Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa
File:                     f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa (raw, json)
Hash identifier:          7pzZLfcjABjMRRI1CwOBPWxirocRm/8GDgZcaXj1UME=
Subject key identifier:   66:DC:AD:BA:43:B6:A1:DF:D4:66:93:2C:6E:A9:88:3B:42:A2:21:C4
Certificate issuer:       /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc
Certificate serial:       010D0C9F4328584DD1F5BB9A427085DA30D2C280
Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     395978
IP address blocks:        173.252.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:bb:9a:42:70:85:da:30:d2:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=7dd0c959-3772-4b4e-9999-0cc440f27f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:50:64:a5:39:b7:f8:7f:bd:bc:7c:14:ec:
                    d6:79:d6:21:df:ba:22:5e:08:84:14:33:8a:58:65:
                    5d:74:15:f5:a5:3f:8f:f6:73:3e:d1:7d:fd:4d:0a:
                    64:20:f6:97:96:72:3c:11:be:c3:a1:73:a1:a0:66:
                    8d:9b:74:a4:91:df:c3:0e:2f:59:3e:d1:fc:02:ba:
                    37:fa:15:46:60:5f:f5:ff:d4:fd:e7:3a:98:69:23:
                    e5:34:97:de:2f:7a:94:4f:53:f6:ad:66:db:68:3c:
                    ac:ae:a1:0d:2a:e4:1c:4f:1d:f1:78:af:b7:25:b4:
                    0f:25:bd:bc:bc:bd:11:f1:3b:e1:a5:e1:d3:1b:95:
                    ad:23:89:d2:63:63:75:ac:ec:09:fd:bf:de:e0:3f:
                    f0:24:81:4d:b3:97:ea:8a:37:59:51:54:e3:90:58:
                    fe:d1:ac:54:c2:b6:76:e5:a4:4e:be:c0:0c:6c:57:
                    2c:6f:b2:62:b0:40:1c:79:df:36:70:a7:01:36:27:
                    f8:12:29:12:8f:4e:8a:31:10:51:a5:9e:16:ac:29:
                    27:94:c3:f4:6b:47:a5:6a:f4:60:df:52:3c:d4:a0:
                    0b:3c:f1:ff:8b:6b:8a:5e:08:74:f6:a7:28:27:36:
                    c9:5b:61:82:fe:43:f7:1b:45:aa:83:c7:63:1d:57:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:AD:BA:43:B6:A1:DF:D4:66:93:2C:6E:A9:88:3B:42:A2:21:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl

            X509v3 Authority Key Identifier:
                keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.252.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:dd:cc:65:dc:73:06:00:70:49:17:5c:ce:35:ef:4b:46:
         4f:14:03:07:e4:ca:e0:db:15:a7:b6:be:67:d0:12:7b:fa:2d:
         2f:18:2d:56:6b:e9:56:4b:af:a1:18:48:66:94:b3:5d:62:7a:
         3e:18:76:bb:0c:89:57:1f:04:c6:40:7b:e7:33:b7:57:b6:7f:
         39:15:e5:cb:79:6e:c6:c4:f9:5c:20:75:6b:67:82:d9:7a:a3:
         bf:c2:9b:41:48:b9:48:65:17:d9:23:8f:31:db:b5:f2:b2:68:
         b3:85:00:d7:23:10:20:e5:6e:a4:d0:8a:9f:12:f5:a0:2a:6a:
         1c:ff:54:fb:35:19:4f:5d:6c:66:36:ac:a3:9e:17:d6:f4:98:
         7d:a2:46:df:36:40:a1:e1:97:ac:4f:0c:54:8e:e9:a4:ec:c4:
         fd:52:ee:98:b1:1e:12:f7:c4:0f:39:a0:4d:68:7d:14:68:2e:
         9a:6a:c5:6d:25:01:a1:df:97:26:00:02:c0:37:4c:04:a5:aa:
         ff:9b:cf:d8:c0:a8:6b:3e:e9:e8:cd:58:fc:9a:16:5d:2b:f6:
         79:bf:27:08:7b:94:5c:a1:fe:05:4c:62:61:01:17:2a:a2:e1:
         39:7c:11:db:59:6d:4f:d8:06:fb:1b:80:a4:81:2f:6d:70:a9:
         4f:13:eb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:45 2026 by rpki-client