Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/2effcdd4-94de-32b5-bb51-370f1ef05c54.roa
File:                     2effcdd4-94de-32b5-bb51-370f1ef05c54.roa (raw, json)
Hash identifier:          +MzzNNykfDoiCvET3DTqsYbjF/MN78uwwIYxSG1NVE0=
Subject key identifier:   3D:62:8F:13:38:CE:2C:45:27:23:1F:16:81:E5:12:21:BA:DB:D3:C9
Certificate issuer:       /CN=d1043217-41b2-4089-81fc-42bf08d56223
Certificate serial:       010D0C9F4328584F49739733BC0EE929C15744A0
Authority key identifier: F4:14:AD:6B:33:7F:59:4C:9F:0D:B0:10:E0:A9:A9:C3:FE:96:73:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/2effcdd4-94de-32b5-bb51-370f1ef05c54.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401798
IP address blocks:        199.241.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:97:33:bc:0e:e9:29:c1:57:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1043217-41b2-4089-81fc-42bf08d56223
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=787a62a0-73c6-4f48-a38b-af2b0ede657c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:0b:0c:02:79:ae:6d:48:e6:0e:7a:fb:09:
                    df:c6:ad:3c:28:d4:e8:95:f7:c5:8b:3c:41:e1:01:
                    cb:44:5d:0f:0f:d9:c1:7b:10:56:04:ae:22:48:4a:
                    4b:98:0a:6b:39:f3:7c:0a:da:2f:76:10:0e:cc:91:
                    62:db:70:fc:b4:e7:56:85:58:e7:79:d4:7a:c4:37:
                    1c:1d:f8:7f:e4:27:27:60:21:2f:c9:78:9f:ec:8d:
                    58:8e:26:8f:5f:1a:31:9f:e9:d2:1c:39:26:d5:d4:
                    74:b4:99:a1:6b:52:76:f8:d8:31:1b:07:fa:d8:b3:
                    69:75:b7:c1:7a:a6:37:41:66:d1:c0:dc:72:31:05:
                    75:65:41:77:e5:ff:05:f8:71:1c:06:69:23:86:05:
                    f3:d6:2f:9d:74:49:b0:53:4b:d5:e9:91:03:fa:7e:
                    7f:c0:47:8b:47:ad:e5:8a:6c:2d:23:7c:b0:3a:16:
                    32:8b:03:69:f6:81:28:0f:5f:65:c7:8b:8a:ec:e0:
                    a4:ad:a3:09:1e:ba:ff:7b:62:58:dd:c6:10:ef:7a:
                    65:3a:4f:3b:d4:1c:e2:9d:cf:3b:7e:ab:e9:41:94:
                    3a:09:c5:d3:93:6e:ef:d9:93:b5:0b:df:87:5c:21:
                    01:75:1a:92:59:fb:9c:0b:35:a5:a9:c4:a7:f1:0d:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:62:8F:13:38:CE:2C:45:27:23:1F:16:81:E5:12:21:BA:DB:D3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/2effcdd4-94de-32b5-bb51-370f1ef05c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.crl

            X509v3 Authority Key Identifier:
                keyid:F4:14:AD:6B:33:7F:59:4C:9F:0D:B0:10:E0:A9:A9:C3:FE:96:73:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:45:f5:4a:87:7c:01:0b:32:92:a0:53:73:e8:10:8c:c0:89:
         30:88:aa:fc:3c:89:9b:f7:04:61:dc:af:5a:1f:29:ce:9b:43:
         65:45:9d:40:cf:ca:61:3a:74:f6:18:f3:3f:bd:2c:cb:e8:52:
         b1:fe:d0:b9:5f:a6:b9:f9:df:53:3e:00:1c:41:97:6f:17:28:
         f7:de:01:be:57:27:03:ab:5f:19:da:e2:9e:a1:28:52:f5:b3:
         1e:17:db:12:0a:aa:a1:25:41:f9:b2:03:1d:11:70:88:48:60:
         bc:be:2f:8c:b3:db:d0:7e:fa:51:80:c8:7b:19:2c:7f:2e:fa:
         64:fa:c5:b7:b2:93:2a:2f:d6:1e:c4:d1:b4:33:b4:d5:1e:32:
         95:8f:38:be:38:c4:83:25:bf:3b:a3:e7:0f:6b:b7:f1:f6:ea:
         bf:ef:ff:e6:37:78:85:3e:75:97:a4:6c:7f:dc:26:e3:38:da:
         25:63:74:84:5d:1b:6c:47:de:68:c2:57:c9:0f:c4:bb:f7:8b:
         b3:95:d7:1f:e5:4c:8b:4d:e8:0e:91:f5:21:15:21:b2:b7:da:
         17:32:3c:be:b2:46:16:3a:16:a6:6a:48:42:dc:82:bd:53:9a:
         de:2b:28:c0:20:47:95:23:84:4d:f0:00:72:a2:41:a0:0f:f9:
         a1:6c:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:09:22 2026 by rpki-client