Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e90da3b5-1e5b-31b6-a304-426657a8d731.roa
File:                     e90da3b5-1e5b-31b6-a304-426657a8d731.roa (raw, json)
Hash identifier:          ZdJY2wOzR/kWzczXRUQ1iGAcJ4YUCIwe0+4IC6QxA4k=
Subject key identifier:   4B:35:C5:FC:D8:CC:0A:6D:2B:C9:41:A6:FD:EB:CA:D6:39:95:8A:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4588EAD0AC953148C90170C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e90da3b5-1e5b-31b6-a304-426657a8d731.roa
Signing time:             Tue 23 Jun 2026 22:35:10 +0000
ROA not before:           Tue 23 Jun 2026 22:35:10 +0000
ROA not after:            Mon 21 Sep 2026 22:35:10 +0000
asID:                     5650
IP address blocks:        47.157.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:88:ea:d0:ac:95:31:48:c9:01:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 22:35:10 2026 GMT
            Not After : Sep 21 22:35:10 2026 GMT
        Subject: CN=5a3ec73a-d239-434d-8551-56e8863c5170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:3e:3e:16:55:16:c2:2b:4b:d5:5f:0c:a5:
                    59:2d:6d:a7:31:c5:0f:7e:11:08:43:d6:ac:11:ba:
                    72:d9:95:45:38:19:ab:9e:39:1b:c3:7f:55:2a:d6:
                    c2:d8:d2:ab:d3:d1:03:e7:8d:ed:ef:53:8c:1a:f3:
                    db:4b:e3:37:82:e9:83:81:22:b4:34:36:71:fd:16:
                    ce:7d:34:f4:7e:ff:22:72:a8:72:89:93:5a:ba:3d:
                    a4:23:4b:fe:ba:ff:fa:09:c2:dc:2d:7b:d3:c8:82:
                    09:9c:70:bc:b8:00:f9:6a:a9:6c:ce:8b:98:ba:ca:
                    b5:06:16:be:6e:ba:86:22:fd:35:00:be:54:68:b7:
                    a1:a4:46:1f:97:b5:e5:e7:70:98:0a:4a:78:da:47:
                    b8:ad:d3:f3:7c:23:08:21:9d:0b:d8:a9:15:95:2c:
                    c0:c6:fc:6d:aa:b3:e2:93:21:e9:b0:18:8c:c9:b2:
                    c1:3b:43:fb:a3:f1:46:3b:1c:85:93:c4:51:17:07:
                    e0:08:0a:3d:ff:03:2a:b9:40:c0:d0:33:30:4b:ab:
                    e9:ca:98:5d:a9:cb:f6:c6:9e:e8:77:e4:5f:35:1e:
                    a3:22:9b:4f:05:60:38:17:e4:15:d3:5f:a4:4d:fb:
                    18:de:71:58:b8:a1:da:2a:07:2e:9a:30:5d:5e:ac:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:35:C5:FC:D8:CC:0A:6D:2B:C9:41:A6:FD:EB:CA:D6:39:95:8A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e90da3b5-1e5b-31b6-a304-426657a8d731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:e7:6b:b9:b6:f3:1a:1a:37:43:2b:48:05:ff:52:cd:b9:
         72:d1:88:4a:61:6b:e5:08:39:a4:a4:2c:b4:a3:39:01:b7:58:
         77:26:9c:be:25:66:36:0d:18:4d:92:21:2b:d9:b1:fc:c5:7b:
         49:b0:08:35:b3:fe:cb:2d:72:9e:a3:db:c1:7c:b0:8e:d6:c8:
         8d:95:c3:88:fc:c3:11:e0:97:c4:54:71:af:7f:b2:6b:8f:e1:
         ca:96:37:ef:4b:31:2d:eb:e3:83:15:0f:93:e2:03:4b:06:0a:
         45:7f:e4:4d:de:ae:7e:dd:8f:29:9f:b0:36:4f:db:73:33:23:
         05:4c:92:c0:29:71:10:e9:73:0d:19:75:bb:21:5c:88:5e:b2:
         46:78:1c:92:02:97:6e:4b:97:0c:e1:8a:0c:a4:3f:45:2b:a8:
         2c:55:53:00:ec:a4:62:dc:84:55:0d:d9:c3:cf:5e:a3:ea:39:
         44:6b:d2:dd:d6:ff:98:8b:b6:ba:07:a5:ba:f9:a6:64:e0:ea:
         7f:a7:bc:70:6f:50:dc:0d:5a:ad:55:df:26:08:b6:a7:5b:94:
         4a:6c:2a:bb:2c:98:3a:7f:d7:de:b0:e0:9d:b8:bd:a9:16:93:
         20:b3:c4:5e:01:1a:da:70:12:8d:4a:18:72:42:62:cb:03:b1:
         b4:b0:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:54 2026 by rpki-client