Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
File:                     d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa (raw, json)
Hash identifier:          JTgCI1w36Y9f0YopwceRjNRxjVBGSWpjp8rwypA47gE=
Subject key identifier:   EC:D3:BD:C2:BE:58:90:E8:03:32:4E:1E:9E:1D:A3:A0:AE:59:B6:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A9CD6B25E562099E56820
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        141.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:9c:d6:b2:5e:56:20:99:e5:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=b0928d06-6968-4388-8066-1ba49e9f5c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:c5:3d:3f:7e:90:29:02:c2:0a:04:4b:c0:
                    a6:6c:bc:82:59:ed:0f:97:e4:21:b2:c1:33:78:07:
                    02:cf:dd:97:b7:48:75:69:f7:72:db:a2:9b:51:99:
                    87:c0:fc:19:5f:6b:6b:c9:ea:20:29:d7:c0:d5:e1:
                    74:04:37:47:09:54:21:22:63:b4:2c:c6:3b:09:92:
                    b0:17:5f:db:42:f7:54:ce:5d:c8:4f:15:89:9d:67:
                    2a:87:83:13:dd:af:4a:13:2f:bf:57:01:c6:b7:8d:
                    39:e0:f8:a8:01:39:15:37:66:b6:a7:6f:26:e0:d7:
                    06:9f:86:66:70:6a:d4:b5:75:ca:d8:1f:ef:dd:f8:
                    55:d9:25:99:0a:f5:f5:ce:4c:6f:1c:6f:12:2e:bf:
                    d1:75:91:7c:ee:d7:4c:c8:8f:76:fb:67:05:2b:80:
                    70:e0:87:22:b9:12:58:65:ab:6e:5f:ff:2e:11:34:
                    17:78:dd:39:76:4f:91:66:52:ca:97:d1:32:01:d1:
                    fc:f6:0c:e3:7e:a4:47:14:af:7f:ab:64:4f:be:28:
                    3e:93:a5:04:a7:a7:05:ba:96:1f:b6:dd:69:cd:89:
                    59:be:9c:0f:f0:4b:89:93:49:1d:8f:8b:77:24:81:
                    88:88:64:4f:21:93:75:64:34:e2:80:0b:fc:7e:2f:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D3:BD:C2:BE:58:90:E8:03:32:4E:1E:9E:1D:A3:A0:AE:59:B6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cb:91:b6:2f:45:bb:66:f6:1b:33:6d:37:0a:7b:73:e9:15:
         18:53:ab:fc:73:1f:f0:a3:46:98:01:68:01:70:d9:a7:32:af:
         50:b1:c5:7a:17:34:f3:88:7a:de:66:27:f1:86:d0:78:c9:9f:
         a8:63:dc:e3:7b:4a:4c:cc:9c:24:27:d5:be:7a:05:98:fe:e2:
         7e:a0:6e:06:99:e6:cb:a2:87:51:28:99:ee:db:db:8b:9d:74:
         c4:76:73:2a:5f:b9:2a:06:26:4f:a8:36:16:02:e9:b3:f5:b7:
         8e:e4:93:b9:40:b4:b7:68:3d:da:63:0a:72:65:55:88:0a:70:
         d6:fd:61:33:9c:9a:2c:f4:7a:6b:45:99:17:21:64:cb:c3:52:
         38:c0:8c:97:af:cb:1f:63:ea:a1:0f:fb:64:b4:c3:62:f0:67:
         ef:60:dc:f1:e2:6b:ea:d1:7b:3a:23:93:25:61:ad:c3:52:f6:
         99:9e:ee:b3:e8:0d:7f:c9:48:b7:5d:b9:20:e8:64:52:42:19:
         0d:7b:cd:38:d7:67:a3:94:3e:4d:10:46:85:23:cd:c5:5e:f8:
         6e:1b:2c:d1:1b:9e:17:3f:f7:2f:98:5f:18:3a:64:60:06:63:
         c2:78:de:3b:0a:f8:c7:f8:c2:3d:05:54:ed:65:24:a2:f0:54:
         ce:d1:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:55:50 2026 by rpki-client