Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/40aa422f-603e-3e13-80b9-e07caf542dfd.roa
File:                     40aa422f-603e-3e13-80b9-e07caf542dfd.roa (raw, json)
Hash identifier:          Ea2AnhELV9D2Ky2VHo7mhvBkt5vOoPWeH4LeW/BSE8I=
Subject key identifier:   81:1C:14:5B:06:61:CB:42:4C:9B:7F:9C:8D:69:1C:7A:74:E7:34:6F
Certificate issuer:       /CN=7659d706-fdf7-4c2e-8e41-352e9090b48c
Certificate serial:       010D0C9F4328584ED9C74BE14BE6F9992546E400
Authority key identifier: 5B:F0:62:7C:2E:6A:62:62:F9:52:DA:74:21:48:68:A7:FF:7B:01:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/40aa422f-603e-3e13-80b9-e07caf542dfd.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     402070
IP address blocks:        131.143.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:4b:e1:4b:e6:f9:99:25:46:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7659d706-fdf7-4c2e-8e41-352e9090b48c
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=d71a1866-1875-4baf-a75c-9ad7688be73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:b6:56:a9:c9:d7:96:8b:66:bc:7d:b2:b2:
                    74:13:0b:c2:2f:d1:95:2e:c0:e1:53:4f:e5:aa:57:
                    78:2e:e9:32:12:a1:96:38:4d:a4:92:ba:ec:62:ce:
                    cf:d5:69:46:3d:b3:4a:72:b1:d3:0c:70:ba:f1:ac:
                    01:6e:c1:4b:59:01:ae:b5:ec:73:50:53:23:a1:69:
                    28:38:f4:9c:9f:72:e1:9b:55:8f:88:e8:6f:ef:6e:
                    6a:6a:29:79:e2:ad:53:37:d1:a2:aa:5a:12:46:23:
                    f6:a2:12:00:fc:24:da:63:1e:d2:1b:70:4d:38:6c:
                    93:a6:fd:de:9d:7d:be:cd:83:e6:0e:ca:71:37:84:
                    cc:18:14:c2:12:09:02:76:83:61:63:8a:f7:3a:60:
                    d6:8a:74:57:fd:dd:32:3d:d9:bc:a9:39:2e:35:6c:
                    dd:9d:8a:d8:9c:99:c6:f3:8e:8f:a7:b2:96:92:72:
                    04:31:22:90:99:ce:01:c2:8d:34:a2:7a:29:aa:d9:
                    3b:17:57:5e:29:86:5d:2f:fb:2f:dd:53:78:9f:89:
                    82:7c:96:85:2f:4d:12:87:f7:7d:85:a1:94:e5:14:
                    41:16:1d:15:ad:a2:38:8b:e7:7e:a6:38:38:a7:0e:
                    c6:47:ea:35:19:3c:63:e2:20:d6:0e:d5:e9:ce:e2:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1C:14:5B:06:61:CB:42:4C:9B:7F:9C:8D:69:1C:7A:74:E7:34:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/40aa422f-603e-3e13-80b9-e07caf542dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F0:62:7C:2E:6A:62:62:F9:52:DA:74:21:48:68:A7:FF:7B:01:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:28:27:2f:5d:77:85:99:be:45:7c:04:42:86:da:52:79:75:
         c2:46:f0:6d:25:9d:d8:e1:07:71:f7:a1:24:d0:84:dc:04:bb:
         d5:b5:da:11:fd:5e:a8:a6:5c:8c:15:db:c6:72:87:65:a4:0b:
         75:fd:25:8a:4f:2c:11:ca:80:03:d9:b5:61:d8:82:7c:6a:0c:
         d7:ab:ca:75:01:7f:13:ec:00:eb:9d:ac:ad:6e:80:98:2d:37:
         70:bc:07:65:d2:5e:49:f0:af:02:5a:87:16:10:c5:60:39:7d:
         a1:9c:3f:51:43:c8:79:e1:7b:0b:90:8a:d1:e9:c4:9d:8e:10:
         94:3f:f7:9a:84:6d:01:8c:69:92:15:a8:2b:3f:20:d4:ca:e7:
         6e:05:82:81:c0:15:78:12:bf:4c:fd:5a:2d:20:4a:cd:b6:80:
         f6:30:ae:5d:02:67:75:12:bf:4e:15:0b:ad:9c:13:c5:06:74:
         55:43:65:c0:e8:bd:29:25:cb:38:88:f3:08:09:42:05:af:e2:
         a9:c6:d6:9b:85:4f:45:52:85:79:e5:92:56:75:de:d2:e8:d4:
         92:f3:e2:f5:f5:31:30:c6:90:b5:53:97:a5:b5:25:84:c2:2d:
         9c:d9:d8:9c:32:38:9b:dd:d7:78:23:1b:c6:d4:5c:20:11:64:
         2a:7e:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:13 2026 by rpki-client