Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/304f567c-9eb0-3696-9ee3-ba60a0bc6bfb.roa
File:                     304f567c-9eb0-3696-9ee3-ba60a0bc6bfb.roa (raw, json)
Hash identifier:          pgFurrVT8FtyaNMXCKAD14THKUcuKqGlGIOhZ7ibGXI=
Subject key identifier:   DD:3D:70:78:EA:8C:E3:CC:BC:FD:16:E3:86:F3:80:BF:4E:00:B8:39
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB97E8A0F7762CC9D56B11080
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/304f567c-9eb0-3696-9ee3-ba60a0bc6bfb.roa
Signing time:             Tue 04 Aug 2026 11:28:01 +0000
ROA not before:           Tue 04 Aug 2026 11:28:01 +0000
ROA not after:            Mon 02 Nov 2026 12:28:01 +0000
asID:                     7203
IP address blocks:        147.255.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:7e:8a:0f:77:62:cc:9d:56:b1:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 11:28:01 2026 GMT
            Not After : Nov  2 12:28:01 2026 GMT
        Subject: CN=b1a85cca-5a7c-4e24-af3f-aaf024b98eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:e1:bf:a4:c6:42:a1:51:07:eb:6f:51:8e:
                    09:f9:d0:55:4a:f2:7b:d1:28:32:b5:c8:99:28:12:
                    17:98:17:e1:43:f5:e8:71:65:41:ce:af:b5:a2:0f:
                    88:27:66:5a:76:71:23:5b:c5:1f:86:b2:72:14:ca:
                    5d:11:66:80:6e:37:2a:29:03:1a:77:55:0c:2e:ac:
                    2b:34:ad:6b:11:ce:8d:40:bd:fe:d2:b8:dc:67:62:
                    9d:be:a9:19:6c:09:30:3d:e0:2e:3d:11:c0:72:b1:
                    7e:06:3f:6f:57:78:f2:99:3a:73:ce:6a:20:e2:db:
                    15:3f:06:67:8a:a6:21:0f:00:48:a4:4d:5d:62:48:
                    a1:a1:84:4d:29:f8:2f:b9:4c:ff:9d:9d:74:2d:96:
                    de:e6:b9:94:f7:e8:76:22:15:fa:90:25:f9:86:a8:
                    38:b7:ce:f4:91:25:f1:7a:92:46:35:c1:9c:d6:11:
                    86:47:ef:73:51:20:e5:25:0e:ce:2e:3a:b6:b0:45:
                    98:b5:ae:41:75:74:f5:83:d7:35:1e:3c:2d:2f:9f:
                    d6:e6:93:3a:9f:cb:75:05:39:04:aa:d1:6c:bc:44:
                    6f:ae:f2:27:d1:d2:39:78:b2:d2:e6:41:31:5b:95:
                    6f:cf:26:58:3a:71:46:e2:52:cc:3e:6a:a7:7c:98:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3D:70:78:EA:8C:E3:CC:BC:FD:16:E3:86:F3:80:BF:4E:00:B8:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/304f567c-9eb0-3696-9ee3-ba60a0bc6bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.255.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:2a:2f:35:a7:70:0a:77:76:ce:d2:06:3e:b1:18:ef:f7:
         b4:26:95:eb:ef:43:6b:d2:4f:08:3f:05:fe:26:12:21:a5:76:
         bb:f6:03:c0:1d:ee:ff:63:5d:78:b5:45:98:a8:d6:f5:e7:a3:
         e3:6e:d5:a4:64:02:62:d1:d2:f3:ad:ed:64:03:7f:b4:14:c8:
         00:92:c2:7e:0d:6d:da:cb:ca:1b:a9:be:fa:b4:4c:6b:87:a2:
         b3:64:cf:51:4d:fa:a3:a9:a7:b1:36:06:9d:0b:96:7d:b8:73:
         7a:3e:a1:97:a5:6a:2f:a9:8e:fb:da:53:70:5d:45:02:d2:37:
         9d:ba:40:b4:de:cb:5d:56:78:d6:22:b4:b3:d1:4d:92:2a:8d:
         9e:de:b3:e2:d1:df:1a:69:5a:93:ee:33:8b:37:ba:28:d6:cf:
         fb:a6:75:1c:a0:8f:2b:3c:d1:89:e5:15:c3:80:3c:a1:ee:1a:
         30:1c:d0:39:1b:d9:ce:3a:9d:dd:3a:ca:af:f1:51:fe:1e:13:
         0d:83:64:21:cd:49:94:45:89:0e:cc:bd:91:51:19:a5:b5:b6:
         d6:f3:8c:b4:89:82:2d:5b:a6:6f:56:e6:36:f4:bd:48:d1:48:
         59:23:d3:cd:7b:a8:30:c7:f5:14:fb:ed:3d:9d:5c:6b:bb:80:
         8d:9b:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:19:13 2026 by rpki-client