Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa
File:                     345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa (raw, json)
Hash identifier:          L/40673oQj63yekct7rNR44CXdguYpN7d5I1iLWZNtA=
Subject key identifier:   FE:9E:F6:E7:05:EA:B4:17:78:86:F2:1E:2D:79:85:45:53:00:71:01
Certificate issuer:       /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial:       010D0C9F4328584D24E11A30E3011E8C7AC62F90
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     400136
IP address blocks:        98.143.148.0/22 maxlen: 24
                          98.143.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:1a:30:e3:01:1e:8c:7a:c6:2f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=4bdcf9fe-a14d-4f9e-858c-255239d80e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:10:21:24:a3:87:3f:06:42:76:95:4d:b7:
                    02:76:5b:d9:23:9d:3e:cd:ba:40:54:44:f1:d3:9f:
                    e3:28:9b:6d:34:d2:fd:df:ed:cf:14:48:fd:71:aa:
                    65:eb:ee:52:bb:dd:c0:5f:29:ba:ed:74:65:ff:5e:
                    40:f3:ad:d3:2d:76:e5:04:77:29:b5:c2:77:00:80:
                    2c:7b:4a:ca:b7:17:10:36:9d:24:8f:8b:e7:81:39:
                    70:fe:c5:2c:a7:50:59:49:26:a2:46:19:ea:72:c3:
                    d1:97:4b:a0:b9:6a:99:40:42:bc:29:c5:57:ce:4a:
                    86:88:8d:ef:0b:d4:6b:a0:a8:f1:23:9a:e2:25:2f:
                    b6:55:d2:d2:95:41:9e:b3:77:7e:f3:8e:51:ba:7e:
                    85:78:ad:4c:d8:0d:54:b9:69:83:ce:23:ed:15:72:
                    43:ce:24:c4:77:cd:2c:0f:b3:27:e9:e8:90:67:14:
                    f8:e7:d0:b2:82:c1:f9:8e:45:6e:d0:e1:60:25:d8:
                    15:e3:7d:45:ce:dd:d5:34:0c:0c:4c:8d:b8:3d:ee:
                    8c:ad:b0:10:c9:fc:c7:d0:73:3d:fe:7f:c0:14:e7:
                    b0:1a:25:ab:b5:60:47:14:23:fc:c7:a9:a8:ee:a6:
                    be:5c:4b:0e:dd:96:af:b7:c6:2c:06:60:17:86:b2:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9E:F6:E7:05:EA:B4:17:78:86:F2:1E:2D:79:85:45:53:00:71:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.143.148.0-98.143.155.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:f3:bf:2e:21:7c:7c:3c:4e:2b:7d:ba:b7:84:bd:c5:c9:
         7d:64:9c:b3:cb:eb:da:fd:ca:b8:cf:cc:55:1f:fa:73:fd:24:
         28:cb:5f:4e:eb:7c:a2:0f:9c:3b:b5:6c:c3:d1:7a:05:ef:fb:
         2d:3c:53:b4:83:52:2f:9b:08:bc:83:15:19:0e:f7:2e:0f:43:
         0d:bb:a9:1a:1f:88:43:a0:eb:a9:e8:fd:63:fc:cd:45:7b:ef:
         86:59:08:4b:b9:ed:28:40:02:61:eb:aa:3c:cf:a4:a9:e1:35:
         a7:08:e0:41:56:44:4a:3e:5f:56:89:87:7c:19:c2:72:ba:d6:
         96:6f:c0:34:79:89:ed:eb:e4:d2:0a:38:b4:f1:67:33:13:1f:
         7d:c7:f7:30:d7:a5:28:72:32:39:44:5c:86:43:a0:99:21:f7:
         5f:b9:0a:2d:db:54:fb:49:c8:2f:da:b4:ae:4c:07:ee:9c:b1:
         f9:cf:2d:f8:51:a4:c6:91:d1:12:d2:ff:3c:95:e8:67:a1:43:
         15:6a:92:ea:54:8f:c8:43:74:9d:f3:6e:97:96:04:3a:a5:5a:
         e9:87:84:53:e5:0c:ee:82:b8:9b:f3:9a:78:3d:a6:c7:de:03:
         b5:26:b3:1c:43:0e:98:87:21:b9:ec:55:c1:ee:17:0a:d4:f8:
         ce:12:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:23 2026 by rpki-client