Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/0ca26dea-f768-3be9-8dc6-5274db5e8dc9.roa
File:                     0ca26dea-f768-3be9-8dc6-5274db5e8dc9.roa (raw, json)
Hash identifier:          +YRTSLJ1WUJpQ7/cyQ+btZPWx16uOPNIXNofGEwnW7M=
Subject key identifier:   6D:21:BE:87:D7:35:DD:70:B6:D9:1E:88:9B:CA:43:37:DF:A6:E8:79
Certificate issuer:       /CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d
Certificate serial:       010D0C9F4328584F392EA5C18E0C98ECB4669D80
Authority key identifier: 91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/0ca26dea-f768-3be9-8dc6-5274db5e8dc9.roa
Signing time:             Sat 19 Sep 2026 05:10:31 +0000
ROA not before:           Sat 19 Sep 2026 05:10:31 +0000
ROA not after:            Fri 18 Dec 2026 06:10:31 +0000
asID:                     29120
IP address blocks:        143.58.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:39:2e:a5:c1:8e:0c:98:ec:b4:66:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d
        Validity
            Not Before: Sep 19 05:10:31 2026 GMT
            Not After : Dec 18 06:10:31 2026 GMT
        Subject: CN=805dd6f1-e148-4688-b7ca-f01dcc9ad46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:1e:c7:f0:94:28:ca:5e:f5:2a:70:70:cf:
                    84:70:fe:be:43:c3:2e:8d:51:e1:4d:f5:74:5b:2d:
                    62:6e:67:44:94:18:73:3a:26:74:51:2a:34:c0:ea:
                    b2:d1:38:7d:07:9d:32:2b:65:3a:19:c8:eb:a3:0d:
                    a3:37:d2:82:d6:41:4b:0f:1e:7d:57:a9:b0:e9:d5:
                    8b:d7:17:62:60:a5:d4:a2:3a:b8:d5:40:fe:84:21:
                    39:67:70:09:9f:58:75:2f:97:e1:77:55:f5:b3:01:
                    05:de:f6:96:bf:d0:fa:38:51:e7:53:84:74:27:6c:
                    59:a0:e5:3e:ba:45:b6:98:0c:10:68:0d:7a:d8:67:
                    9d:32:da:c7:ff:34:8a:7b:bf:fd:b7:f4:f4:99:81:
                    8b:3b:8e:02:0f:d8:28:d4:df:dc:7c:ab:dd:bb:a8:
                    aa:8e:d9:91:66:ea:8a:c9:ad:f3:b5:a1:c2:39:89:
                    ef:b6:fa:53:ce:02:e2:a8:a5:a8:4a:9a:6a:fc:52:
                    27:9d:28:03:a4:64:59:0d:d6:fd:80:f3:23:45:ad:
                    12:ab:2f:97:1e:52:b4:23:7a:14:8e:65:6e:d4:4f:
                    ac:0f:0d:5b:61:b0:a1:d8:7a:3f:60:cd:73:86:4b:
                    53:0c:c6:67:b6:c2:b5:bd:4d:16:4c:c3:4b:db:6d:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:21:BE:87:D7:35:DD:70:B6:D9:1E:88:9B:CA:43:37:DF:A6:E8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/0ca26dea-f768-3be9-8dc6-5274db5e8dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl

            X509v3 Authority Key Identifier:
                keyid:91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.58.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:94:d2:a3:18:e3:5c:21:6f:2f:fd:82:a5:8d:c1:12:9e:42:
         4d:0b:5d:c7:dc:9c:7a:0b:68:93:69:48:2f:5c:cc:87:eb:dd:
         dd:ac:02:34:c9:e4:d5:98:84:13:69:88:ed:88:1e:10:b4:8d:
         0a:4e:52:64:e3:b3:1c:ab:6d:3f:37:15:c4:9d:30:b0:02:86:
         d2:52:40:90:47:59:a4:41:69:28:5e:b2:50:62:1d:08:d5:fb:
         eb:77:22:72:2f:08:af:8f:db:03:bd:80:0a:1c:4e:58:92:1a:
         90:12:2c:c0:34:a8:3c:42:5c:97:eb:e6:b8:72:c9:54:75:7e:
         dc:58:7d:72:ae:54:be:79:64:c5:c2:67:78:b3:ab:e1:bd:11:
         90:8d:aa:dc:66:40:43:70:e5:8e:c2:61:b9:65:5b:bb:a2:ae:
         44:38:33:59:02:1d:c1:33:f4:ba:55:46:dc:97:67:b0:4f:fe:
         82:6d:7f:6e:6f:29:08:d1:ec:e4:59:36:4c:c0:e0:b4:17:bf:
         c1:11:cb:5e:5c:e3:a4:66:57:5b:a4:06:a5:4a:af:59:8f:2d:
         c4:08:07:fe:4e:73:ca:9e:79:0e:a0:d0:42:95:8a:b9:db:79:
         9e:36:d7:44:e4:d1:6d:89:88:d5:ef:50:2f:1c:74:f6:a0:4b:
         d1:eb:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:19:50 2026 by rpki-client