Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/566e7dc8-f3e6-39b4-b797-1e2392bd8e3c.roa
File:                     566e7dc8-f3e6-39b4-b797-1e2392bd8e3c.roa (raw, json)
Hash identifier:          MjBbMKYs4s3jzx3i+OSSzA/4qQibfYhte9gNbcQ6FKg=
Subject key identifier:   15:9D:B1:A9:78:D9:A5:DB:06:5D:0D:B9:B4:EA:15:40:54:0B:2B:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCD4361E944BD663F87980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/566e7dc8-f3e6-39b4-b797-1e2392bd8e3c.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        47.176.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:d4:36:1e:94:4b:d6:63:f8:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=344eb4b5-ca63-4ed0-8fa0-67218ac4f581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:ad:8d:11:27:69:35:2e:e0:e1:ea:38:59:
                    eb:71:f6:1e:dd:4b:43:d4:93:4d:cf:e5:d1:5a:f1:
                    a3:dd:6e:68:f5:2a:a8:89:f3:bd:3b:86:82:71:5c:
                    c7:c0:77:d4:f9:ea:26:ac:0d:ed:a9:3b:af:9c:37:
                    84:5b:c9:91:7d:5d:a5:6d:f4:32:5d:c5:36:2c:37:
                    ea:1c:05:93:85:87:e4:1c:1f:8b:34:f7:13:24:54:
                    7a:50:7a:ae:f5:3f:ee:c8:a4:0e:06:05:41:e9:67:
                    7c:51:e0:e4:c2:b1:4a:a1:33:27:4b:58:70:5e:a1:
                    40:fc:47:e1:f7:bc:91:58:5e:33:77:3b:ef:f6:1f:
                    7a:d0:5e:15:e1:a4:13:0d:c3:7e:74:29:46:81:59:
                    81:9a:51:0f:2d:6c:3c:06:9f:d0:ad:b2:21:a9:0a:
                    4a:e4:cd:4e:b2:65:f7:59:b6:f7:79:8b:fd:55:f6:
                    8d:db:aa:a4:43:c6:30:32:01:0e:5a:9b:20:48:c5:
                    af:c6:ec:d8:6b:a9:50:12:9c:1c:20:55:02:86:fb:
                    66:ff:6d:8b:a3:70:b3:7f:64:b0:60:39:97:ee:96:
                    e0:53:9d:14:a2:ae:d9:cb:78:39:10:99:64:72:28:
                    c3:e8:0b:82:37:17:97:ac:00:2f:2b:72:19:67:7d:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9D:B1:A9:78:D9:A5:DB:06:5D:0D:B9:B4:EA:15:40:54:0B:2B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/566e7dc8-f3e6-39b4-b797-1e2392bd8e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.176.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:ea:53:e5:9b:39:83:7c:85:4d:90:81:41:44:a4:68:54:
         2d:e4:48:ec:6f:40:fc:db:49:b8:36:20:c1:95:c0:f5:87:88:
         da:82:9d:70:7a:ae:87:2f:0d:7a:a3:0a:57:09:31:57:99:02:
         18:b9:0e:00:3f:df:ea:2a:d9:d3:0c:63:ae:11:ac:7d:e0:66:
         95:34:90:da:0b:86:8b:36:7a:89:40:af:ce:e7:32:8f:b5:32:
         c9:b6:f7:f8:26:a8:18:a4:79:d2:ad:d1:25:70:f5:b6:0e:2b:
         e6:55:0e:48:28:4f:96:02:f3:64:56:6d:2a:8f:00:1e:0b:b8:
         9f:f4:02:99:ae:31:f9:40:eb:09:e5:1f:f5:6a:86:b0:bc:39:
         27:1f:6b:15:eb:41:35:50:1e:f2:9e:04:b3:27:8a:eb:59:b6:
         af:59:fd:d9:e2:9b:ae:20:d8:b2:7c:32:ee:99:c7:fe:a8:2a:
         ed:f6:e8:17:60:30:27:be:87:e7:5a:1b:15:e1:87:3f:bd:99:
         ea:80:0f:15:49:21:0b:39:9e:88:63:4c:94:e6:10:5a:b3:b8:
         aa:7b:08:c2:0b:f3:b1:9d:f1:fa:72:e5:97:bd:1a:9c:36:60:
         bc:d5:a5:38:0a:ea:39:ec:8e:c8:7a:9e:22:00:84:4a:ca:88:
         9d:db:6e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:54:34 2026 by rpki-client