Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa
File:                     017a6557-62d6-3351-a77b-bc0a23b230d3.roa (raw, json)
Hash identifier:          qxG2BGQA3FQsOj5BTyo88NZKzLJ2CHC4sDWv2MsQZXU=
Subject key identifier:   F2:5C:78:95:37:CC:80:8B:23:6C:A7:E5:89:39:A0:EF:B4:D8:1A:A9
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584E6F3A4B73D92D85939284D6A0
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     1742
IP address blocks:        140.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4b:73:d9:2d:85:93:92:84:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=fe5c2cd3-9e50-4ce9-9097-31a8b718e831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1c:6d:3a:55:f1:d0:cc:32:a8:a4:df:54:53:
                    b3:a8:6f:65:cb:8c:ec:48:a8:87:8a:6c:c9:fd:bd:
                    bb:3f:1c:0c:46:77:10:54:01:98:b6:a9:af:a9:39:
                    3e:fc:05:e2:c8:bd:fd:6f:5c:64:6b:db:25:90:ef:
                    13:0c:eb:64:82:b4:c9:f8:8f:8e:5a:fb:a1:4f:84:
                    4f:a8:26:e9:4e:73:a0:3c:f0:30:6a:1c:02:36:f5:
                    9c:7e:af:83:ab:ee:7d:22:60:1b:9f:1d:6a:bb:0b:
                    e9:df:ff:b7:26:51:96:65:3f:db:2d:cb:43:13:c2:
                    69:92:a3:7a:78:2f:f4:90:99:4b:93:eb:3c:78:c1:
                    bf:f0:45:d9:df:67:65:c7:86:c2:02:7f:21:ac:fd:
                    4e:67:c6:76:32:61:76:3e:6c:6a:53:44:21:34:74:
                    fe:6c:37:96:61:c2:24:f7:38:c9:74:1c:9a:4b:69:
                    5b:38:09:71:44:95:7e:56:6b:04:ce:c3:43:69:20:
                    a5:0d:20:ed:81:f5:60:57:62:ac:88:e2:e7:82:1f:
                    0a:cb:be:19:c9:c0:26:b7:53:c9:5e:ab:68:ed:56:
                    d2:fa:36:52:8c:52:d5:a9:48:55:41:cc:0f:43:e0:
                    0d:54:37:b0:fb:17:78:8b:a3:ed:e6:e3:67:32:b7:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:78:95:37:CC:80:8B:23:6C:A7:E5:89:39:A0:EF:B4:D8:1A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:80:c7:0c:c7:db:71:1c:11:8b:4e:c8:8b:ba:1d:8b:fd:00:
         fb:b7:c1:33:15:19:06:ab:26:5c:c2:10:b9:72:ac:90:ab:61:
         a1:22:f6:75:46:9c:b6:76:a8:01:a0:4a:49:24:5c:0a:50:07:
         9d:ca:72:02:56:6a:d2:eb:99:ad:0b:59:f3:a5:b9:51:85:7f:
         3e:3c:95:74:d8:53:b6:e0:02:9c:5b:7b:70:e4:a6:6a:45:c6:
         fe:6a:9c:c3:e1:4b:31:f9:51:5f:b8:ad:aa:4f:76:be:d4:6f:
         43:4c:f5:89:8f:72:fb:80:ba:96:72:e8:b1:66:7c:5c:4c:e4:
         24:7f:6b:3c:80:ae:c2:04:ba:75:bb:ec:00:c8:33:8f:71:ee:
         0c:cc:50:2a:e2:47:61:9e:26:3f:6f:44:6e:67:0e:22:6c:05:
         7d:0a:63:10:be:d3:6b:0e:00:cd:3b:a0:a4:ab:63:47:75:f9:
         7e:c5:85:ae:94:b9:48:91:0e:2f:c7:c6:c7:41:ac:de:f9:74:
         c8:8d:a4:94:8b:e7:af:8e:31:23:34:1e:68:9a:7d:9c:07:6e:
         36:48:eb:f8:5e:df:59:c0:98:24:56:7d:b2:47:4a:2f:d3:73:
         2f:39:b1:20:f4:1d:66:ff:8e:66:e1:f4:c3:53:49:9a:a1:97:
         1e:cc:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 16:04:28 2026 by rpki-client