Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8f1d65-906f-33d0-90de-5a741f0df881.roa
File:                     2a8f1d65-906f-33d0-90de-5a741f0df881.roa (raw, json)
Hash identifier:          dEv4M33jDAoLqsq07DVEqw9hCmy4wVPDPmFHgT0L6WQ=
Subject key identifier:   12:FE:91:1B:E1:D5:29:CE:32:36:E1:AE:4A:03:ED:78:41:F9:1B:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4588E8ADB5ED9775CB72A800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8f1d65-906f-33d0-90de-5a741f0df881.roa
Signing time:             Tue 23 Jun 2026 22:35:09 +0000
ROA not before:           Tue 23 Jun 2026 22:35:09 +0000
ROA not after:            Mon 21 Sep 2026 22:35:09 +0000
asID:                     5650
IP address blocks:        47.140.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:88:e8:ad:b5:ed:97:75:cb:72:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 22:35:09 2026 GMT
            Not After : Sep 21 22:35:09 2026 GMT
        Subject: CN=33f49633-b865-4c42-87e4-c015223bfc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:c1:9c:47:41:97:e2:46:ee:20:67:f1:a5:
                    1f:43:19:68:c6:c6:6b:9b:2c:54:49:bd:74:54:4b:
                    b6:0b:32:b1:db:cd:b1:15:98:a6:db:a6:9c:37:b7:
                    b9:87:ed:1e:ff:b9:5b:47:66:77:70:ad:8a:b0:c3:
                    72:16:d4:ad:77:b8:23:c2:df:7e:d5:81:da:28:92:
                    c2:59:e5:73:41:53:b5:f0:3d:fe:21:28:f7:2c:24:
                    56:c2:8b:fe:ba:b0:6a:82:df:b6:6b:be:9b:8e:1c:
                    50:af:f4:8a:60:53:ee:16:d5:02:8e:83:5b:6c:b0:
                    47:87:7e:c6:0e:b3:e4:fd:f2:64:e2:40:6a:dd:ac:
                    b3:84:d1:ea:c8:6d:0d:3c:4a:5a:bf:07:34:b6:27:
                    3d:c1:98:50:19:e3:87:20:ac:d6:82:12:0f:19:0f:
                    61:5c:61:94:59:75:34:e9:4a:30:b2:41:6c:ef:41:
                    30:43:d9:31:03:97:d1:ae:d7:19:07:df:1a:a7:91:
                    88:40:f8:1e:06:21:a5:d3:8d:2a:8d:8b:a2:5f:9a:
                    cd:5d:1b:48:04:6d:92:4d:80:2e:f9:d7:48:4c:2c:
                    1c:32:19:7d:5a:12:33:a2:b8:05:3e:3d:c6:11:4e:
                    73:c2:7c:ec:21:35:3d:46:5a:ae:10:c0:5a:18:b1:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FE:91:1B:E1:D5:29:CE:32:36:E1:AE:4A:03:ED:78:41:F9:1B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8f1d65-906f-33d0-90de-5a741f0df881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:63:cf:2d:00:1c:1e:4e:fb:8d:67:e5:8f:ef:c5:3d:4e:5e:
         97:d1:aa:20:7d:e2:59:b5:93:0e:8f:b6:66:f4:3c:e3:4d:cc:
         43:5c:3c:74:10:7e:26:25:22:4d:3a:46:ee:c9:86:35:aa:e7:
         64:f2:a2:7e:2b:92:b5:58:31:b6:07:6a:d8:13:1e:db:f1:b0:
         3c:94:c6:11:2e:7d:a5:52:08:ac:63:34:ee:09:4f:ea:73:26:
         f0:8b:32:fb:cf:59:39:4c:1b:ee:0a:83:67:b3:4a:f8:e5:4b:
         53:4e:55:3c:ac:50:a0:07:ae:d7:60:e7:64:8e:4c:aa:d4:c6:
         07:6a:4f:b6:3b:27:0a:26:a6:67:f6:46:4a:63:dc:52:6c:15:
         fe:e1:c0:85:cc:9f:f3:4f:a8:84:8d:91:15:b2:e8:c1:bc:37:
         c2:f3:12:01:68:e3:bb:eb:37:ee:5b:bc:4a:e8:5c:87:98:64:
         21:2d:94:b2:e5:44:4f:0e:a3:03:7b:87:de:b0:8e:e8:af:28:
         8e:0f:83:c6:56:93:19:63:45:93:37:67:73:1f:cd:7c:44:84:
         42:aa:cb:c9:42:0c:7c:69:7e:8d:b5:12:ca:bb:52:17:91:f7:
         0b:b1:29:e9:bb:66:63:42:9a:4b:f6:51:55:8d:d7:b2:9e:d5:
         c3:68:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:32:52 2026 by rpki-client