Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/30b29ec8-c538-3d18-b944-3b40662f733e.roa
File:                     30b29ec8-c538-3d18-b944-3b40662f733e.roa (raw, json)
Hash identifier:          uqGVzYSHBfHNi6Bixo6mXu0zHrBWlSZFXruwwfhykU4=
Subject key identifier:   61:6C:1B:9A:B9:6B:29:AB:9C:80:0F:88:94:CC:27:1D:6D:5C:EB:85
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584F4976918BF45AC11C87645400
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/30b29ec8-c538-3d18-b944-3b40662f733e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23341
IP address blocks:        143.55.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:91:8b:f4:5a:c1:1c:87:64:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c3211023-6e1f-4dd3-ae42-76b2b3568e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:7a:f2:07:f6:a2:22:f4:4a:fa:fb:b0:3a:
                    2e:88:48:54:3d:68:1b:76:55:d0:0c:f2:1d:e4:08:
                    f0:83:fa:66:08:ba:e8:bb:bf:62:1d:9f:d6:af:a1:
                    f0:b0:1c:68:af:54:b2:95:55:a2:10:4c:62:fe:22:
                    95:2c:c4:10:75:cc:0c:bd:c6:2d:c0:6f:1e:4f:33:
                    32:a1:ae:6b:0a:d2:be:54:f9:ce:5c:8b:12:9d:5d:
                    7b:e8:37:a9:ad:a7:ab:3b:b6:4c:d6:7f:16:41:a8:
                    8f:07:62:7b:8b:c1:6e:91:cc:44:2c:c3:21:08:94:
                    65:d4:4a:49:e2:e5:c1:2c:8c:5e:18:30:2c:e5:9c:
                    ae:8d:73:69:28:04:ad:ca:2c:66:52:36:7c:6f:35:
                    c8:0e:be:0f:1f:77:0a:3d:36:f1:ae:55:73:12:b9:
                    91:f4:6f:68:e4:94:88:68:22:d6:e0:de:fa:c1:1f:
                    ba:b3:bf:ae:2c:4e:5b:66:42:10:af:56:73:f7:92:
                    39:05:a4:95:58:b8:64:d7:35:f8:24:e9:98:00:b0:
                    10:f3:4c:58:30:a1:17:1a:b5:58:49:87:94:c1:2c:
                    9f:e7:43:1f:8d:06:4b:9e:88:84:ed:e6:d0:f7:c0:
                    bf:4d:de:2d:b6:fb:c2:1a:e0:de:1e:50:cc:62:50:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6C:1B:9A:B9:6B:29:AB:9C:80:0F:88:94:CC:27:1D:6D:5C:EB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/30b29ec8-c538-3d18-b944-3b40662f733e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f3:22:fc:40:48:4f:34:9f:4c:86:c3:89:68:0c:3e:7b:f3:
         d0:2e:0f:f2:e9:08:45:20:d9:bf:84:f8:5b:e7:80:88:c9:07:
         db:81:1a:03:29:44:20:d2:ec:30:4d:ef:59:01:24:07:2b:19:
         2f:40:e1:52:f6:2c:2b:29:25:dd:a9:d4:bf:61:c2:0b:41:6f:
         52:a5:a5:9d:0b:73:f5:7a:58:0b:b8:2c:4d:93:46:23:96:07:
         11:98:be:e6:0f:14:21:43:ac:17:46:e7:82:2c:65:9b:79:c0:
         4d:ff:96:7a:8c:95:ed:4d:12:bd:a0:0b:a1:72:b8:63:2a:3f:
         31:c5:3f:d4:f4:26:0c:a7:ea:9e:cc:e7:72:5a:69:79:e2:52:
         6c:b1:e7:6f:f6:64:80:bb:1f:08:3d:64:24:ca:8f:fb:2a:11:
         65:c8:62:75:73:c2:9b:42:41:50:8f:60:1d:48:88:9a:57:d6:
         a2:84:ac:ec:0f:c9:b3:2e:47:c0:0c:2c:f0:a4:21:58:49:bb:
         bf:29:a5:43:d0:d3:32:f4:fb:47:00:e8:f5:3c:09:76:d3:5c:
         0d:5a:73:2d:74:75:ae:93:5f:7b:57:11:8e:bf:81:4e:99:3d:
         77:6d:9a:9c:0f:f8:10:76:c0:59:18:b6:8a:2d:94:c9:62:dc:
         76:17:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:57:08 2026 by rpki-client