Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5febf2f4-1974-389b-aaf1-3503d0455d86.roa
File:                     5febf2f4-1974-389b-aaf1-3503d0455d86.roa (raw, json)
Hash identifier:          dqSKBF1GjM3r1BTjsgdjvo9KXtSIRghhyvOxL4d4zrw=
Subject key identifier:   94:4B:A3:B6:A9:C6:C8:29:96:5A:06:67:F3:C9:17:B7:8A:76:9F:3E
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584F497691ED8585030138D1E700
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5febf2f4-1974-389b-aaf1-3503d0455d86.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23341
IP address blocks:        143.55.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:91:ed:85:85:03:01:38:d1:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=724e0110-a309-4c10-8980-3960cd628da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:ef:26:a2:58:1c:4a:47:46:d8:c7:f1:fa:
                    18:1c:e1:de:b3:e9:96:27:b8:d8:4e:95:9a:16:fd:
                    01:7e:05:e6:a3:09:f8:b0:23:05:59:f4:d1:48:84:
                    4a:64:82:ce:65:ed:2a:d7:16:7b:ac:23:6f:df:62:
                    cb:0d:7a:25:9b:9b:c3:ed:73:79:8e:5a:21:c0:bc:
                    2a:84:77:27:6f:ff:2e:27:e7:87:09:34:5c:cb:3f:
                    86:6e:be:3b:34:a9:e1:ed:ad:11:0c:f8:1e:0c:b3:
                    07:d2:8c:c8:a2:b4:08:71:65:cc:66:4a:75:26:38:
                    45:b1:fc:74:76:30:ea:93:a9:91:a0:6f:1e:dc:5e:
                    84:40:2e:21:b7:6c:76:7a:23:ad:bb:78:c7:23:b5:
                    d9:96:15:0f:ae:1e:9f:a2:2b:dd:15:79:5e:71:dc:
                    01:55:b6:2f:e2:62:40:5d:d2:57:94:60:e9:04:d7:
                    93:2d:ae:7b:9f:cb:1a:bb:a0:ce:0f:49:2f:6f:6e:
                    0b:a0:0d:cf:59:f7:a4:f0:8e:a5:80:1f:06:97:82:
                    c2:01:3e:00:e9:95:5d:bc:a6:66:df:93:21:3d:95:
                    9d:1e:a7:5f:2b:c5:42:0f:aa:3d:06:c3:51:65:b3:
                    a0:7a:53:ea:e1:5c:cf:51:fa:00:63:da:f4:81:63:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4B:A3:B6:A9:C6:C8:29:96:5A:06:67:F3:C9:17:B7:8A:76:9F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5febf2f4-1974-389b-aaf1-3503d0455d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:19:3c:c3:4c:6e:70:f6:8f:b1:42:8e:d6:40:58:86:fa:1a:
         a9:7c:79:7b:e1:33:78:61:dc:d5:37:6a:4f:a7:34:c7:60:b0:
         5d:9d:a5:ee:08:05:86:58:23:3f:e8:7e:16:2e:f6:db:cd:3e:
         e5:9e:1c:0a:11:a1:ff:fe:73:b1:0c:dc:38:43:18:b3:9c:61:
         78:76:ce:d1:78:d9:b1:a6:eb:bd:1b:00:7f:8c:a7:67:ba:1a:
         ff:ad:ee:dd:f8:69:82:32:76:30:16:a7:08:a2:b8:c4:99:49:
         a8:f2:46:0a:2b:2d:d7:a4:85:16:cf:d5:1c:df:a5:5a:a0:fb:
         cf:a5:82:a4:a5:f5:cc:96:e5:e7:32:02:f1:5b:43:9e:17:2f:
         f2:bd:79:47:df:88:81:48:fb:01:2c:85:1d:55:9e:a8:ea:bc:
         aa:3d:60:22:f5:bd:a2:84:a3:7f:a2:b3:43:df:83:77:59:17:
         ee:61:9b:30:b5:85:33:ff:80:68:5f:0a:91:4f:ea:ab:66:04:
         61:a8:55:3e:8d:fd:fb:2f:18:8d:a1:c6:eb:6e:06:46:07:58:
         41:9f:66:20:fb:4e:0b:79:f6:43:9c:79:de:b1:44:aa:0a:d7:
         80:8d:c1:a8:06:cc:b4:d4:4e:cb:e8:66:71:c3:67:2d:cf:89:
         4d:de:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:53:00 2026 by rpki-client