Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2ffb74d-ed99-3451-a40b-724a9688cf48.roa
File:                     d2ffb74d-ed99-3451-a40b-724a9688cf48.roa (raw, json)
Hash identifier:          sQiCLO946bkZ6Tvp2InUfmpRMdMaAV718os9M+9N8fA=
Subject key identifier:   36:F6:81:F2:35:98:A4:29:F1:22:73:98:B8:4F:12:EC:BE:D3:09:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F88F8E301633B38C1C1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2ffb74d-ed99-3451-a40b-724a9688cf48.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     22394
IP address blocks:        141.207.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:88:f8:e3:01:63:3b:38:c1:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ffe3474f-f55a-4086-aeed-dbf2bfdef468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:4e:72:66:91:e4:0a:f7:08:d7:b7:9f:86:
                    81:3a:c9:08:62:0d:cb:f4:f0:30:ae:9e:dd:90:05:
                    fb:45:cb:25:03:9e:14:13:e2:08:51:ba:d3:37:cd:
                    4f:3b:1f:9d:78:34:82:a4:ea:9f:02:c9:b4:17:8e:
                    b4:83:9f:92:d3:05:50:81:d1:f5:ca:7b:8e:e6:11:
                    80:c7:5f:d4:0d:59:10:8d:94:09:67:15:70:5a:31:
                    a7:c5:3d:8e:90:9c:aa:31:6d:1e:93:15:e1:da:e1:
                    4a:53:6a:05:c3:ba:0e:3c:81:29:8b:a1:a0:2e:85:
                    3a:3a:2b:3d:d6:55:73:ce:1f:7b:cc:39:1b:6d:f0:
                    58:ad:ff:8c:13:0a:e9:93:3e:c4:b1:ca:27:09:d2:
                    fd:ad:ca:0a:64:a9:9a:ec:dd:a0:a4:de:77:c0:1a:
                    b5:70:16:63:e3:5d:55:4a:06:f3:0f:58:0b:7a:1b:
                    fd:a1:ec:15:5c:ea:a7:fa:9e:62:3f:01:80:08:fa:
                    b5:73:82:ff:53:1f:78:59:b1:ca:ff:09:ef:57:5b:
                    38:f8:07:ff:10:33:34:cf:f4:6f:67:7b:59:19:f7:
                    69:b5:87:c0:28:65:57:bc:1d:0b:8d:1e:34:3c:9b:
                    af:8b:42:d9:9e:77:97:c5:33:73:09:fa:6d:bd:e0:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:81:F2:35:98:A4:29:F1:22:73:98:B8:4F:12:EC:BE:D3:09:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2ffb74d-ed99-3451-a40b-724a9688cf48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:2b:2a:fc:92:d0:17:61:a0:6e:23:1a:7f:bf:13:f9:fb:
         fc:be:eb:c0:26:a4:ea:ee:19:3f:08:57:eb:88:2d:85:46:13:
         70:db:e8:e9:d5:cd:20:24:57:51:df:2e:c8:86:38:da:a6:5f:
         cc:28:2e:fc:43:1e:09:d3:87:26:52:0a:41:31:32:73:90:a3:
         55:50:19:46:f3:6c:54:be:bf:b4:f9:4d:be:ee:45:af:ff:d4:
         94:c6:fa:76:63:9a:fe:bf:bf:c4:6a:a0:0f:52:d1:ce:ce:a1:
         81:ff:e1:5a:ce:8f:aa:c1:ff:07:da:14:df:c2:dd:c7:a8:c9:
         c4:2c:12:ff:52:8f:cd:19:47:b7:29:3f:3c:25:fa:b6:85:66:
         d9:c3:ce:9c:ac:1e:21:1a:b3:be:01:7c:af:d0:c3:93:b5:cb:
         0b:f3:29:71:fc:be:bb:38:a6:ad:34:d8:9f:c3:86:de:16:b9:
         35:0b:e4:fb:46:98:f0:a6:64:44:13:e1:83:94:4d:d4:50:42:
         a5:e6:96:ef:ce:8e:2f:bb:4e:19:84:35:47:d4:a9:ae:88:c8:
         a5:db:b8:91:02:a4:63:36:5f:83:ab:d5:3c:e2:8d:7d:76:ce:
         4e:7a:21:a8:65:c0:7e:7d:0a:34:d1:66:6d:e1:52:a5:b0:cd:
         7f:e3:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:45:58 2026 by rpki-client