Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa
File:                     e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa (raw, json)
Hash identifier:          6wQJK0vuJLj8GXKT1Bvo6uJVgZEe6jHt6lRr4M0cq3U=
Subject key identifier:   A8:18:EB:F2:BE:CB:65:6D:24:C4:28:87:EC:71:75:AC:65:EC:BB:6D
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584D59EA705709397C35B36303C0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     23280
IP address blocks:        143.223.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:70:57:09:39:7c:35:b3:63:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=e26ed007-970c-4fc1-b460-6e99967bb9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:ae:9f:5c:52:5d:4d:fe:7a:56:90:c5:78:
                    14:82:34:5e:7c:7a:d8:7e:14:c9:cc:b5:76:2d:6b:
                    09:4c:73:80:24:f9:d0:5b:c8:36:d0:05:6b:4b:c1:
                    34:36:1f:55:42:c1:48:7e:1a:c0:c8:56:ba:82:6b:
                    75:5b:5b:fc:1d:5e:b0:ae:8c:39:ff:10:fc:fa:36:
                    63:3b:ff:01:27:4b:ee:2e:e4:78:3c:dd:1b:9b:b1:
                    cd:cb:37:a5:3b:e7:90:8b:e2:0f:08:0e:3f:ea:cf:
                    cc:55:de:b5:ea:05:86:f5:68:f2:bc:c9:13:ab:d8:
                    a2:64:eb:c2:21:1a:a5:e8:14:c4:99:d5:ca:f8:02:
                    1e:d6:fa:ca:3a:d8:5d:b7:04:72:05:19:37:ce:f2:
                    cb:d5:11:76:50:c9:5c:04:e4:61:d4:5b:1e:fa:3e:
                    54:ad:2b:f6:eb:1e:3f:0b:17:a7:3f:d4:75:39:3a:
                    cd:33:57:1c:4c:2b:22:6a:f0:7d:89:89:56:4e:b7:
                    f6:e2:b9:57:b3:24:d9:40:51:c1:df:a3:1f:d1:bb:
                    bb:9b:d2:6d:50:d9:90:d7:90:42:e7:91:c7:62:85:
                    f0:34:4e:04:0a:44:0b:61:16:36:b0:49:00:dc:52:
                    c2:d9:d9:a8:07:c3:46:ab:97:b7:bb:23:e3:cd:92:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:EB:F2:BE:CB:65:6D:24:C4:28:87:EC:71:75:AC:65:EC:BB:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:b3:f9:ed:5a:81:2f:3d:07:0d:61:62:41:2d:ee:02:a0:
         97:98:bf:df:8c:d3:6b:7e:f2:a9:60:55:b2:c3:0f:a3:5d:88:
         63:ff:dd:5a:44:c0:4f:53:c6:9b:a6:ec:75:77:f6:8f:07:7b:
         0a:2f:9b:d8:a8:6e:2d:99:1b:c6:c0:f2:f1:7e:af:73:2d:b3:
         25:b3:7d:8e:a9:69:57:74:e5:ed:31:b6:da:8b:bd:cd:7c:55:
         62:43:a4:2b:57:3b:ab:cd:52:bd:af:69:ca:33:cb:04:36:74:
         47:56:1f:1e:b6:ab:a7:ad:73:cb:d8:5c:ac:5b:eb:3e:8e:fd:
         da:7c:6d:35:c2:d4:5f:bf:2d:c3:60:19:86:5c:5b:22:d6:19:
         a6:1f:ff:10:1d:37:6d:55:36:a6:1d:e4:83:f7:a1:df:a4:8b:
         fe:00:bd:36:b5:4d:eb:01:49:d0:68:d9:4d:f2:d6:a5:42:50:
         9c:ef:70:dc:9a:03:3b:c8:d8:09:1b:b7:ff:a1:c5:59:8c:5c:
         fc:ba:bd:5b:fb:b0:0c:4e:dd:3c:b9:76:6f:87:4a:b7:8f:eb:
         8a:78:c7:6c:69:8c:1c:de:ab:13:56:01:bb:75:00:e4:44:19:
         54:f1:63:dd:a5:6b:3a:12:13:e0:fa:ae:7e:cf:b9:2e:56:5a:
         5c:c3:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:30 2026 by rpki-client