Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b/7be0197d-8ef3-33b6-923d-81006a5d6b0d.roa
File:                     7be0197d-8ef3-33b6-923d-81006a5d6b0d.roa (raw, json)
Hash identifier:          As1RXVHJY58OQgJ6BT8t/rt2K293Qr7kNLTwVYzz+U8=
Subject key identifier:   F6:45:97:74:A9:47:B5:61:09:C4:91:D3:C7:5C:31:F8:99:AA:03:93
Certificate issuer:       /CN=15e8f23b-84b3-430a-8ae4-b415531df88b
Certificate serial:       010D0C9F4328584F655E6BCEE32F0925B135AC80
Authority key identifier: 95:95:E2:35:33:3A:D5:EE:C8:42:28:F4:8D:82:4B:BD:4C:67:3A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b/7be0197d-8ef3-33b6-923d-81006a5d6b0d.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     3128
IP address blocks:        143.236.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b/15e8f23b-84b3-430a-8ae4-b415531df88b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b/15e8f23b-84b3-430a-8ae4-b415531df88b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:6b:ce:e3:2f:09:25:b1:35:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15e8f23b-84b3-430a-8ae4-b415531df88b
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=7bd4a88b-4fd9-49fa-8e7c-530f375b36ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:3e:4a:25:ed:01:93:55:94:85:49:da:48:
                    5e:64:2c:8e:89:2f:79:0c:85:fe:16:ee:ba:d8:c8:
                    33:ec:f3:ff:29:8e:26:ba:7d:98:29:4a:18:05:26:
                    81:3d:f7:4a:2b:1f:5d:a2:f6:fe:8e:b9:72:40:83:
                    44:af:12:71:94:0c:2f:f1:18:a3:3e:df:0e:26:73:
                    05:72:6b:cb:d3:74:78:f8:53:2f:5e:e3:b7:90:61:
                    1c:f2:f3:ae:46:37:6c:ef:b2:6a:71:d1:f3:72:be:
                    e5:1b:c9:7f:84:7d:4c:0a:66:81:d1:a1:1b:10:7a:
                    9b:74:d9:41:5f:fa:27:a7:7b:e1:49:c6:1b:f7:e5:
                    1e:9e:5e:e0:94:f2:c9:52:c8:e6:fd:65:43:9b:db:
                    d3:1b:a3:83:6a:b3:e0:1f:e5:f1:3c:16:c3:90:59:
                    63:01:4b:d8:21:45:d5:9d:68:14:c9:fb:0a:aa:ee:
                    37:be:c1:10:19:5c:65:ab:62:a2:25:a0:a9:3f:ab:
                    22:6a:3b:8b:5e:d1:4c:b0:6b:6a:5c:86:93:44:e8:
                    92:43:7e:4c:4b:b2:d7:05:9c:ec:35:bd:6d:4a:c3:
                    96:3d:66:59:d2:d0:42:e9:da:fa:ce:e5:a8:3c:23:
                    59:b7:7f:df:da:9f:f4:c5:8d:53:09:7f:0b:3c:1a:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:97:74:A9:47:B5:61:09:C4:91:D3:C7:5C:31:F8:99:AA:03:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b/7be0197d-8ef3-33b6-923d-81006a5d6b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b/15e8f23b-84b3-430a-8ae4-b415531df88b.crl

            X509v3 Authority Key Identifier:
                keyid:95:95:E2:35:33:3A:D5:EE:C8:42:28:F4:8D:82:4B:BD:4C:67:3A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15e8f23b-84b3-430a-8ae4-b415531df88b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:0d:62:93:60:98:ea:e0:0b:b5:17:4d:d6:c2:33:f5:7a:
         49:f1:d4:cc:e2:dd:b0:f0:e1:3c:a5:a2:11:08:87:b4:8c:e5:
         84:53:89:25:5f:6f:8e:a5:a0:f6:a2:6c:5a:53:0b:da:3b:9f:
         2a:7f:9f:d6:32:21:c7:81:e0:9d:a4:f8:1f:5a:12:cd:5b:6a:
         ed:50:be:3f:12:05:78:14:49:2b:7b:90:1f:29:99:34:66:d7:
         ac:bb:f1:7e:f2:84:ee:15:2c:f1:93:32:d3:5c:e2:31:9a:4f:
         d5:d4:1a:84:1c:f4:f5:8f:1a:f7:4d:2d:b5:99:c6:28:90:d7:
         25:84:98:14:f9:7a:20:d7:45:79:5e:5c:e1:ed:9c:bb:f3:ff:
         55:16:ea:bd:f7:76:72:f9:4c:a0:c4:06:34:d7:47:b8:01:84:
         f9:9b:85:73:7d:cb:38:98:da:6b:00:77:1a:e8:94:ff:5a:ba:
         6a:d0:0e:95:38:13:f1:30:ec:40:9e:b8:14:3c:7b:ab:d7:af:
         52:0d:51:c5:18:ca:b7:81:ad:51:e4:63:d9:ea:56:7f:f6:a5:
         a8:28:57:bc:7c:c7:cc:0c:bc:d1:16:ac:d3:eb:52:e1:f7:e4:
         d4:3f:4e:3a:c8:90:e7:c9:1f:3e:af:5b:3a:61:58:e4:a5:4a:
         f3:88:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:45:21 2026 by rpki-client