Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/ecc3e4df-c715-3a6c-9e5d-f9cf4c606aa8.roa
File:                     ecc3e4df-c715-3a6c-9e5d-f9cf4c606aa8.roa (raw, json)
Hash identifier:          sU6qk1e+qMjE3J62WnV8lLvsLG+uJLU47J7Hvd474u8=
Subject key identifier:   13:97:DA:7A:4B:C1:79:C2:7D:04:12:46:24:5F:9A:B2:3D:F9:8A:50
Certificate issuer:       /CN=747cf66b-8b70-4152-8d84-40f9e50bab6d
Certificate serial:       010D0C9F4328584E6DD4D4C270534D18328DFC00
Authority key identifier: D9:1E:8D:16:C0:4A:50:7C:EB:9B:09:0A:FB:7B:E5:87:8F:C3:BF:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/ecc3e4df-c715-3a6c-9e5d-f9cf4c606aa8.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     5777
IP address blocks:        147.234.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/747cf66b-8b70-4152-8d84-40f9e50bab6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/747cf66b-8b70-4152-8d84-40f9e50bab6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d4:c2:70:53:4d:18:32:8d:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747cf66b-8b70-4152-8d84-40f9e50bab6d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=7ac5cdad-1d0c-4e7a-b921-d30d93e61ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:82:c6:b4:94:25:04:03:34:75:70:3a:6c:f4:
                    6a:e5:bd:b1:d3:a3:5d:08:4d:45:58:e8:54:d3:08:
                    31:cb:0e:0b:8f:6c:42:94:05:01:03:6a:cb:78:2e:
                    73:2d:20:ea:4a:39:90:d8:df:96:1e:ff:28:9b:51:
                    ae:65:01:54:5f:ab:29:b2:67:f4:73:2a:91:69:9c:
                    86:96:dd:e0:94:d8:1a:2c:07:16:a8:44:ea:d3:30:
                    61:bf:4e:63:bf:ec:94:08:c7:b6:42:89:9d:67:7e:
                    ce:b7:79:29:a1:58:75:7d:d8:e0:b1:ef:54:b6:db:
                    00:53:0a:ad:83:94:ed:46:0e:0c:31:f1:d6:db:26:
                    0b:ca:b8:62:36:71:e5:27:22:01:a3:c9:2d:cf:d1:
                    22:ce:63:79:49:01:65:b7:4e:00:97:3c:44:0e:8c:
                    71:30:47:de:a6:da:8e:e7:61:e9:f4:51:f7:9c:68:
                    53:9f:a7:be:f2:6b:0b:92:58:50:55:93:6b:3f:b4:
                    e5:a4:51:ed:f5:b6:70:ab:a3:b2:89:c9:91:d5:15:
                    c0:0c:33:dc:ee:5e:f3:2a:06:7b:ff:bd:be:ab:38:
                    4b:08:18:bc:86:03:bf:b7:87:e0:19:1e:17:6a:de:
                    85:9b:2b:15:1e:b0:99:72:98:f8:60:ca:e5:6a:cd:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:97:DA:7A:4B:C1:79:C2:7D:04:12:46:24:5F:9A:B2:3D:F9:8A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/ecc3e4df-c715-3a6c-9e5d-f9cf4c606aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/747cf66b-8b70-4152-8d84-40f9e50bab6d.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1E:8D:16:C0:4A:50:7C:EB:9B:09:0A:FB:7B:E5:87:8F:C3:BF:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.234.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f7:7a:2d:65:2e:98:5a:2f:7f:69:aa:ec:a2:08:1a:c1:c1:
         0f:7c:77:31:63:de:c2:69:fa:60:f5:77:0c:47:93:21:36:35:
         2b:04:83:00:bd:ed:60:70:9c:0e:1c:7d:a4:40:d7:4a:0a:f7:
         5c:b1:1c:e1:2c:46:82:3d:1e:05:e1:e1:de:d8:bd:b9:d9:46:
         b0:b0:43:49:07:a4:2a:d9:0f:ad:1c:6f:83:b2:a2:c2:7b:ad:
         33:56:71:38:eb:57:c9:e1:bf:0b:0f:0f:e6:86:75:0e:3e:40:
         c1:fa:21:9c:d9:6f:f4:bf:8c:dc:d6:d6:db:d9:49:0e:5d:04:
         7e:ef:33:a6:65:89:04:1c:e9:83:87:c6:b1:9a:30:6c:21:d6:
         3f:85:1f:7b:cc:2b:76:97:92:13:35:d4:07:83:a6:ad:bf:cc:
         8d:a9:cb:31:a8:9e:c9:3d:2b:9f:ac:ce:1d:5e:6c:32:02:3a:
         b8:11:ff:32:3b:2d:c3:fd:0b:aa:6a:d9:f4:ee:23:14:1e:70:
         1a:4d:4f:09:c4:51:23:b4:53:48:63:e3:20:c8:b2:3f:42:54:
         f1:37:40:32:10:73:8e:3d:79:ea:c9:e8:97:10:15:66:b7:b1:
         7c:02:9a:8c:7d:04:22:b0:04:56:68:81:84:0e:a0:b3:87:4e:
         a1:7c:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:22:05 2026 by rpki-client