Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa
File:                     b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa (raw, json)
Hash identifier:          /mUp5sK0kTESLVrOmAuWHQBBUkbVfe0zb/MVnkw1CcE=
Subject key identifier:   8B:4D:1A:5D:B9:0C:D9:4D:B9:B2:AD:54:77:25:89:18:96:3F:81:52
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584E8C8A3D7486DF84651DAB1A2A
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     4181
IP address blocks:        217.143.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:3d:74:86:df:84:65:1d:ab:1a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=ffa4fa7f-1e33-4109-bc71-6079c541855e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:18:d0:92:50:b7:12:70:1d:fc:5b:36:44:
                    64:f3:5b:1b:ba:52:f0:d7:eb:b4:63:2c:cd:5e:18:
                    2e:d5:f9:fc:eb:4c:1a:52:8b:30:7d:4e:b3:50:f5:
                    77:b7:cf:7b:c5:d5:75:55:cf:c6:94:5f:84:07:3f:
                    fa:12:54:09:37:33:96:f1:87:84:18:cb:d3:ef:1f:
                    a9:e8:09:66:d1:87:50:3f:3a:e1:63:ad:94:39:c5:
                    06:44:71:38:d0:7b:c9:2e:c1:20:2b:3d:1a:00:83:
                    a5:fd:1d:c8:67:71:d2:a1:90:d4:ed:e4:ab:ec:1d:
                    a8:74:23:4b:f1:a4:e1:86:ab:6d:88:43:78:d7:0a:
                    60:27:43:bf:3f:83:4e:5f:1a:90:36:25:c1:86:04:
                    1b:f9:5e:b9:50:2e:dc:90:0f:30:5f:0b:19:da:78:
                    f6:1c:40:cf:b4:07:53:c0:c6:fa:9d:8a:8b:65:ca:
                    26:11:fe:d1:49:0d:80:37:0f:e7:ea:90:60:65:9c:
                    0f:00:67:6b:71:91:cc:7a:6d:68:fe:83:85:c7:39:
                    b8:f8:ae:24:ad:da:2f:e3:48:4c:9a:8a:72:fd:bf:
                    9c:1e:d2:64:5c:19:5d:58:30:de:9c:1d:c2:54:83:
                    a6:c5:31:89:a9:89:d6:db:44:c0:e7:6f:87:3e:14:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4D:1A:5D:B9:0C:D9:4D:B9:B2:AD:54:77:25:89:18:96:3F:81:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.143.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:3d:bd:ca:70:75:b8:75:67:83:89:68:ce:cf:56:47:9e:08:
         95:29:cb:57:6b:22:05:2a:bf:16:7c:8f:06:90:ee:0c:fb:df:
         e7:66:e2:41:ec:fd:18:6b:ed:89:3b:af:c2:f4:0f:8a:48:fd:
         26:20:f0:c2:d9:07:7f:d5:7b:18:43:82:22:d2:b6:2b:e4:12:
         20:87:bf:f5:d3:6e:a2:95:92:fc:65:3b:6e:b1:89:7e:0d:07:
         6d:21:ff:4f:54:e4:95:6c:6c:58:69:4c:4e:d1:9d:03:f1:96:
         53:21:fc:eb:20:ee:a5:ee:86:47:c5:a1:c9:f5:01:cc:42:4f:
         c4:3f:c3:e3:48:67:db:d9:b4:f4:37:d6:df:f2:89:6a:d9:5f:
         bc:1a:22:48:a3:5e:9c:91:10:90:b0:fc:e2:33:86:86:17:14:
         16:05:17:49:ee:45:76:ac:7f:5b:f6:00:8b:55:bc:32:05:84:
         52:8d:68:34:2b:ff:47:ca:68:0a:67:20:71:7a:a0:be:17:ff:
         1a:24:c7:6a:58:ea:3d:f0:e6:ae:63:f1:2c:31:f0:97:63:55:
         bb:95:0f:a9:5a:6b:f0:f8:6f:14:20:3c:a8:be:f8:6a:41:0e:
         0d:d7:25:65:e8:14:e6:98:99:97:91:14:69:6a:cc:0a:56:d2:
         49:69:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:39 2026 by rpki-client