Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/49834d3e-b346-31cd-b0b3-abc01d6ed4d2.roa
File:                     49834d3e-b346-31cd-b0b3-abc01d6ed4d2.roa (raw, json)
Hash identifier:          xSV4/9PXRfmFPHEtMhAtg9aLD0HGHFXZ6A8kzVkZeDs=
Subject key identifier:   9E:94:AC:7B:EE:CE:23:AD:6E:33:62:A2:5E:4D:D0:95:1C:DD:47:AB
Certificate issuer:       /CN=f0998994-1f51-4070-9d55-9e3090085fb9
Certificate serial:       010D0C9F4328584D9D4768B55BE353E9BAFA7FC0
Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/49834d3e-b346-31cd-b0b3-abc01d6ed4d2.roa
Signing time:             Fri 24 Apr 2026 16:07:22 +0000
ROA not before:           Fri 24 Apr 2026 16:07:22 +0000
ROA not after:            Thu 23 Jul 2026 16:07:22 +0000
asID:                     10599
IP address blocks:        143.112.128.0/18 maxlen: 24
                          143.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:47:68:b5:5b:e3:53:e9:ba:fa:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9
        Validity
            Not Before: Apr 24 16:07:22 2026 GMT
            Not After : Jul 23 16:07:22 2026 GMT
        Subject: CN=1ff98407-4e7f-4250-b2ea-7037789b52b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:72:54:fc:40:3e:9c:d7:52:62:13:ec:ec:
                    98:6d:7c:9e:5d:90:7e:df:9a:45:a9:a3:66:8f:72:
                    56:9c:c4:d5:50:c5:fa:31:ae:99:dd:93:ea:f9:d5:
                    39:a5:15:f5:73:d9:ed:ba:eb:34:b5:e5:03:85:57:
                    77:ab:e8:0d:c5:66:60:45:11:05:96:f9:97:d9:9f:
                    fc:57:72:a3:b6:46:f1:88:ca:77:e7:1c:f2:20:14:
                    2b:78:3a:fb:4d:dd:1c:c1:7e:df:a2:ef:7f:23:e5:
                    a3:2a:03:fb:17:40:d0:b6:66:d7:4f:63:d5:0e:9c:
                    76:4d:91:c3:19:ab:0e:5e:96:42:7d:c5:25:d8:df:
                    b5:99:d3:17:8f:f7:8e:ad:53:14:f2:06:02:7b:1e:
                    e3:d4:ae:2b:20:0a:1b:f9:3e:aa:73:1a:d1:2d:31:
                    a8:09:74:57:e6:d6:8f:39:da:2e:36:5d:58:7e:f7:
                    e0:58:c1:62:fb:76:e0:41:a3:45:88:7d:46:d0:bf:
                    2c:40:51:2c:a6:c5:a8:0a:31:d1:6f:01:26:de:5a:
                    ad:d7:a9:5b:b0:06:16:05:e8:5c:d5:e0:83:b3:a6:
                    7c:f2:46:9e:c5:f9:85:0d:41:7b:58:d6:79:ea:63:
                    d5:95:a0:94:68:52:8b:cc:44:01:ba:99:f9:e6:f7:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:AC:7B:EE:CE:23:AD:6E:33:62:A2:5E:4D:D0:95:1C:DD:47:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/49834d3e-b346-31cd-b0b3-abc01d6ed4d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl

            X509v3 Authority Key Identifier:
                keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.112.128.0-143.112.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:5a:0e:d0:a8:4c:ad:50:10:50:35:71:5c:27:81:e8:d3:
         03:3c:9b:5d:b8:a8:b2:0f:96:38:54:a0:83:9f:00:35:17:89:
         b6:6c:1f:30:67:a9:73:0e:61:55:ce:6a:dd:30:38:d2:24:a7:
         f6:e1:a7:4a:03:23:54:e3:ae:b8:36:d0:94:1f:71:9a:69:98:
         0a:98:93:e4:0e:a4:1a:6b:b1:09:ee:32:b5:85:14:87:c4:ac:
         b6:a3:ee:16:2b:d9:29:79:0b:9d:2b:3e:87:3e:86:4f:58:3d:
         09:66:0b:7a:0d:d2:b8:1a:97:31:23:c6:27:b5:b9:fb:78:a3:
         97:7b:ba:0d:e6:53:26:de:50:bb:80:d0:e3:5f:46:26:66:45:
         24:bb:da:1f:9a:57:0e:3c:88:4a:7e:a7:cd:94:35:c6:4f:4f:
         4a:cc:0b:ba:1d:a4:71:f6:32:fe:55:89:ea:d8:60:e7:7b:53:
         d3:f8:ed:72:c6:f1:74:23:b5:56:4f:1b:bb:73:26:97:74:a3:
         1b:e2:61:0b:34:04:2a:83:f5:83:db:77:3c:51:da:ed:2b:4d:
         6e:93:0d:4b:36:01:63:14:8a:ab:d4:a5:2a:06:ce:d3:1b:f5:
         00:cc:30:b4:96:6a:4d:07:c1:0e:6b:0b:2c:46:2a:77:4d:bf:
         c8:5a:d3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:28 2026 by rpki-client