Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4fafd3f0-682f-3cd7-89fd-8199040f59fa.roa
File:                     4fafd3f0-682f-3cd7-89fd-8199040f59fa.roa (raw, json)
Hash identifier:          Sc4LitUf9eR0APipm5/nAmZlhJn20rM0ZkQTnNSc/lI=
Subject key identifier:   98:BB:AD:DA:26:30:32:3D:52:38:4D:FC:95:08:3A:BE:BB:B4:2E:3F
Certificate issuer:       /CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
Certificate serial:       010D0C9F4328584B745FEE5972D0FE20106B7800
Authority key identifier: E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4fafd3f0-682f-3cd7-89fd-8199040f59fa.roa
Signing time:             Wed 08 Oct 2025 14:54:45 +0000
ROA not before:           Wed 08 Oct 2025 14:54:45 +0000
ROA not after:            Tue 06 Jan 2026 15:54:45 +0000
asID:                     36086
IP address blocks:        143.192.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:5f:ee:59:72:d0:fe:20:10:6b:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
        Validity
            Not Before: Oct  8 14:54:45 2025 GMT
            Not After : Jan  6 15:54:45 2026 GMT
        Subject: CN=47d2cbf2-9aae-436d-924d-fa2799ecdb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:a7:fb:b7:2c:31:a8:aa:6d:c0:22:3c:89:
                    32:df:ee:e1:ef:61:96:91:7b:db:5e:b5:af:9a:74:
                    16:51:7f:33:b3:32:da:62:78:64:34:df:08:6d:bb:
                    72:5f:34:bd:75:bc:1f:dd:85:1e:09:1d:96:02:09:
                    c5:e7:58:b3:be:f3:d2:39:6f:c4:fc:f0:9b:2b:46:
                    dd:46:1f:53:fb:e6:7a:0d:71:b7:f1:db:00:e5:d9:
                    9b:da:a3:2e:98:d7:22:b4:d2:38:b2:6a:fa:d1:a2:
                    52:31:a6:d9:e1:0b:a2:49:ae:ce:69:b9:d7:fe:83:
                    17:07:e0:a5:1d:77:ea:b9:4f:d5:e9:5e:d1:df:0e:
                    4c:e9:99:35:11:33:61:b9:e2:34:82:fd:3e:5d:db:
                    cf:e2:dd:38:57:18:32:16:7c:e8:32:a8:a4:16:97:
                    4c:1a:bb:37:e3:83:ad:34:2f:e3:92:79:f9:80:f2:
                    0c:00:0f:6b:04:5e:ac:87:aa:2a:b8:98:1d:f3:e4:
                    ce:34:fe:e6:d4:cd:09:96:88:d4:f1:e9:01:47:70:
                    7a:0e:de:09:2e:df:14:c3:aa:16:96:1c:77:89:c6:
                    23:ab:42:42:fd:28:42:a9:17:14:46:03:63:99:7e:
                    a5:af:2f:72:8f:e6:e6:8e:ba:21:9a:6e:ed:51:5c:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:AD:DA:26:30:32:3D:52:38:4D:FC:95:08:3A:BE:BB:B4:2E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4fafd3f0-682f-3cd7-89fd-8199040f59fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl

            X509v3 Authority Key Identifier:
                keyid:E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:52:ea:40:8f:6b:4b:3a:72:fc:80:0a:15:83:2e:4b:ae:01:
         58:ac:49:e6:8f:66:08:a4:59:6a:31:6b:c7:12:17:e8:f4:fa:
         0b:c1:a1:a4:0f:74:34:dc:ee:de:f5:51:e9:1f:5b:a3:29:c0:
         0c:b2:e0:b8:b7:aa:83:c6:c1:9b:e5:2d:00:ba:fc:45:b8:0f:
         44:c6:8c:a0:80:19:a5:82:7d:1f:cc:5b:cd:94:b3:d9:fb:97:
         f6:08:d7:ad:3b:02:28:5e:48:85:d0:2e:e7:2f:5e:27:84:93:
         cd:6b:33:36:81:35:1a:20:e9:d5:8a:03:19:3d:59:2d:cc:c4:
         94:ef:92:8a:1f:6b:b5:6b:61:7c:11:49:a4:c0:f3:2e:0e:4c:
         0a:b0:cc:de:64:9a:31:b3:17:62:44:84:38:1a:d9:ea:3e:25:
         f3:36:bf:ab:02:5a:bf:3f:fc:f9:8a:5e:69:60:2e:e0:d1:a8:
         3d:0e:c4:77:2b:20:ea:ee:5c:07:24:62:2a:b3:ed:1e:80:d3:
         76:b5:4d:11:cd:97:ca:07:13:47:d0:54:6b:9c:37:c0:d1:de:
         fa:46:93:38:58:02:a5:0d:14:cf:d8:ad:22:25:de:6a:fc:06:
         18:ae:86:7e:64:e8:70:57:19:9a:8d:4a:1a:93:07:40:66:4a:
         48:f6:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:07 2025 by rpki-client