Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa
File:                     38e8dd53-d61a-3a02-9e01-0813ec535a48.roa (raw, json)
Hash identifier:          T8dHpztCCR0UqGFYBdHcFHcgVF2EK2Wcc4s/8uW/ygM=
Subject key identifier:   C9:FE:57:1A:0A:0B:FA:95:D5:42:14:DB:26:6C:2B:B5:02:8E:FB:AE
Certificate issuer:       /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
Certificate serial:       010D0C9F4328584DBD05902EA7FE83E15BBAAA40
Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6145
IP address blocks:        172.110.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:90:2e:a7:fe:83:e1:5b:ba:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=ad0a05f9-9ba2-45db-9450-558fc422a27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:cb:6d:bb:57:51:29:a1:8e:df:c4:93:79:
                    cc:0d:21:4c:b7:d8:f6:b9:56:3b:40:ce:a1:b1:18:
                    e1:c5:fb:92:d1:d4:63:54:b1:ef:15:d1:7f:b8:b2:
                    17:f6:83:22:0c:3a:ab:2f:2c:a2:c0:8b:f5:51:db:
                    35:49:18:68:c3:d6:97:18:08:84:88:e5:4b:37:d1:
                    3e:0f:76:fe:49:82:80:fb:d9:bb:b9:0b:d2:07:2a:
                    7b:df:5b:77:06:21:44:0a:4b:fa:08:d5:75:d9:f2:
                    cb:3d:a6:95:12:88:7b:7e:2d:4e:ad:6b:a2:04:8a:
                    82:5c:01:dc:40:f5:b6:ec:10:03:74:92:8e:69:87:
                    53:cb:83:49:91:55:c5:e1:d2:2c:6b:ed:b2:2e:c9:
                    dc:67:88:9a:53:60:1d:7d:23:22:2e:f4:76:8b:d7:
                    60:79:b6:23:df:40:9c:ef:28:c9:34:2f:86:33:39:
                    59:60:c5:42:d4:1b:ff:d7:4b:35:68:db:36:f7:f9:
                    c5:d7:15:3f:2f:4b:10:b1:9f:56:a9:52:59:22:fe:
                    ac:9a:f2:6f:56:61:e4:9f:82:f0:c1:01:70:77:d6:
                    05:9d:6e:90:be:8d:24:40:94:fb:63:0a:18:f6:34:
                    65:9f:a7:3a:7f:93:c7:e2:5c:99:9f:ae:35:7a:de:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:57:1A:0A:0B:FA:95:D5:42:14:DB:26:6C:2B:B5:02:8E:FB:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:28:a6:0b:55:a2:7f:76:b9:a4:4a:ff:03:30:04:01:d1:
         24:0e:61:d8:4c:69:82:2b:4d:c7:86:6e:c8:b4:b3:f5:fe:68:
         33:48:9a:23:0d:84:72:89:88:cb:3e:8e:83:da:2c:5c:88:9f:
         ac:ac:65:b5:74:cc:0d:a5:3a:d2:bc:83:16:15:24:6b:01:2c:
         97:d3:c1:1a:23:73:d9:66:12:c2:6b:c2:b8:46:1a:c4:0a:f2:
         55:99:2d:2b:44:fb:00:83:8b:f8:d6:85:39:51:de:d3:38:50:
         38:8e:91:74:95:d7:5e:07:5d:68:69:e5:33:83:b0:74:08:dc:
         1e:6e:5e:5b:4b:71:9b:22:43:07:4b:e3:cc:9f:50:7d:5b:25:
         65:ca:43:96:29:e5:72:fd:cb:d3:aa:e4:b4:12:b7:13:c8:e8:
         2d:0d:80:cb:bc:51:49:f5:9c:2c:86:6d:3a:8b:3f:76:21:5c:
         1a:70:22:78:5b:b8:c3:99:00:8b:6b:28:db:02:3b:dd:7a:8e:
         52:b8:48:de:17:f8:65:1e:96:63:36:7b:14:d9:d1:88:07:f0:
         8b:fa:79:a9:4a:4a:4e:b3:a5:fc:53:81:b0:c5:72:c1:6e:b6:
         a3:a7:d4:1a:71:e0:a0:a4:12:b5:a9:e8:19:80:39:db:22:7c:
         13:98:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:41 2026 by rpki-client