Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e37a9c90-c4ea-3097-aeb1-82f6f4dcf0fa.roa
File:                     e37a9c90-c4ea-3097-aeb1-82f6f4dcf0fa.roa (raw, json)
Hash identifier:          LuVNRxGqgM8/mli9CzB0KcgiZVxtCBgURnohdm2/TEM=
Subject key identifier:   FE:9B:7E:4D:59:33:F2:21:2E:F1:33:33:2A:38:0D:87:73:AE:5F:CC
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584E66DA075C70880AC206DAE940
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e37a9c90-c4ea-3097-aeb1-82f6f4dcf0fa.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     14061
IP address blocks:        143.244.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:07:5c:70:88:0a:c2:06:da:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=97015a91-57bd-4c14-9ec9-527f63058f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:8c:8c:4c:e0:c3:9c:00:f9:76:b1:02:be:
                    ce:0b:60:58:d8:e9:c1:c5:b2:e1:fc:9b:3c:e0:d6:
                    72:20:04:9c:e1:60:2b:45:ff:e6:8a:57:d4:97:7c:
                    df:f1:8f:3d:6f:ec:68:62:12:af:ac:f6:fd:d5:a6:
                    2f:90:26:b9:55:8a:69:9f:ac:40:58:81:83:f7:92:
                    b6:4e:e5:b5:61:4f:a1:63:1f:1c:f2:47:92:6a:df:
                    fa:c7:1c:86:0e:d0:7d:5f:99:b2:74:bd:93:07:07:
                    4f:fc:cd:ee:d3:f2:35:48:1e:d6:07:16:11:19:1f:
                    3f:ba:e3:87:88:af:c5:ca:1d:52:fd:c5:8d:e7:6d:
                    4c:64:3f:fb:97:c8:5a:d9:d2:58:e1:6e:2e:49:a4:
                    24:44:1d:43:15:63:8b:90:8d:18:ab:40:7b:d5:a2:
                    73:56:42:18:9c:2e:bf:c8:78:d4:9e:c7:b5:5d:8d:
                    61:01:b7:36:75:80:ab:6e:96:f7:57:fe:e8:e2:f6:
                    c3:b3:c8:22:1d:fb:58:a4:a1:d9:f3:70:29:c9:56:
                    87:a9:d5:83:34:b0:e2:69:4a:0f:16:eb:35:94:1a:
                    34:44:6c:2a:95:53:40:1a:52:3e:35:c5:99:8d:3f:
                    7f:f5:da:b8:28:3f:b2:be:09:6b:f1:76:01:e9:00:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9B:7E:4D:59:33:F2:21:2E:F1:33:33:2A:38:0D:87:73:AE:5F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e37a9c90-c4ea-3097-aeb1-82f6f4dcf0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:90:2d:e8:be:5d:2e:f8:84:9a:de:85:6b:08:52:f0:76:b7:
         fe:8d:7d:6d:09:39:19:87:6e:5b:65:ba:10:d6:b7:6e:02:53:
         a9:37:ea:b9:c0:cb:9f:e6:71:4e:23:ef:67:8c:4a:21:93:18:
         0d:fd:4c:32:59:de:d2:91:a0:03:9d:c2:a6:8f:af:96:ae:3b:
         a1:e9:4d:03:da:bd:62:aa:66:71:26:7a:c7:0c:22:82:78:a4:
         1f:cb:0a:3c:c9:0b:0e:96:e5:7e:0a:92:72:b6:be:7b:a5:86:
         bf:e0:1f:51:23:4a:b0:6d:cf:9e:5d:66:e5:30:d5:1b:32:9b:
         7d:76:b1:aa:71:df:1d:7b:75:6e:4f:c4:de:c5:d5:75:00:c3:
         9d:48:a5:2a:ea:33:f9:db:49:58:2e:15:d5:dd:01:66:ad:91:
         0a:02:78:e0:b8:37:80:c8:aa:cc:dc:c4:cf:90:a7:e8:1b:f6:
         f7:3e:63:65:52:42:65:db:9b:89:06:d4:af:e9:af:dd:3e:47:
         3d:3e:f6:83:e1:24:3d:b9:94:cf:c8:06:e6:83:40:54:32:8c:
         e7:6f:06:2e:39:82:19:77:ef:06:a4:7d:8c:fb:27:c0:88:1d:
         09:f6:95:ce:9b:92:c5:b8:a2:48:05:00:c6:44:62:9a:30:0a:
         99:6e:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:20 2026 by rpki-client