Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c4a860-05f7-3cfb-b627-b7ec834ea71b.roa
File:                     d9c4a860-05f7-3cfb-b627-b7ec834ea71b.roa (raw, json)
Hash identifier:          WysHOoDiA659phyrw42lOZwmnjtYdtPYhbTTNhk6Sng=
Subject key identifier:   5F:AF:FD:C2:2D:0B:95:C0:F9:DB:E1:FA:F8:EF:25:88:41:CF:27:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F89A88D3BAD50C9251D2C7100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c4a860-05f7-3cfb-b627-b7ec834ea71b.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     5650
IP address blocks:        47.189.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:8d:3b:ad:50:c9:25:1d:2c:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=e34c041d-84d3-47a0-a80d-6e3ef7fd4fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:a5:9f:2b:f2:4c:ba:b9:53:1b:76:20:ae:
                    1e:03:ce:ab:43:4c:d7:fb:8d:97:06:e5:10:c2:6e:
                    f3:80:df:ff:e9:b3:f6:f4:3e:5f:1c:15:fc:e6:06:
                    53:e3:83:d8:5f:d3:08:dd:4c:73:60:ab:c9:7a:55:
                    9c:21:5c:74:d7:b4:78:c5:63:7d:a6:c2:77:d2:eb:
                    31:89:bf:54:1d:f4:78:09:37:24:25:d2:89:ef:f7:
                    88:2b:4d:a3:9f:91:fe:ef:aa:b9:02:f4:b3:a9:48:
                    ad:37:c8:3d:b1:a3:cc:d5:fa:7d:4f:26:b6:0f:38:
                    ac:1d:f4:a1:14:ce:4c:c9:01:1f:e7:68:e8:6a:b3:
                    71:e7:93:db:d1:48:1b:d6:d4:5a:f6:ee:63:f1:d6:
                    71:9c:ff:3f:c5:65:5f:6e:3b:a6:9b:11:f8:f5:32:
                    9b:a5:5a:25:3d:c9:ca:22:70:15:aa:f5:95:86:b2:
                    d1:ac:84:94:37:9b:66:41:63:aa:6b:d5:23:6c:ee:
                    27:93:9c:d1:73:fb:88:13:9f:05:de:35:f7:e8:1e:
                    11:cd:be:2b:a9:6a:e7:bf:5d:fc:29:49:29:da:93:
                    a9:3f:7d:e2:65:17:77:31:10:89:bc:fa:d3:f5:a6:
                    7d:35:e0:9c:6b:36:fc:39:31:68:a6:79:b1:12:02:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AF:FD:C2:2D:0B:95:C0:F9:DB:E1:FA:F8:EF:25:88:41:CF:27:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c4a860-05f7-3cfb-b627-b7ec834ea71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:96:64:00:33:cd:39:af:5b:c7:b7:da:32:46:d6:be:80:ae:
         fd:2d:be:01:f2:44:b2:5d:b9:80:1e:ea:9c:40:79:64:b3:ae:
         4b:9c:65:b7:89:09:f9:7d:f6:a6:d6:d6:a6:46:ef:9c:f9:89:
         25:7a:9d:62:36:35:10:a1:d5:0f:7e:90:08:76:f8:e9:87:67:
         6f:f8:59:ae:3a:72:2c:28:24:fc:5a:fc:81:27:8b:6c:f3:64:
         48:29:60:d4:c3:15:47:61:53:03:d1:81:00:45:e3:93:ce:32:
         81:84:11:d6:2d:b9:a8:55:5b:55:fb:a3:24:b5:c9:95:3a:63:
         d1:e8:3e:86:d0:b0:47:79:23:89:a6:24:42:c8:42:43:94:ea:
         d3:e7:6f:9f:c2:9b:85:07:f4:3b:28:85:cf:36:f4:c1:27:67:
         c1:33:57:d2:96:e6:07:9a:87:21:bf:12:e5:9e:81:f1:d2:fb:
         e8:31:9b:5a:db:40:e6:85:f4:92:82:ed:87:6f:a0:0b:b9:b1:
         cc:63:2c:d4:12:fa:c9:13:c0:2e:dd:54:1a:ea:52:9f:b0:e1:
         3a:c7:32:c4:4c:6d:fa:38:b2:72:76:2b:fb:65:4e:ee:13:56:
         2a:e1:f5:e7:80:b6:32:a3:b7:44:1d:e8:2a:0f:dd:90:5f:ff:
         63:f3:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:43:48 2026 by rpki-client