Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/b9e6fa66-85fc-3cc2-a505-e47b6c80ce8b.roa
File:                     b9e6fa66-85fc-3cc2-a505-e47b6c80ce8b.roa (raw, json)
Hash identifier:          YKJPxQ4nlB/mem1QmY3BwFZMK8ne4lX3njUzq2yA31U=
Subject key identifier:   76:D1:47:1B:10:8C:09:C5:8B:83:5C:8B:9F:76:41:42:0B:92:C7:89
Certificate issuer:       /CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
Certificate serial:       010D0C9F4328584DB7704109692D05D02FD54280
Authority key identifier: E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/b9e6fa66-85fc-3cc2-a505-e47b6c80ce8b.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     36086
IP address blocks:        143.192.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:41:09:69:2d:05:d0:2f:d5:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=fa4f7d55-3861-4ed1-be27-091a2248ad4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:34:04:f7:d6:aa:e2:c2:74:90:7a:09:8c:
                    c8:da:47:db:32:42:c1:4f:d2:85:30:da:d2:06:9f:
                    23:1f:39:bb:e8:38:90:50:12:a8:b7:9a:68:4b:6c:
                    95:08:8d:95:99:15:ab:44:84:45:43:3d:e1:99:08:
                    0f:a5:15:fb:34:c6:b4:fd:67:1e:86:7d:0e:5e:0c:
                    83:fa:d2:a1:47:f7:1d:78:6e:65:05:f9:00:fe:91:
                    1b:17:a4:44:61:ab:55:e1:a8:cd:b5:f4:d7:79:38:
                    ed:1a:28:31:e4:7c:d9:37:0f:6d:8e:15:16:cf:cf:
                    f9:a1:36:ed:d3:15:59:0f:88:fd:2a:23:13:92:2d:
                    9b:fe:02:55:4a:bf:9e:45:31:7d:b8:c7:e0:12:a3:
                    cb:18:bf:89:46:07:e5:73:87:6e:b9:44:41:07:2a:
                    1c:bc:16:b6:4f:1e:80:1e:17:39:e9:06:d6:ec:fb:
                    dd:21:c5:c7:88:36:4a:66:ec:2c:bc:80:a4:b0:73:
                    1e:8e:ad:26:7b:a4:c9:63:8d:99:ee:c1:dd:06:d6:
                    f6:3d:06:94:9f:9a:cf:a6:88:ac:cf:19:bb:62:a3:
                    54:9a:c9:41:ad:ea:bd:89:14:46:6c:4a:cf:c2:02:
                    aa:b5:3b:09:71:4a:db:39:61:22:ce:a8:39:c7:12:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D1:47:1B:10:8C:09:C5:8B:83:5C:8B:9F:76:41:42:0B:92:C7:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/b9e6fa66-85fc-3cc2-a505-e47b6c80ce8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl

            X509v3 Authority Key Identifier:
                keyid:E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:a8:6c:b9:90:ca:f4:e3:0a:8b:5d:8b:5b:df:10:18:06:
         81:a3:0b:d0:89:2d:6b:58:2a:fc:d3:96:d8:e3:94:de:df:e8:
         a8:ea:40:bf:fc:af:de:11:0a:af:79:b5:63:aa:05:8b:0e:1b:
         06:2f:35:91:9f:6c:a4:1a:b4:f7:1c:c5:e1:37:23:57:d1:5f:
         a1:2e:0f:61:04:2c:31:2f:b3:a8:cd:69:51:cc:6c:20:ee:25:
         be:5a:84:0d:9a:cb:7f:3a:da:db:7e:86:30:13:20:44:62:38:
         c3:ee:ea:ed:a0:fe:dc:96:88:01:0a:14:e5:e7:d2:f2:34:0d:
         70:a9:13:e9:e6:81:28:0e:2f:30:64:11:16:b1:af:7e:5d:40:
         e1:92:a4:7a:91:5e:17:13:9f:b0:23:a0:be:16:16:08:12:fa:
         39:3e:59:ff:57:7f:c7:aa:cf:3e:df:84:45:a7:4b:3b:37:b4:
         73:0b:53:d1:aa:6d:34:ad:fb:30:00:f4:95:d7:30:81:a2:ee:
         46:4d:34:8d:c2:d3:0c:54:0a:e0:d2:63:5f:2b:56:b0:a9:a7:
         92:2a:02:02:f8:bb:56:ca:1c:71:b2:bc:e1:04:cd:75:2c:4f:
         12:a0:b5:18:47:99:08:db:b7:c4:75:e6:5b:fc:35:28:f2:00:
         7d:37:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:45:14 2026 by rpki-client