Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c7be3083-052e-39f7-83b5-90943619d075.roa
File:                     c7be3083-052e-39f7-83b5-90943619d075.roa (raw, json)
Hash identifier:          GYtBIolW1TWhVz/2JNe5ptSOMM+SaT1K5AXq0PsnPMs=
Subject key identifier:   AA:10:FE:35:98:1F:F3:BD:9A:F2:27:89:59:CE:1C:30:FA:93:60:64
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5B97FBAC780A30275531D340
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c7be3083-052e-39f7-83b5-90943619d075.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     7203
IP address blocks:        147.255.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:fb:ac:78:0a:30:27:55:31:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=a4840082-307c-4dc9-a3b5-a16e2b279cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:f3:f7:b9:23:18:88:0c:13:2b:a8:35:f7:
                    06:a5:46:78:77:3b:54:32:57:7b:dc:42:e6:9e:7a:
                    44:01:3c:58:fe:8b:6d:cc:36:20:bc:0f:44:a3:67:
                    cf:b1:ad:55:5d:7c:c5:c6:05:98:78:62:14:ae:95:
                    12:d0:59:22:7a:70:36:98:56:28:74:96:70:12:50:
                    b3:a3:ec:5e:5f:8c:3e:33:7e:9a:7b:1a:8c:e7:1b:
                    24:2a:b6:bd:19:82:4a:a4:57:20:cd:ca:14:a2:eb:
                    d6:7e:64:75:3e:fd:74:b5:c7:16:2e:ef:09:ed:cb:
                    ad:cf:fe:e8:1c:9d:ad:a9:90:01:1b:36:50:4f:b1:
                    83:3d:f6:e9:85:49:8d:60:1e:10:b7:87:fd:94:db:
                    0d:60:21:ba:1b:f0:94:32:03:d1:38:4a:0a:be:3f:
                    95:6a:fb:b1:9d:92:8d:6b:13:a3:21:b4:ac:3b:cb:
                    46:da:90:22:00:42:ee:6b:90:6c:97:17:b0:9b:99:
                    53:f7:fa:f0:24:ea:35:6c:4e:f7:62:4e:93:ac:5f:
                    18:92:7e:88:f4:ab:df:d6:56:64:49:2d:a6:2a:30:
                    ed:c9:01:d9:99:5c:07:e5:9f:9f:24:4c:9d:e3:59:
                    5f:d0:46:26:0a:17:fc:56:aa:39:d8:e1:03:b4:38:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:10:FE:35:98:1F:F3:BD:9A:F2:27:89:59:CE:1C:30:FA:93:60:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c7be3083-052e-39f7-83b5-90943619d075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.255.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:60:8c:69:43:b9:37:6c:7d:ff:51:4e:a9:3a:3a:cd:47:2b:
         6a:59:59:09:07:f3:65:6a:5e:bf:e1:a4:df:87:80:4b:fd:6b:
         b3:6e:42:8b:e5:38:b2:18:64:8a:b6:c5:76:0c:26:e1:3a:43:
         a6:e7:4c:09:3b:9b:12:08:94:c2:0b:73:9c:09:27:23:4a:f3:
         7b:4a:45:af:0a:08:68:68:18:11:02:9a:22:af:59:38:f5:54:
         3a:5d:48:67:a0:04:a8:7c:4a:57:8a:49:6f:c9:f5:90:8b:cd:
         e5:3b:5e:bd:63:8b:21:e0:4b:4c:77:65:cc:2d:7a:3e:dd:53:
         a5:0a:29:ed:af:81:e6:47:e8:48:b6:8d:24:c5:24:a3:92:ae:
         e4:82:bb:8d:23:a8:50:f9:1f:8e:69:f6:79:18:fd:ce:b1:12:
         8d:b5:9a:01:d1:2f:9d:4b:68:f0:e9:96:02:9c:4d:a2:2c:68:
         56:fb:4b:5d:1a:db:ea:41:26:7d:1f:e9:82:2f:68:d5:15:80:
         2b:61:59:5e:b6:f0:3d:1a:78:5a:50:c7:4b:30:8c:92:83:ad:
         0e:12:b0:7f:99:ea:1f:b7:41:05:43:37:2f:c3:32:3d:c1:d1:
         d1:a0:09:cf:52:24:82:05:89:43:43:23:61:21:a3:ab:60:41:
         65:23:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:14:41 2026 by rpki-client