Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8b32f37f-9a76-336d-b8ad-fb89f2e480d3.roa
File:                     8b32f37f-9a76-336d-b8ad-fb89f2e480d3.roa (raw, json)
Hash identifier:          VydDujYP2YYDUNo5IUX2PpUHkFKMf3Od6K2ng87NTCs=
Subject key identifier:   9D:6A:5B:30:9E:23:84:8A:8D:E4:06:77:4C:DA:20:AC:39:25:E7:33
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584D8EF999B97168117D436EB380
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8b32f37f-9a76-336d-b8ad-fb89f2e480d3.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        143.223.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:99:b9:71:68:11:7d:43:6e:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=144a1fa8-9dc4-4ed7-ba32-cc67bf9f4092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:bf:c1:de:60:6f:61:cd:c4:95:4c:c9:f5:
                    d0:8f:13:9b:b5:b0:bd:61:2d:53:63:da:80:eb:d9:
                    12:13:49:f2:19:21:d4:f5:d0:06:f7:26:59:3f:ee:
                    eb:69:8d:1c:20:96:f5:b5:54:d1:d8:42:c8:a1:02:
                    8f:11:4e:83:78:b1:5e:7c:ad:ee:0e:80:4e:34:f9:
                    91:33:36:37:e9:e4:8c:b5:04:81:ef:0d:2f:02:f6:
                    75:cc:a0:3c:ba:09:de:fd:80:b4:c4:08:18:46:31:
                    7e:4c:eb:4e:7a:69:40:3e:dc:5c:e0:f2:e9:66:79:
                    af:fe:35:42:b5:08:0a:e3:7e:06:29:06:09:7a:5d:
                    8d:05:c6:67:3c:5d:fa:26:ff:d6:42:85:a4:ff:a3:
                    08:8f:7a:b8:f4:7f:01:a2:00:db:ca:ab:3e:3a:7a:
                    22:0c:ef:58:2b:1f:e1:52:55:ca:7f:57:55:35:a3:
                    d8:91:41:9c:f0:ac:84:e8:5e:ef:5c:da:77:99:1c:
                    85:f0:1a:b7:0e:8b:58:7f:fc:59:ba:04:59:08:d9:
                    c7:bc:1a:a4:ab:a6:1f:fd:26:22:09:b1:92:08:fe:
                    d3:0a:09:b0:e9:14:04:c7:8d:50:2a:2f:7b:33:84:
                    3a:90:db:01:48:2f:1e:cd:d7:89:1a:31:04:3d:dd:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6A:5B:30:9E:23:84:8A:8D:E4:06:77:4C:DA:20:AC:39:25:E7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8b32f37f-9a76-336d-b8ad-fb89f2e480d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8a:ae:a4:22:ef:0f:b1:93:4f:04:a0:a2:b8:ac:02:7e:a7:
         a4:55:8f:9f:15:c2:fe:b1:4a:c0:6c:8b:75:3c:31:fa:10:b8:
         b8:48:a0:17:ab:96:3c:34:00:c7:38:2e:c8:1d:62:be:98:b6:
         b1:cd:a7:ff:22:60:55:67:e1:50:40:f8:cc:29:3a:a1:72:30:
         61:b2:c3:e9:ea:ad:b3:ab:3f:9b:43:04:92:54:2e:7c:27:5c:
         67:8e:19:b4:e0:8d:36:ef:99:c6:45:f1:9d:4d:43:5c:03:25:
         04:51:06:a2:67:51:6c:6d:39:a5:1f:de:c8:71:31:a9:f1:1f:
         e5:cf:37:da:bc:64:5e:65:88:be:7c:b6:7a:df:71:b7:44:9b:
         3f:b0:d1:0b:9d:85:61:e3:78:30:2b:84:1a:f3:92:43:b3:c3:
         e9:3f:ae:ec:fd:77:cc:33:7e:76:32:91:0a:b9:a0:1f:c4:9d:
         f5:8a:a8:0d:09:5d:a6:fa:75:04:37:86:91:08:bb:39:66:3c:
         8d:95:35:28:a1:32:c0:93:49:b1:96:3c:c2:ae:80:b7:d3:9c:
         7e:96:f7:4a:fa:03:f2:b0:f0:d9:ac:ed:91:39:54:70:a4:e4:
         12:f1:46:31:1a:18:cb:dd:f9:2f:e3:78:7f:54:ae:07:49:ca:
         9c:bb:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:16 2026 by rpki-client