Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa
File:                     cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa (raw, json)
Hash identifier:          1xQNo7hJonldntH3A3Q6poYKlkgCjPMuSJDJr5Ii0kU=
Subject key identifier:   77:F7:EF:D5:E9:DF:34:C4:68:DF:E6:32:03:C9:03:A9:00:9A:1E:DB
Certificate issuer:       /CN=dad115b4-de3c-4a3c-8279-70a2d0d0f78d
Certificate serial:       010D0C9F4328584D8EF97F2A6E3B717009888E00
Authority key identifier: 52:80:D5:17:A7:55:89:70:B3:36:F8:F7:3F:6A:F7:60:23:F8:E1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     23307
IP address blocks:        142.227.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:7f:2a:6e:3b:71:70:09:88:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dad115b4-de3c-4a3c-8279-70a2d0d0f78d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=8fa5244c-0699-4eaa-a3ce-54d2c20f2ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:be:42:b5:02:df:ae:b5:ff:b3:e4:76:73:
                    06:14:56:f2:6c:f9:f1:5c:71:19:31:b2:06:78:3e:
                    de:ba:e3:74:fb:a9:ba:3d:e0:3a:f6:fa:c8:45:e9:
                    5a:81:32:03:b4:65:54:65:fd:a8:e0:8e:38:87:ff:
                    ce:d3:90:81:78:0e:e8:9d:c4:4c:c6:65:26:be:0c:
                    7d:fd:cc:ab:cb:6e:17:04:27:f1:b8:54:51:14:94:
                    91:45:48:93:93:62:78:de:c4:f0:6a:15:8d:32:51:
                    73:f7:74:59:27:89:2a:28:c7:74:30:98:d8:1e:9b:
                    5c:c5:1e:56:ed:3d:09:bd:d2:19:09:c7:c6:1c:c5:
                    a8:5c:9d:a2:1d:04:e4:5d:0f:0d:53:d1:af:63:06:
                    d8:79:83:8f:7c:3a:aa:da:60:c0:38:fe:b5:41:7e:
                    d7:ca:a4:fa:75:b1:9d:70:0d:95:b3:d0:35:aa:33:
                    f6:94:ca:b1:cb:47:e0:ed:60:1e:e3:70:79:fd:cc:
                    0c:3f:3e:2a:36:64:78:f9:4f:45:b5:80:b2:37:b7:
                    6d:65:16:9a:b4:04:96:f1:c6:68:65:8a:98:52:6c:
                    9c:8f:03:0f:61:ec:98:65:89:b4:46:5d:7d:75:3e:
                    12:3d:ac:fa:b5:e8:a0:d4:7e:f7:d6:95:c9:b5:50:
                    46:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:EF:D5:E9:DF:34:C4:68:DF:E6:32:03:C9:03:A9:00:9A:1E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.crl

            X509v3 Authority Key Identifier:
                keyid:52:80:D5:17:A7:55:89:70:B3:36:F8:F7:3F:6A:F7:60:23:F8:E1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:fe:5b:2b:97:f2:12:20:13:20:fa:42:9b:c7:43:af:44:
         ad:3e:ed:ca:43:85:03:f5:ca:a0:c4:33:38:47:59:83:89:59:
         c0:0c:10:d6:33:77:9b:3c:60:25:f5:ef:b8:d0:93:bd:54:ca:
         08:be:1b:cb:69:50:f2:0f:b5:5f:0a:77:17:68:57:de:7b:fe:
         84:47:72:d6:42:3a:0b:af:f3:d4:b0:82:6b:2d:69:d0:b5:d4:
         19:f1:c3:18:f5:5f:ce:9d:01:f1:83:ea:a2:6c:65:49:13:b4:
         0a:19:8c:67:48:fa:a7:fe:e7:63:af:1f:22:73:f1:87:23:0f:
         96:76:1d:b0:16:74:f9:13:17:a1:59:9d:4e:bc:6e:df:c3:d6:
         48:ff:fa:00:6a:1f:ef:d3:ad:b0:37:92:1b:f3:de:ee:29:69:
         29:cd:ed:c7:c9:6e:dd:8b:f3:8c:08:35:ab:fd:d4:96:dc:1f:
         b7:b8:6e:f6:28:e6:1e:6d:b8:5d:14:66:35:90:3c:74:bc:83:
         ff:0e:5b:11:96:96:b9:73:cf:d2:b4:9f:42:99:c6:14:f5:1c:
         b9:2f:61:34:8c:0f:26:0c:78:4e:6b:4d:79:49:d8:ad:98:ec:
         c3:76:00:7b:9f:b7:7e:ea:1e:71:d4:3f:5a:c5:9a:46:8e:e0:
         2c:37:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:02 2026 by rpki-client