Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/9a68d88c-b9ac-364a-ac7d-a3594d3c7bc8.roa
File:                     9a68d88c-b9ac-364a-ac7d-a3594d3c7bc8.roa (raw, json)
Hash identifier:          5pzyUPRQGB2WTwoZWeffIscmS5LmDvgcvqZdlAR0NE8=
Subject key identifier:   4A:FC:AF:90:A3:76:7D:22:AD:74:8F:9D:69:E1:2B:A2:71:56:F6:F1
Certificate issuer:       /CN=223692b9-6752-4ca2-9cf2-90b3bea5d6dc
Certificate serial:       010D0C9F4328584E683F5D014FFFA884C4D238C0
Authority key identifier: 0B:BF:41:F6:6D:D9:5E:7C:E8:1B:E6:AE:B8:DC:41:53:86:07:6D:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/9a68d88c-b9ac-364a-ac7d-a3594d3c7bc8.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     22855
IP address blocks:        143.98.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:5d:01:4f:ff:a8:84:c4:d2:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223692b9-6752-4ca2-9cf2-90b3bea5d6dc
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=44d66a44-4639-40fc-8ebb-68a065d83e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:a1:57:f1:7b:bc:d3:03:45:6d:36:1c:80:
                    9f:c1:80:69:2f:45:c2:b2:df:2f:af:4a:54:8c:ae:
                    a3:2b:0a:57:d6:2e:46:96:51:f4:f6:4c:ba:fe:cc:
                    e7:27:2c:d3:6a:2b:d6:0a:3a:8f:37:f1:d8:58:ce:
                    3e:62:16:5f:a7:a0:ab:06:a3:b5:85:7a:9f:f3:e8:
                    3c:70:93:f8:ac:74:d0:ea:84:c0:b2:78:ee:48:e6:
                    f9:2b:43:8a:f2:d7:15:04:2f:5b:e9:71:af:15:31:
                    94:11:5b:21:3e:a2:a9:56:70:0c:fc:9d:41:69:11:
                    a8:9b:f2:25:34:30:44:61:d9:b0:a9:03:b4:c8:f4:
                    97:7d:ab:ce:dd:cf:14:bf:26:f2:21:cb:0c:dc:d9:
                    71:cd:fa:3a:84:b2:f9:af:15:a2:ac:a0:50:9e:6d:
                    c9:3e:eb:21:8e:34:f9:a7:15:e7:44:0b:f7:f8:23:
                    95:2c:d8:df:2e:95:23:d6:b8:1b:d4:89:11:a4:8d:
                    fb:21:32:5b:3c:b9:3b:fa:30:07:be:97:20:5c:92:
                    e5:86:dd:19:90:36:3a:d1:98:04:97:a2:ab:c0:16:
                    76:8e:55:31:d7:5e:cd:b5:b7:c7:e2:2c:e3:30:29:
                    6a:de:6c:05:77:f0:d9:66:42:f0:b8:92:25:79:df:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FC:AF:90:A3:76:7D:22:AD:74:8F:9D:69:E1:2B:A2:71:56:F6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/9a68d88c-b9ac-364a-ac7d-a3594d3c7bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:BF:41:F6:6D:D9:5E:7C:E8:1B:E6:AE:B8:DC:41:53:86:07:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:74:17:8b:de:d0:35:ee:65:ad:c2:f5:02:62:7a:f7:0b:4b:
         40:b4:10:09:a7:fe:6b:56:63:1d:50:f3:2b:d9:aa:62:62:ec:
         2f:54:2a:96:d8:fc:e0:9c:3c:1d:e8:05:88:39:93:c8:a4:f8:
         ba:57:2f:01:60:c1:80:19:2e:45:1a:e7:97:63:cf:0d:1d:9a:
         0d:d4:6a:04:2d:52:4d:b3:e3:12:86:55:10:0d:dc:1f:96:59:
         e5:50:48:8c:9c:58:8d:1a:7e:06:3a:d4:e7:04:b8:7f:dd:85:
         c0:b2:dd:51:7f:61:04:25:d8:7b:df:50:1b:df:80:82:27:d4:
         23:34:bb:6e:20:5a:9b:fe:85:05:3e:df:d9:9f:9e:eb:e4:4f:
         1a:88:d3:9f:80:0d:1b:0b:d2:e6:a4:28:3a:49:98:af:94:e1:
         06:c3:21:37:dd:7d:9a:f9:90:d7:54:ab:4a:a9:15:b5:94:1f:
         4d:6b:fd:c6:49:fb:8c:f2:bc:83:4c:98:b7:8f:d8:4a:cb:2f:
         5b:73:6b:b5:e6:57:be:3f:36:55:7f:b3:ab:d2:fa:3b:dc:da:
         ab:58:b8:2c:94:00:e9:8a:f3:74:20:5f:a2:9c:ef:49:5d:80:
         5d:bf:f7:33:78:15:e7:ef:1c:c6:aa:4a:29:77:65:ad:6c:76:
         1a:74:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:26:48 2026 by rpki-client