Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/6f73c6fa-cd1c-32e7-889e-95677726f286.roa
File:                     6f73c6fa-cd1c-32e7-889e-95677726f286.roa (raw, json)
Hash identifier:          H1kRQQh/Ip9RUl0oO36ySlBxf1Hg7Hr9f5n83cN2gwc=
Subject key identifier:   97:7E:60:8B:28:F5:7D:AF:DA:BF:9D:BE:47:6D:7B:F4:4F:A1:DB:29
Certificate issuer:       /CN=d123245c-48a2-4727-a42f-d6f4b0ecd817
Certificate serial:       010D0C9F4328584F7D66E728259E299CDF914500
Authority key identifier: 59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/6f73c6fa-cd1c-32e7-889e-95677726f286.roa
Signing time:             Tue 13 Oct 2026 15:38:50 +0000
ROA not before:           Tue 13 Oct 2026 15:38:50 +0000
ROA not after:            Mon 11 Jan 2027 16:38:50 +0000
asID:                     10977
IP address blocks:        143.203.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:66:e7:28:25:9e:29:9c:df:91:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d123245c-48a2-4727-a42f-d6f4b0ecd817
        Validity
            Not Before: Oct 13 15:38:50 2026 GMT
            Not After : Jan 11 16:38:50 2027 GMT
        Subject: CN=fea99474-a3ea-4c23-985c-ce2838aa0c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:00:27:ed:99:5d:69:a2:18:55:fc:87:05:
                    33:0e:e2:b9:8a:e9:d8:9f:ba:e9:6a:03:16:20:75:
                    5b:cf:22:ea:02:ae:fb:0f:5a:f6:0d:8f:35:1c:ac:
                    e0:60:f4:4d:2b:dd:a2:b1:5e:66:a9:c6:9e:8e:f4:
                    b1:7a:25:5c:bb:6d:9b:12:bd:c1:f7:8c:4a:4b:7f:
                    00:5e:b2:ca:37:08:5e:37:c5:73:73:d6:18:43:f5:
                    e5:b5:4e:20:94:08:22:59:34:81:5b:29:1e:6b:f5:
                    1b:e9:31:48:98:07:0a:4e:32:df:74:c2:ba:3d:0d:
                    3c:4f:db:3e:eb:48:c4:26:58:aa:0c:30:99:de:10:
                    b4:a3:ee:bc:9b:fa:bc:f7:f8:b8:25:ef:4e:b7:16:
                    0c:64:39:6e:13:2a:46:e2:59:ed:16:1d:7b:9f:b0:
                    40:66:5d:6f:8b:4f:50:f2:c2:d7:3b:52:2f:ad:f4:
                    a8:f1:fc:f0:2e:89:39:a6:d5:1b:74:bc:2e:b9:11:
                    38:59:0c:6c:f6:33:c8:85:3e:3e:31:4a:22:7e:88:
                    ff:58:5c:a9:98:7f:db:67:a3:56:18:58:cc:f8:7d:
                    d2:6d:c7:e9:e6:b8:d6:65:35:c3:87:28:f1:e0:b8:
                    ed:75:4d:6f:f1:88:61:b4:c3:87:0e:00:7b:a7:ae:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7E:60:8B:28:F5:7D:AF:DA:BF:9D:BE:47:6D:7B:F4:4F:A1:DB:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/6f73c6fa-cd1c-32e7-889e-95677726f286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl

            X509v3 Authority Key Identifier:
                keyid:59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.203.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:ad:df:fb:9b:23:28:1b:30:e5:18:f7:4c:33:42:c2:bb:
         17:bd:f9:90:e3:4f:09:c8:34:82:a9:84:82:93:03:89:b6:fd:
         47:f6:70:d4:58:88:04:c6:70:dd:30:34:b8:4b:f5:ea:fd:60:
         17:89:3b:eb:fe:84:23:31:fe:67:30:11:ba:9f:02:e4:9a:3a:
         c2:d8:96:a0:12:7b:ed:09:9c:e5:ba:42:33:d0:a2:54:cd:8b:
         78:06:9d:a1:3a:57:b5:b9:0e:cc:5f:35:97:64:5c:b1:c2:c4:
         0a:bd:26:17:cd:d3:70:c0:3e:a9:bf:17:d7:6b:8e:25:88:5c:
         9f:98:c4:39:e4:d7:71:69:a5:8b:8c:c2:31:f5:db:6e:69:1f:
         3d:37:23:cc:ac:1a:92:05:54:3f:f0:44:ad:c2:25:ce:ff:56:
         38:cb:0b:a1:1f:da:87:5e:03:08:54:49:d0:4c:09:87:62:b8:
         29:5d:24:64:5a:1b:a9:a9:0f:e3:59:fb:ea:8f:f3:da:a3:6f:
         44:62:23:63:85:f7:90:7d:32:13:a3:b0:a9:59:47:d3:9a:b4:
         bd:34:52:d9:9e:9f:65:d7:ff:0d:0c:bf:5b:d9:72:2b:8a:f2:
         28:24:c9:c0:3e:e5:21:e1:04:e3:0b:75:3a:6d:56:0e:86:37:
         d6:5b:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:15:01 2026 by rpki-client