Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1e1ab39-0abc-346a-a724-9b8e24e36aa7.roa
File:                     b1e1ab39-0abc-346a-a724-9b8e24e36aa7.roa (raw, json)
Hash identifier:          7fdtM4HGbnoWaV5C0Xh36ZI9HeCB+EGHzTezkpuWkHY=
Subject key identifier:   BB:B1:E8:64:3F:32:CA:72:49:32:87:7B:49:7B:4D:10:11:0D:02:3D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5B97FB412113B6CBCAE22600
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1e1ab39-0abc-346a-a724-9b8e24e36aa7.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     7203
IP address blocks:        147.255.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:fb:41:21:13:b6:cb:ca:e2:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=99761af5-2717-4698-aa70-7e24a650337f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a7:f9:f8:60:8a:56:c1:c4:4b:c6:c8:ab:c2:
                    3d:be:b5:79:80:45:45:b8:03:75:df:d8:5c:bd:31:
                    7b:5c:23:9e:2f:2d:83:87:ec:af:49:c7:ae:9f:29:
                    14:79:26:71:13:4c:4e:83:3a:92:a6:61:7d:65:64:
                    91:03:d8:8e:72:b0:8f:a8:c4:ab:c2:d6:50:6a:73:
                    35:3a:47:35:73:8c:b9:01:da:45:af:c2:28:02:e6:
                    c1:0b:8d:10:6c:b0:cd:f3:ec:93:96:db:06:16:cd:
                    cc:e9:bc:9e:80:08:a8:9d:9f:5d:11:5e:12:f4:f4:
                    cd:ef:cf:11:1b:f0:4b:4a:86:81:ad:79:4f:5f:bf:
                    66:a6:76:10:c9:01:49:43:2b:16:58:de:df:a1:a8:
                    37:0d:1c:4f:df:24:8d:da:e9:a0:66:f2:22:47:c6:
                    b4:1d:49:9b:76:3f:2c:20:f3:51:bd:af:ca:fb:ba:
                    f9:38:54:ce:22:ef:d7:3d:b0:b2:ef:00:fd:7c:de:
                    a3:67:0d:d3:e4:e1:72:75:8d:30:00:b1:9c:67:0d:
                    68:8c:b7:d4:e2:53:fe:49:29:e3:74:a3:05:8f:ce:
                    fe:b3:27:01:f9:0e:9f:bf:e1:3b:7d:1c:77:5b:f1:
                    2c:3f:86:cb:55:dd:63:f6:90:eb:06:05:58:5e:c2:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B1:E8:64:3F:32:CA:72:49:32:87:7B:49:7B:4D:10:11:0D:02:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1e1ab39-0abc-346a-a724-9b8e24e36aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.255.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:de:7a:4a:6e:28:65:9a:e9:6d:fc:35:75:24:d1:42:4e:7e:
         bf:68:6a:ba:05:85:f1:64:90:f0:cb:fe:8b:e4:2a:1f:b9:1f:
         9b:5f:4a:fa:a4:03:ad:83:98:24:62:77:ff:b7:b5:40:e6:0a:
         ee:b4:e3:f3:a7:d2:db:3f:58:c1:f8:e1:df:c4:e3:f4:6d:7e:
         bc:8b:4f:c6:37:37:70:54:5c:5a:b0:b2:35:c3:47:ef:99:8e:
         4d:74:cd:4a:62:63:ed:c1:c4:90:8d:03:9f:6a:1a:ca:5a:40:
         3d:04:61:2a:82:87:78:05:01:7d:e7:94:ed:1d:3a:c3:40:5b:
         10:31:70:8d:91:24:0f:ea:e7:7a:2e:f2:fd:37:ae:e5:3f:c9:
         c3:fc:d6:99:76:4d:24:5c:ab:bd:9a:2a:fe:2f:f2:0f:b2:6d:
         1b:5e:55:d7:bc:06:18:22:b7:cf:ee:63:58:36:37:fb:a8:ae:
         3c:ed:a5:c2:ca:3f:90:65:15:8b:51:0e:35:ec:09:8e:f4:77:
         65:16:92:60:60:b4:d6:7c:f0:fb:12:e5:4a:64:df:3d:97:68:
         d9:00:8a:1a:73:5a:26:d3:cb:98:25:6c:b8:b4:fe:97:76:18:
         80:d2:e6:c0:5b:e9:b9:71:7a:de:d6:49:6a:f6:72:5f:be:0c:
         6f:10:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:56:02 2026 by rpki-client