Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
File:                     1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json)
Hash identifier:          Q/nHMTEL3qBIl1sLKhiRcnfdD3jBU3dOOmMVxycHLlc=
Subject key identifier:   FE:73:EB:80:F0:AA:32:F3:F9:29:C8:53:A1:78:87:17:5A:F3:63:1E
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F4328584E1E4445C6E126B587D27AF6C0
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     7448
IP address blocks:        143.192.0.0/18 maxlen: 24
                          143.192.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:45:c6:e1:26:b5:87:d2:7a:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=14d36bfb-81ff-49af-a60e-ef7b295678f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:8c:f1:f4:79:0b:4d:b1:42:5b:d1:94:5a:
                    85:82:1d:ee:48:b9:63:e9:7b:4f:1c:27:8b:88:65:
                    5a:2c:60:d7:de:e9:e6:c0:f4:4d:c3:1e:58:df:6f:
                    9d:a8:21:b4:45:b2:fd:5f:7d:f4:96:9a:ec:cb:d6:
                    89:8a:cc:94:c7:bd:0c:54:08:97:bf:1c:27:20:6e:
                    ac:fb:7e:31:65:25:66:03:4b:ca:48:64:02:6a:38:
                    0a:ef:f4:ae:16:41:c1:45:bd:5a:85:93:e7:ef:aa:
                    e3:cf:ea:d2:25:a5:55:e7:5e:fe:ac:7d:9c:fc:59:
                    6c:3f:e9:e9:07:4f:0b:83:1e:a7:5a:fd:23:c4:c0:
                    df:c8:78:28:83:1f:b9:b8:a9:76:95:46:7b:22:8e:
                    87:18:f5:a5:3b:65:9c:28:31:b4:a6:a8:40:13:a3:
                    de:f4:d5:ac:87:2e:0c:b0:85:79:72:00:a6:e3:36:
                    a6:7a:29:b4:bb:26:c0:93:3e:f7:99:a8:ed:e5:65:
                    28:61:46:e5:16:29:dc:3a:5e:0b:9b:bf:b4:d3:32:
                    d3:f9:aa:e5:84:2f:25:3c:97:82:ed:6c:d7:79:03:
                    e8:a3:3f:d9:96:33:d2:c3:a7:ee:88:2d:e3:61:b6:
                    8e:1b:15:47:ea:56:b0:82:ed:f0:40:95:d1:e9:43:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:73:EB:80:F0:AA:32:F3:F9:29:C8:53:A1:78:87:17:5A:F3:63:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.0.0-143.192.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:a2:0b:22:07:75:ee:3a:53:6e:30:67:44:33:0a:cf:59:
         06:1a:f5:0c:aa:e5:2b:7f:eb:b8:ee:a9:ee:e4:7f:58:7c:de:
         05:0b:b0:61:58:21:fc:7f:f7:04:1a:85:cd:e1:9d:58:b9:51:
         65:50:24:fc:8c:d0:ad:43:31:c6:d8:ad:eb:27:59:c9:5a:d9:
         28:1a:30:a5:3d:60:08:b9:3b:66:56:03:a2:ee:df:24:ce:b4:
         7f:e1:3c:75:90:3f:e6:7d:2d:43:f8:ac:a5:2e:cb:3a:0c:44:
         bd:55:8d:04:88:ec:03:70:6f:90:cb:02:d2:76:50:1d:7b:05:
         9b:d5:de:4e:7b:33:eb:1e:e2:47:c7:0f:98:f7:22:bd:c7:b5:
         32:e1:a4:33:0c:5a:7b:a1:18:d0:38:8a:5b:ec:56:90:07:fc:
         0b:72:d7:cb:62:34:f4:45:40:36:84:1b:76:49:c8:92:86:dc:
         65:d4:cb:8b:45:e2:d2:79:05:6c:33:70:58:f2:40:80:c2:aa:
         d8:5c:af:bf:f2:a7:36:60:75:89:d3:bc:ad:40:cd:00:98:dc:
         bf:d6:06:cd:d0:8e:f7:02:36:79:39:bc:53:07:aa:49:d5:35:
         14:e8:cd:4b:5d:d4:50:82:23:ea:0a:2c:84:e5:53:f9:72:0d:
         36:0e:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:54 2026 by rpki-client