Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa
File:                     da3009a3-e762-39fb-8667-ec3c96699ae9.roa (raw, json)
Hash identifier:          kHkH3ycHdrPgrSiCsKzCTO93VXNU9+cheGJbb20IQlY=
Subject key identifier:   42:AF:33:E2:42:9C:E8:FC:8F:78:95:32:A6:DC:53:C7:99:39:F4:26
Certificate issuer:       /CN=472e14ed-5432-4736-a4d2-f21c573a3c6c
Certificate serial:       010D0C9F4328584E736A23F0DE116E8393465B40
Authority key identifier: 8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     19211
IP address blocks:        131.143.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:23:f0:de:11:6e:83:93:46:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e14ed-5432-4736-a4d2-f21c573a3c6c
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=3250874a-522f-4749-b1c6-b6417c8accab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:dd:42:4b:8a:2c:9f:f6:c1:ee:12:0a:48:
                    4b:a7:84:77:25:a8:2f:76:b5:e2:98:03:58:34:39:
                    db:28:2e:04:bd:f2:97:c9:fb:c5:1e:c0:0a:bb:24:
                    f5:6b:58:0e:3d:9e:6a:d9:98:4e:e9:06:06:58:66:
                    e8:4d:a3:9b:b5:91:fd:ad:33:92:5f:10:06:ed:de:
                    f3:52:f2:45:d6:fb:60:ed:af:bf:c0:77:f8:6a:ee:
                    4d:e4:e3:4b:87:56:cb:54:94:15:ef:9d:0a:59:b0:
                    6d:32:28:a6:79:a0:2a:2f:b7:06:14:b7:a3:06:d8:
                    e9:d6:1c:20:45:6e:ca:fc:99:56:05:b8:3b:8c:1b:
                    5e:b8:5a:83:f3:d2:bc:09:67:33:9f:8d:ea:6e:51:
                    64:96:85:5a:9c:ce:ed:1d:bb:6c:c8:b0:01:a9:51:
                    9f:f5:e9:08:1a:ab:9c:47:c2:39:e5:fb:d1:90:36:
                    aa:1f:ed:ea:d8:95:6a:64:eb:90:d8:9f:a6:4d:a3:
                    d4:0a:f7:a2:33:0e:be:50:73:3a:0f:8f:57:e1:38:
                    6c:95:3c:96:74:da:54:93:25:cb:a8:39:e9:34:d8:
                    f4:a7:b1:90:1f:01:0e:59:6e:ed:c0:e3:46:50:2e:
                    08:d6:f2:00:a7:ce:8d:0a:a9:e6:6e:92:19:d0:39:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:33:E2:42:9C:E8:FC:8F:78:95:32:A6:DC:53:C7:99:39:F4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:98:0f:59:cc:6c:1b:ea:17:dd:33:1c:33:c0:54:45:45:10:
         66:cc:a9:42:a5:ff:e1:f8:73:18:71:c4:66:c5:09:fc:7a:91:
         e5:45:63:04:e5:27:e3:6b:59:d2:c0:14:6d:cf:b7:b3:a7:12:
         c5:d4:61:c7:7f:7a:bd:be:57:d5:03:74:ed:98:a1:25:29:03:
         35:b1:ca:e3:08:2a:94:8d:a8:ed:77:8a:a5:ef:40:89:46:8d:
         dc:be:4f:8d:8d:4a:f6:d1:ec:7a:63:27:49:e3:8d:d7:d1:2b:
         98:03:98:9f:51:da:41:32:9a:2f:2d:f7:91:07:de:46:3e:27:
         ab:77:e3:85:6c:7f:92:10:b8:61:38:63:20:c8:3a:a5:92:7b:
         0d:0c:e8:33:52:6b:15:0e:80:5b:76:8b:72:a6:67:ff:d4:c2:
         bd:c2:05:1d:1a:57:52:49:51:b6:cc:df:1c:4b:80:8b:68:c3:
         eb:39:4b:2f:83:f8:e2:d8:59:23:5a:d1:49:53:b2:61:93:e8:
         6e:e5:a1:34:c0:9c:1c:eb:7f:a8:98:ec:1d:9d:1c:38:4e:3e:
         4b:54:d6:e0:45:da:20:92:7f:3e:01:2e:5e:2d:91:fc:72:9a:
         72:af:bc:7f:93:58:7b:29:d6:e2:5c:e5:3c:29:71:f8:02:f2:
         96:20:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:35:53 2026 by rpki-client