Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/c80981f0-7dd9-35d5-8149-11a8e922bfd3.roa
File:                     c80981f0-7dd9-35d5-8149-11a8e922bfd3.roa (raw, json)
Hash identifier:          54UVcqlVFje5MIiEsiwmNV1u/AFAwwh65wJORnIFLpA=
Subject key identifier:   E6:B0:C1:6E:1A:0D:09:73:70:0D:57:41:24:EE:2E:06:79:69:8B:93
Certificate issuer:       /CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
Certificate serial:       010D0C9F4328584F4112A67991548D9C155BD600
Authority key identifier: 4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/c80981f0-7dd9-35d5-8149-11a8e922bfd3.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     13437
IP address blocks:        131.143.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:a6:79:91:54:8d:9c:15:5b:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=6bd72499-0f7f-43c2-a863-db1779bd180f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:e9:a8:e8:c2:8a:1c:d9:c8:19:b3:db:d4:
                    7d:86:e4:b9:02:2e:0a:99:78:f6:94:ed:ac:98:c3:
                    cf:b4:74:04:71:65:f8:55:d7:9c:d1:2f:54:e5:e3:
                    d4:7e:5d:6e:83:5a:6a:e4:73:ea:69:a0:91:b1:ab:
                    d2:04:dc:4e:ae:a8:9f:5e:b6:3e:82:08:0c:20:d9:
                    11:75:64:48:5d:9f:ef:14:62:43:b1:bf:b7:16:b4:
                    8c:64:2a:4d:96:8b:74:89:9f:23:4c:0a:14:59:e3:
                    97:c7:17:da:94:f2:be:d1:c6:cb:ff:5e:ab:8b:2b:
                    99:61:5e:17:aa:8d:fa:c8:fd:46:3c:d5:80:03:e0:
                    e9:c9:ad:b7:d4:f8:80:4a:a9:68:66:06:c6:a6:d7:
                    92:51:34:9e:d3:bf:c2:55:6a:ac:a0:54:c3:6c:82:
                    44:e6:86:d9:10:71:f6:76:5e:23:05:00:ef:e6:1c:
                    bb:e3:22:25:19:7d:e1:a0:97:ee:c3:98:1b:16:05:
                    01:0a:d3:04:88:21:b1:45:3e:3a:95:db:ef:a2:69:
                    1f:c7:8a:3f:9c:63:36:2f:86:f0:81:79:5d:f4:7e:
                    07:65:c6:d2:12:c9:f7:b3:dc:80:4f:56:11:bb:b0:
                    ee:07:ca:33:12:f8:f9:5e:64:59:04:99:a8:64:82:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:C1:6E:1A:0D:09:73:70:0D:57:41:24:EE:2E:06:79:69:8B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/c80981f0-7dd9-35d5-8149-11a8e922bfd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:e3:d7:f6:99:82:71:c2:f7:e5:0f:e1:97:f3:14:a1:6e:
         6f:f4:ad:e3:69:0b:f8:c8:a4:7f:a4:56:b4:e6:6f:9c:b7:5c:
         fc:3a:38:91:44:73:d7:a9:aa:62:f6:37:5c:ac:1d:c4:d9:11:
         86:f1:3a:54:e6:10:0d:96:a7:92:c3:b8:0b:54:ba:bf:b1:0e:
         15:74:72:83:92:7f:83:eb:8f:08:cd:f5:58:75:d1:5c:cc:33:
         dc:cd:8b:f8:c2:07:36:05:bd:1c:85:18:34:ab:2c:65:af:36:
         30:a0:fc:be:6a:87:3c:f9:9d:ac:0e:b6:f2:85:cf:1c:53:61:
         2d:6b:d3:43:a1:a7:4a:59:70:39:d1:e8:51:aa:56:e8:cc:72:
         db:55:30:b1:99:7c:49:be:d8:a2:db:cc:cf:4f:ab:37:ff:05:
         14:5e:fa:db:8c:c6:23:f3:f5:8d:58:83:fa:0e:a5:7c:1c:c3:
         9f:a4:bd:53:1b:79:22:f4:5e:8d:8e:18:6d:44:68:ac:d1:a3:
         f1:43:76:99:74:00:2c:58:d2:bb:b4:6f:ff:d6:6c:8b:90:90:
         a9:76:bb:0d:2b:e2:df:ab:52:88:f7:c3:95:d9:fe:35:19:f0:
         dc:68:24:bf:08:02:01:83:69:b6:61:43:49:37:62:0d:e0:cc:
         59:6a:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:50 2026 by rpki-client