Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
File:                     47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa (raw, json)
Hash identifier:          KpVAWU2OFPTMaGl+XvBso8aaekQJr+xbOEosKiR3D80=
Subject key identifier:   6A:05:FC:DF:D2:07:D1:61:EF:8B:18:73:12:53:79:EA:EA:15:2C:17
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584F72582D9CAB08FBC309878FC0
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
Signing time:             Fri 09 Oct 2026 16:35:16 +0000
ROA not before:           Fri 09 Oct 2026 16:35:16 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     14397
IP address blocks:        104.251.118.0/24 maxlen: 24
                          104.251.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:72:58:2d:9c:ab:08:fb:c3:09:87:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Oct  9 16:35:16 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=6a1902e1-510b-4793-beb2-b44941e0721b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:f8:e3:ae:5b:85:9e:c0:22:d5:2b:b8:3c:
                    63:8d:1e:d6:d2:c3:d8:55:85:db:32:bf:b7:ae:e3:
                    75:c0:b5:44:80:88:9f:b4:c1:7f:06:73:b9:de:42:
                    ff:1c:10:e8:cb:01:37:f8:f6:94:14:67:6b:9d:08:
                    9e:78:12:0e:e8:49:e7:65:e2:08:dc:52:53:be:dd:
                    b1:6d:24:55:54:10:9b:ff:8a:28:c0:54:1a:f1:dc:
                    50:82:94:4c:bd:f4:e0:ee:3e:b9:c7:3d:04:45:5e:
                    38:9f:2b:d7:28:e2:f5:01:8a:0f:8e:b6:6c:32:9b:
                    48:be:24:da:5e:e9:0e:32:88:97:e2:cb:6d:82:25:
                    28:72:52:60:18:ce:bc:0e:b8:e6:24:e7:e6:d1:32:
                    c8:ea:6d:a8:5a:01:d4:ac:f4:b9:08:b8:46:78:bb:
                    ca:0b:b6:50:32:d9:76:8c:0c:2c:89:7a:bd:4c:a8:
                    0f:14:72:94:31:26:ae:15:4b:b0:ec:42:c2:74:d3:
                    4e:e8:73:63:75:2e:5a:86:e3:ca:ec:e1:4b:da:43:
                    0a:f6:cb:64:7c:50:dd:f3:4b:ec:4b:99:91:c3:b3:
                    1e:12:6d:7c:c4:d0:8e:a2:81:8e:78:ce:16:9b:91:
                    7c:58:66:77:77:db:19:07:4c:8c:4a:a1:2e:b9:d0:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:05:FC:DF:D2:07:D1:61:EF:8B:18:73:12:53:79:EA:EA:15:2C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.118.0/24
                  104.251.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:b9:8f:43:8e:7e:8e:16:e4:0f:b2:02:c3:cd:3a:57:38:
         25:5d:86:4f:f3:b3:1d:1b:73:2f:bb:8c:fa:f2:e7:45:56:13:
         88:9a:77:f4:3d:31:84:ff:51:ec:96:48:dd:74:f8:09:3c:3e:
         4e:ba:e1:c5:78:24:d2:a6:1d:7b:6c:77:fd:1d:9b:61:e3:62:
         fe:4e:4f:6c:d3:fa:04:71:57:e6:27:1f:d7:f2:af:96:5f:a3:
         a5:4b:8c:0c:65:be:20:5a:ec:91:e9:e6:bc:1c:23:e1:6a:f3:
         64:39:ba:f2:ee:b3:f2:52:c1:58:c7:e6:f2:ac:fb:c7:f3:21:
         a6:18:a2:d5:dc:0d:94:7b:fa:41:68:97:56:ff:24:1c:1a:13:
         1c:5e:7e:8c:9b:f5:52:53:1d:ce:a7:66:b0:f4:96:aa:6b:51:
         b0:a0:83:df:29:5b:39:95:c2:e7:5d:72:b9:1b:90:77:ef:bf:
         16:5a:49:db:a0:eb:7d:89:5f:3b:4e:d7:d3:c2:78:4f:ab:2e:
         46:96:43:c7:dc:7b:94:01:26:09:b4:09:bf:10:71:9e:34:89:
         2b:33:ff:35:26:46:57:f7:39:71:fd:6e:c5:6c:55:93:ea:b3:
         f4:c4:46:cf:98:17:df:41:ec:0d:9f:4f:20:ae:89:b1:f3:28:
         38:b5:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:19:58 2026 by rpki-client