Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1650c0d1-d383-31ab-ae53-0e16e4fa306b.roa
File:                     1650c0d1-d383-31ab-ae53-0e16e4fa306b.roa (raw, json)
Hash identifier:          rdNINYpcY6/o3MMQalABVOaLxsNi+EuwyetmT+2ivH0=
Subject key identifier:   D0:EB:B9:96:D0:F1:19:3E:0D:10:B2:FD:0D:79:44:EE:C8:71:6D:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCCF762B9A9FFE6C7CF640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1650c0d1-d383-31ab-ae53-0e16e4fa306b.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        47.152.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:cf:76:2b:9a:9f:fe:6c:7c:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=bec91710-f9a1-46b1-92c0-1aebb7b21cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:b8:14:e8:a6:ba:c1:48:1b:05:ed:ec:f1:
                    da:3d:32:36:da:33:16:5c:02:e3:06:99:28:19:26:
                    e2:86:14:18:67:12:b9:3f:2d:e2:38:8e:6e:91:d4:
                    a5:3e:08:82:88:a7:b6:0e:38:43:f3:c2:b7:9b:5e:
                    24:93:b9:15:a8:d1:c8:57:01:33:75:14:1d:b8:9a:
                    96:4c:95:4a:1b:f6:2f:04:56:cf:03:9a:0d:b5:50:
                    d4:14:c8:03:a4:23:db:5b:06:e2:fb:f3:ad:47:56:
                    d9:2f:ec:0e:43:5b:c4:7a:2b:8b:19:a9:59:91:41:
                    35:5c:f9:a5:54:05:1a:58:73:d9:af:22:8d:d1:f2:
                    ad:b9:4f:c4:b7:5d:a9:83:69:a8:89:f7:4e:3a:29:
                    0c:4f:5f:31:0b:aa:a7:d7:4a:a4:ae:81:4a:df:52:
                    08:3b:f8:89:f2:a8:88:16:e6:e2:cc:c9:5e:96:43:
                    68:c4:c9:ef:fa:7e:e2:5b:9d:79:3e:82:c4:3d:ec:
                    db:80:8c:ab:58:33:98:90:d3:a7:87:3e:1f:0a:d5:
                    6e:2f:fb:38:af:d7:dc:9d:b2:33:f1:b6:dc:e9:d2:
                    96:f2:1e:ca:6e:21:84:08:6e:5e:8c:77:cd:66:72:
                    0f:08:eb:0a:9c:91:bc:93:15:59:fd:07:be:c1:50:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EB:B9:96:D0:F1:19:3E:0D:10:B2:FD:0D:79:44:EE:C8:71:6D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1650c0d1-d383-31ab-ae53-0e16e4fa306b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.152.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:4c:c8:c7:96:90:02:e2:75:6c:3f:8b:96:ad:29:a6:78:
         4e:e5:f5:80:20:a5:05:88:84:6d:51:23:ec:e3:fa:38:01:4e:
         c4:e9:4a:d5:61:f9:0b:0f:aa:02:75:42:5b:b1:c2:42:12:4f:
         6c:90:e8:fe:ce:05:0f:e2:e1:eb:a3:69:b8:a8:89:c5:b6:1c:
         82:69:ea:da:ae:06:cd:a7:d0:bb:81:ae:b8:d7:ee:bf:ed:07:
         c9:c4:04:dc:42:7d:3e:18:73:d5:45:5a:a1:f7:b3:f0:9d:42:
         d1:57:ff:83:68:03:57:6e:b1:22:98:03:a9:7b:99:26:19:0b:
         93:6d:4e:b8:b2:d2:2e:5b:40:bd:36:48:91:88:70:a2:7a:b7:
         be:f0:c3:fc:61:7c:0e:40:66:28:c9:12:47:14:75:5d:17:7c:
         15:f8:80:9c:85:5c:9e:4e:93:20:ff:c9:0a:51:a1:dc:08:55:
         00:44:c9:a4:4c:17:ac:3f:64:9e:3c:bb:1b:da:81:8f:a4:8b:
         ff:5e:96:a9:9b:a1:9a:65:db:88:22:a5:67:8c:5e:a4:cd:e4:
         b2:7d:e7:d5:70:f3:c4:0a:54:a6:f7:cf:c2:4e:51:4e:d7:3b:
         18:34:67:cc:38:b3:13:3c:32:8a:b3:d5:08:9c:c4:f4:75:80:
         6e:44:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:51:42 2026 by rpki-client