Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0/8b27872e-9b72-325e-abd9-2d16df833403.roa
File:                     8b27872e-9b72-325e-abd9-2d16df833403.roa (raw, json)
Hash identifier:          SHmIM9H1WJZp3so8SvnO2fLA/zrP/8vHTzolYZcG0UU=
Subject key identifier:   86:C4:40:19:79:98:77:28:4D:6F:C3:03:6D:B8:06:08:C2:B1:0C:B2
Certificate issuer:       /CN=4c8f4481-4a54-4549-b6b7-d4af04e83ab0
Certificate serial:       010D0C9F4328584D43E78DFC212108F7AE61F100
Authority key identifier: 94:F7:8C:75:37:36:F3:6F:5C:82:ED:F6:06:05:24:3E:E2:E6:23:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0/8b27872e-9b72-325e-abd9-2d16df833403.roa
Signing time:             Mon 23 Mar 2026 15:47:17 +0000
ROA not before:           Mon 23 Mar 2026 15:47:17 +0000
ROA not after:            Sun 21 Jun 2026 15:47:17 +0000
asID:                     213607
IP address blocks:        131.143.160.0/24 maxlen: 24
                          131.143.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0/4c8f4481-4a54-4549-b6b7-d4af04e83ab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0/4c8f4481-4a54-4549-b6b7-d4af04e83ab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:e7:8d:fc:21:21:08:f7:ae:61:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8f4481-4a54-4549-b6b7-d4af04e83ab0
        Validity
            Not Before: Mar 23 15:47:17 2026 GMT
            Not After : Jun 21 15:47:17 2026 GMT
        Subject: CN=5b3089c0-24c9-44e2-8a07-06c2111ca4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:f6:aa:2e:2a:45:52:f1:a0:48:fa:49:b5:
                    d3:29:af:37:d3:7d:99:c0:e3:ef:c8:14:b9:ce:0a:
                    92:ef:09:01:37:ef:c1:80:e3:25:bb:35:66:cf:14:
                    85:35:c9:c1:1a:44:92:3d:66:75:22:7d:07:79:ab:
                    98:62:95:f3:cd:1c:e1:d5:b7:07:53:ce:f1:b2:b6:
                    91:28:c9:2f:84:6b:40:f5:40:46:1a:8d:55:78:ca:
                    b1:ad:e3:21:16:b9:1b:b4:44:4d:01:c0:02:f5:ea:
                    a9:d2:69:f0:9c:2c:ba:ca:6e:a7:6a:16:e6:9c:25:
                    1c:d0:2a:1b:9d:f3:ba:e4:ee:9d:90:95:52:ab:a5:
                    66:88:d1:55:a2:37:f9:b7:66:de:93:21:73:f6:17:
                    85:12:58:65:b2:b4:da:80:02:24:19:b8:77:d8:e9:
                    41:96:d5:8d:11:ac:48:ab:06:29:b3:87:8f:c3:6d:
                    2e:6e:4a:08:e5:0a:ae:5c:2c:b8:6b:8e:31:0a:0f:
                    1d:c7:a4:bc:57:24:26:a0:b7:bd:cf:c5:8e:85:2d:
                    3e:0b:f5:f8:31:6d:5e:64:21:34:62:a1:1c:76:82:
                    ca:d1:7f:32:3b:30:a8:12:d2:24:50:37:ae:d9:db:
                    b9:c2:d4:a2:05:79:a7:cb:9b:5c:ed:84:06:04:38:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:40:19:79:98:77:28:4D:6F:C3:03:6D:B8:06:08:C2:B1:0C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0/8b27872e-9b72-325e-abd9-2d16df833403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0/4c8f4481-4a54-4549-b6b7-d4af04e83ab0.crl

            X509v3 Authority Key Identifier:
                keyid:94:F7:8C:75:37:36:F3:6F:5C:82:ED:F6:06:05:24:3E:E2:E6:23:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c8f4481-4a54-4549-b6b7-d4af04e83ab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:78:03:af:69:85:2d:a7:db:e1:dc:3e:c5:7e:f0:ec:67:fe:
         74:2e:8b:ee:b8:ca:29:45:ce:3e:0c:70:b4:51:7e:a7:d8:ad:
         d2:ab:78:9e:79:5d:11:ad:47:d9:8e:f3:ce:4b:d8:bd:28:0a:
         d3:2c:5c:bd:02:f4:b0:79:c0:83:16:99:97:a8:16:69:ee:c0:
         54:3b:23:a4:ec:4a:f8:c5:2c:a2:d8:ea:7a:e8:aa:37:60:78:
         f8:08:c2:74:67:43:3e:70:21:34:f8:59:f6:97:9f:b6:03:9b:
         e2:55:86:41:47:68:c5:9a:ec:be:2a:c2:c2:be:2b:de:82:19:
         a6:87:c0:0e:48:d0:6e:b9:00:dd:93:b6:b8:46:54:ab:f4:ed:
         8a:52:2d:75:5b:eb:46:76:79:62:e4:a8:86:48:10:6d:d0:14:
         45:4d:92:35:cb:42:90:38:8e:41:79:c2:ac:77:5d:3b:14:1a:
         e1:ad:fb:b0:7b:a1:c0:83:e4:48:a0:a4:6f:bc:fb:1c:37:af:
         c3:2a:4e:2c:bf:a8:69:c2:40:5b:fa:00:a0:d6:11:92:5e:3a:
         db:e3:80:39:59:06:11:52:95:6b:a3:92:7f:a5:c9:c7:00:ea:
         22:f2:2f:a3:b1:50:a1:52:72:d0:85:1e:8e:0a:46:70:df:36:
         d7:58:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:02 2026 by rpki-client