f:da:a2:b9:d3:c5:f3:3a:83:7a:
         90:15:b9:75:a9:4c:d2:90:27:63:6f:77:d1:5e:95:73:47:f4:
         63:5a:18:2e:60:ed:d6:cb:ad:ca:88:3c:86:a6:b6:b6:a6:06:
         72:15:f6:08:86:f2:62:a1:75:81:ae:5e:36:02:7b:7c:b6:cd:
         27:2e:5d:e2:5a:e2:af:c0:1f:e4:1c:7e:3b:4a:7c:99:f2:a0:
         3a:46:15:49:1e:53:12:b1:a4:d1:56:d7:b6:ca:1a:10:23:95:
         5c:9f:1e:dd:d4:7c:c0:d0:de:24:f2:7a:b4:28:a1:da:df:9c:
         81:a7:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:30 2026 by rpki-client