Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820dc8b2-22ef-338e-b879-a254dc87ee40.roa
File:                     820dc8b2-22ef-338e-b879-a254dc87ee40.roa (raw, json)
Hash identifier:          TN7J/b/eo9wb5+x5Zz24CS4dBipQeMV1l1k3TUWkPZM=
Subject key identifier:   39:E2:FB:B5:B8:50:43:4D:19:B9:20:F9:E1:30:5B:41:64:AA:2E:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A9C32738F7ACF8DB629C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820dc8b2-22ef-338e-b879-a254dc87ee40.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        151.202.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:9c:32:73:8f:7a:cf:8d:b6:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=71292bc7-7f2e-492e-9176-7b5923098bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:9c:cf:09:51:0f:08:ba:36:a1:85:d9:b8:
                    af:be:b8:da:e8:e8:97:bf:25:21:87:36:a5:41:ff:
                    76:71:54:a6:c1:dd:04:1f:15:37:9e:f9:18:8c:c2:
                    92:96:11:9c:76:91:28:04:50:20:90:3e:dd:41:7d:
                    94:ae:2c:16:cb:83:22:00:f9:40:e3:f1:f3:ed:ed:
                    07:a5:fe:b1:54:e5:06:eb:24:a3:1b:10:61:96:53:
                    f5:2c:04:60:ce:8d:d7:ab:1c:e0:e1:2a:a8:49:64:
                    86:04:4a:e2:34:cf:35:0e:6a:4f:80:6d:da:0c:cc:
                    ea:57:7b:d6:ed:0b:75:28:3e:ce:c6:5d:b1:50:37:
                    ed:5f:c9:e1:a1:d9:62:be:13:44:76:6d:db:dd:58:
                    98:ff:2b:f4:1d:1c:5b:62:1f:87:8d:65:8e:f3:e0:
                    22:b4:b7:9b:4f:fa:c2:17:74:a3:e2:12:7f:c1:e4:
                    dc:33:ee:5d:56:39:af:a2:3c:ee:12:09:a6:3d:26:
                    3f:4c:32:95:b5:6d:ff:3e:d7:03:e9:5f:aa:63:c4:
                    5e:d4:35:62:32:fe:04:49:86:47:c7:52:92:2c:ab:
                    9d:47:bb:54:a2:3c:29:5d:fc:ab:f5:db:b2:56:a6:
                    46:53:c2:19:41:cf:40:33:d7:2e:d6:97:03:3f:f1:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E2:FB:B5:B8:50:43:4D:19:B9:20:F9:E1:30:5B:41:64:AA:2E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820dc8b2-22ef-338e-b879-a254dc87ee40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.202.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:78:57:f8:eb:a2:41:9d:77:2d:ac:95:e3:9d:95:93:f0:
         6a:4f:29:8c:61:c6:2e:03:8f:51:bf:10:2d:a7:7b:68:89:cc:
         ee:a3:ac:27:f7:02:18:f0:86:60:57:5f:ee:f9:f7:f4:a8:05:
         ed:c5:d5:5d:79:87:b8:9a:b9:a1:0a:e0:52:66:05:f6:93:46:
         24:5a:04:a1:79:4a:e7:ba:4b:a5:ac:a8:11:b3:5a:7c:4a:fd:
         55:6b:1e:09:4c:c5:57:2f:4c:74:e1:05:49:05:4c:ac:ae:a1:
         a3:e5:b6:74:0f:d9:99:05:cb:8f:c8:09:11:ac:fb:51:b4:9c:
         0b:34:8b:0a:d1:15:54:76:df:d6:0e:14:52:e6:dc:c6:ac:39:
         c0:ed:43:06:c0:7e:6e:94:8b:54:fc:33:c8:bd:70:44:6a:16:
         0f:58:e8:fc:c6:c7:f6:ba:eb:ed:ab:71:76:d9:b7:62:98:98:
         8d:69:ba:65:2e:11:65:ba:6d:d9:f0:18:e1:f1:c8:d1:50:1a:
         ea:13:54:07:df:f6:b7:9d:a9:01:31:e8:f5:6c:12:4b:16:42:
         30:26:4f:4e:61:93:57:24:09:ac:dc:7c:53:da:7f:92:e2:7b:
         c3:7c:79:63:36:67:f5:81:3e:8a:61:a8:dc:84:63:68:06:b2:
         3c:39:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:54:47 2026 by rpki-client