Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/610a3bb8-56fc-3b91-808d-a19ec0383c73.roa
File:                     610a3bb8-56fc-3b91-808d-a19ec0383c73.roa (raw, json)
Hash identifier:          eh2hN2xMEm+N2ADDCTzCtBIWJ4ZS4g3Lneofc7MKYtc=
Subject key identifier:   A3:9B:2F:57:92:49:61:83:7E:AC:2B:D1:07:2B:A2:46:9E:64:FD:21
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5B97FBCE1E50D1DB06457F80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/610a3bb8-56fc-3b91-808d-a19ec0383c73.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     7203
IP address blocks:        147.255.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:fb:ce:1e:50:d1:db:06:45:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=9c5b9dd4-0e4c-4fbf-83d3-373b8caa3f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:fb:dc:4f:fa:1d:2d:bd:fe:95:76:c9:64:
                    92:4a:b7:a1:99:ce:cc:64:bc:3b:11:b0:83:17:42:
                    60:d3:39:02:41:51:b8:9c:8f:c4:64:82:4d:c2:52:
                    f6:40:20:ca:93:24:0e:3e:21:48:b8:64:ed:87:29:
                    c2:5c:2b:e2:c0:38:44:54:c4:20:47:02:36:33:d4:
                    4a:12:d8:64:7b:6d:d2:1d:bb:7e:e1:43:8e:86:34:
                    b9:5a:27:eb:05:93:0b:bf:07:e6:80:34:c8:06:29:
                    40:28:97:b6:6e:99:a8:72:a6:af:05:d9:ba:15:d3:
                    c9:eb:60:76:30:db:37:92:ab:d8:cb:96:77:23:35:
                    af:38:6d:9c:c6:0a:6f:e8:45:0c:44:b2:dc:79:8c:
                    2a:94:c1:74:da:1c:01:ff:78:e5:de:8d:59:25:3e:
                    1f:51:7b:d4:ff:6d:2d:17:05:5b:ad:d2:94:b2:6a:
                    cf:ee:9b:de:d7:46:bc:c0:a4:cb:52:e7:6f:07:54:
                    ed:42:67:9f:8a:78:de:b2:24:50:70:db:51:a8:14:
                    60:38:de:b7:fe:c6:e6:d7:57:35:95:39:98:8a:7b:
                    7e:b7:82:96:d6:4a:d3:1b:e5:7a:9e:8e:45:99:c3:
                    f5:04:6b:a5:8b:7e:a2:bc:c6:d7:af:de:71:8f:f4:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9B:2F:57:92:49:61:83:7E:AC:2B:D1:07:2B:A2:46:9E:64:FD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/610a3bb8-56fc-3b91-808d-a19ec0383c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.255.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:35:a1:1b:51:76:94:f0:98:ec:a0:09:30:bd:88:97:14:20:
         3e:8a:3c:23:c3:05:6c:9d:f4:2b:db:aa:ad:d4:58:60:0f:47:
         e7:bc:6d:3b:47:36:90:69:0c:b0:1e:b1:ee:17:5f:23:a6:87:
         34:e8:50:a6:17:ba:10:b8:51:2c:7d:bf:ac:89:98:25:6f:82:
         14:45:11:be:64:5d:02:03:36:26:63:6f:c8:95:37:4e:7e:93:
         c1:c6:71:ec:cc:eb:84:78:6a:17:5f:cd:63:c5:8e:2d:92:a5:
         08:4d:19:8a:d4:34:f2:22:9f:6c:f8:2b:b9:c3:a8:f4:77:f0:
         77:3e:ed:df:4f:c8:f4:9f:39:89:4c:0d:15:e1:48:eb:d4:1f:
         92:c1:c8:dd:94:f7:14:ab:11:90:f0:e7:8e:69:b7:1b:05:8f:
         3a:b2:22:27:2c:ac:0e:a7:66:43:0a:7b:64:33:09:3c:c8:3f:
         92:e0:4e:5d:4b:72:84:4c:82:4c:ef:8f:49:0f:98:d8:af:9c:
         5a:18:31:57:35:b4:db:75:a2:5c:ee:55:bd:33:f3:32:62:87:
         6a:7b:8f:96:87:6f:39:ff:d6:57:12:e9:09:97:d4:cb:70:06:
         77:a2:42:6c:fd:4e:be:3d:2f:af:39:0a:6b:64:1e:3d:3d:b5:
         1e:fe:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:12:16 2026 by rpki-client