Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/21003dd9-11f6-3212-9307-dd774326536a.roa
File:                     21003dd9-11f6-3212-9307-dd774326536a.roa (raw, json)
Hash identifier:          GI5qH+jahtHrP8sjzDB3AtCgh2EBGZAC731gWuWohq8=
Subject key identifier:   7C:BB:A6:71:F9:1B:25:58:85:B4:CC:BA:84:1F:8E:9A:34:C8:6E:27
Certificate issuer:       /CN=ab48051f-b089-4872-acc6-a73a442e9736
Certificate serial:       010D0C9F4328584E3CF9C3787C26512CCE99C7C0
Authority key identifier: 2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/21003dd9-11f6-3212-9307-dd774326536a.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     401008
IP address blocks:        131.143.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c3:78:7c:26:51:2c:ce:99:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab48051f-b089-4872-acc6-a73a442e9736
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=a8a76eaa-8ca5-4736-9a98-2c4c48f56123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b8:b1:28:59:ed:24:e6:cb:f8:b4:6e:00:d9:
                    51:23:0f:ef:42:02:ea:a9:52:3d:f8:51:69:7b:b7:
                    11:ea:ad:1a:f5:a1:5b:13:b9:8d:2f:57:68:61:e2:
                    d0:18:70:bd:93:3d:db:b6:21:d4:77:15:0a:99:1d:
                    58:e7:96:f0:bb:f8:31:d4:80:86:3f:b1:ed:cd:fa:
                    d8:35:e7:d8:45:64:b2:3f:62:9a:c7:e8:df:d5:86:
                    72:b6:94:69:63:4d:7c:9f:f8:4f:c8:42:15:77:87:
                    84:40:95:87:b1:ca:1a:48:d1:b6:ba:fd:02:5f:d3:
                    aa:14:b7:95:14:e5:14:d1:73:d0:df:3d:56:66:fb:
                    68:96:e8:e4:fa:6e:fa:e3:b4:f7:9f:ab:cc:cd:17:
                    f1:30:b7:81:33:32:a2:85:fc:86:60:f4:77:f0:bd:
                    d0:0f:8a:48:7a:88:c4:df:3e:60:e6:e0:cc:73:4e:
                    df:f4:12:6f:44:26:97:53:25:7e:34:d6:2d:a1:00:
                    57:84:33:4e:72:ee:d2:02:d9:65:9e:7b:80:5d:1d:
                    61:98:47:c6:3b:de:1c:91:a4:d2:c1:15:64:e6:60:
                    b4:6c:56:33:41:2d:26:f6:20:80:3f:2a:a5:0c:a4:
                    66:a4:d0:39:a9:83:dc:67:e5:53:4c:c5:ff:3b:f8:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BB:A6:71:F9:1B:25:58:85:B4:CC:BA:84:1F:8E:9A:34:C8:6E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/21003dd9-11f6-3212-9307-dd774326536a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl

            X509v3 Authority Key Identifier:
                keyid:2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:12:f5:38:c9:e9:4a:6c:4f:e3:ee:3b:f9:e6:c3:cd:66:
         36:16:7a:40:a7:aa:95:cc:22:68:d5:51:9b:7b:77:9d:7f:b8:
         69:d9:98:f4:ff:cf:2c:d6:44:f2:39:da:8f:56:27:c0:b2:57:
         c5:26:3d:9a:0f:2e:99:b7:a3:a3:48:ed:b8:16:8e:a0:ea:e9:
         0d:3f:ff:72:62:6e:aa:1c:b8:6e:aa:ef:5e:1c:92:4b:85:a0:
         9c:88:f0:cd:43:e0:28:e0:bb:fc:f6:c8:0f:95:9f:e7:46:e5:
         8a:ab:39:c4:fc:fc:58:9a:07:d8:02:3f:ff:0f:8e:df:c2:5b:
         ef:f5:77:35:75:04:9f:c7:43:63:ca:7d:38:45:9b:ff:74:22:
         15:86:76:c5:9a:00:c4:78:d4:b0:86:50:a7:db:23:76:5c:ee:
         97:39:c1:52:a3:f2:ce:9f:1e:1a:2b:93:85:8c:e3:31:62:5f:
         ad:d0:64:65:e9:9e:69:6c:1c:b8:67:41:93:6d:d4:73:25:4e:
         b1:37:5e:12:9e:c4:75:8c:a3:f8:6d:39:95:20:30:e1:1b:e8:
         78:1f:d3:2f:11:3e:74:9d:c6:82:bf:df:a3:3f:4e:02:ee:20:
         06:dc:00:5c:c8:96:02:3b:3c:02:97:2d:53:07:bc:c0:70:b3:
         5e:92:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:38:57 2026 by rpki-client