Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa
File:                     c950cc34-b6bc-32c3-886c-c6539782d6a6.roa (raw, json)
Hash identifier:          Eolup8WRVXjfUVu2Eu5JBgTmlSXqYuiyFXaP1Ecaurw=
Subject key identifier:   0B:A4:E8:35:71:C7:50:CE:6A:6B:05:C6:24:6B:3E:4B:69:8C:65:32
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E8DEF9D226DE80EE75D874700
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     62610
IP address blocks:        128.1.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:9d:22:6d:e8:0e:e7:5d:87:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=758a0503-5fc7-44d4-8912-9c606b864966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f1:6c:2d:a1:ed:ae:8d:98:fd:73:81:f7:37:
                    c0:0f:ca:cb:2c:71:5f:be:59:94:89:fa:46:2f:5f:
                    ed:db:25:44:66:5c:12:dd:fd:5d:6a:7e:81:ba:59:
                    9e:2c:ed:98:b9:ac:13:52:3f:8a:7d:4e:bd:06:d7:
                    a7:bc:3a:11:16:c1:b7:59:34:77:43:e6:6e:82:5b:
                    b4:29:44:a7:92:e3:a6:2f:5a:04:f5:dc:6f:a3:b1:
                    80:62:78:f4:db:75:ab:ce:ef:a8:18:99:4f:a2:bd:
                    39:8d:44:a2:26:e2:5e:ab:fa:65:ca:8e:f4:b0:6c:
                    2b:a2:69:f1:b2:4a:12:60:d2:09:ab:84:b6:a2:1a:
                    66:61:ae:eb:31:27:f5:f2:4b:85:da:b8:ea:57:4f:
                    20:e8:9e:5f:75:c0:db:e7:cf:65:1a:2f:f4:f8:6d:
                    fb:ef:8b:bc:0e:ed:58:df:84:2c:e2:87:57:ea:56:
                    a8:6f:6f:45:68:b3:10:4f:13:74:98:80:15:05:3f:
                    50:98:d8:99:bc:e6:03:33:0e:51:f9:d4:26:00:78:
                    86:fc:d2:b3:5a:19:81:e4:f1:23:e7:df:90:88:ec:
                    87:0d:22:58:33:d8:89:7a:38:c2:a4:4e:30:c3:8b:
                    d9:bc:15:98:0a:60:36:df:bd:34:ca:f6:64:1a:8b:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:E8:35:71:C7:50:CE:6A:6B:05:C6:24:6B:3E:4B:69:8C:65:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3b:cf:8c:29:55:87:28:3f:94:7f:03:a8:37:79:98:32:1e:
         38:c1:4a:9d:56:09:fd:91:8b:c4:ef:80:2b:4a:ae:1a:38:e6:
         10:af:ab:c0:d7:e4:6f:4c:4e:b7:a6:05:67:ac:18:a9:85:59:
         86:f7:44:f5:dd:75:32:34:e6:be:d5:e3:48:c9:2b:bf:ea:3f:
         a7:6e:e8:54:a2:60:fe:05:c6:b9:97:6e:37:bd:ef:ff:21:d8:
         c7:7f:05:dd:d7:22:95:f5:e5:45:58:e1:b3:2d:90:cf:9e:86:
         98:b1:58:97:a6:a7:34:3b:25:dc:ee:63:cf:68:e2:d9:e5:67:
         11:55:f2:60:bc:db:a6:7c:43:12:2a:2c:98:4f:23:40:7e:e4:
         2e:30:2b:9e:f1:cd:20:ad:45:67:3f:cb:4c:d1:8b:cc:18:50:
         64:d1:3a:38:f9:8a:46:b0:80:42:5f:77:6a:c7:0c:71:c8:f2:
         56:71:45:01:96:2d:a1:d7:6a:4c:a5:ee:33:4b:b7:e7:e7:75:
         c9:a7:21:d8:60:a8:8a:fd:fb:0d:6f:93:b0:4e:53:6a:89:32:
         26:7f:f6:6b:38:4a:de:90:dc:8b:f8:f7:67:98:0a:d2:0f:1b:
         8a:eb:19:fd:cf:65:e8:97:32:83:6a:e7:0d:97:80:22:c6:53:
         3c:d6:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:23 2026 by rpki-client