Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0a716547-66e4-379a-9aee-6204e34478aa.roa
File:                     0a716547-66e4-379a-9aee-6204e34478aa.roa (raw, json)
Hash identifier:          JMX1Yc4n3TJqAfvH2/ddKkOYEjN7/NC2XmydJG9iygM=
Subject key identifier:   15:6F:9D:56:44:EE:42:B3:F1:2F:FE:D9:DB:42:C3:A9:9C:05:44:8A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DF7023320DF107AF22780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0a716547-66e4-379a-9aee-6204e34478aa.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     40294
IP address blocks:        47.43.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:f7:02:33:20:df:10:7a:f2:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=f5c1e441-675f-4baf-bf19-9c9e84bb0d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:c7:bf:e2:36:aa:3d:6e:7c:f3:0e:0e:18:
                    5b:2a:fd:38:de:c6:cf:7d:94:5f:27:7e:44:aa:de:
                    87:bb:8b:b7:f4:11:c6:eb:2f:57:4a:66:0a:8e:bd:
                    10:5e:52:57:76:b7:56:bf:47:fa:39:4a:01:a1:a5:
                    c9:ce:29:66:df:45:40:08:60:13:b9:e6:20:90:d1:
                    53:2c:9a:05:62:51:c1:57:e9:22:3b:af:d3:18:5c:
                    50:2f:54:6b:df:90:6a:3b:7b:ce:b0:61:60:01:bf:
                    6b:c1:c1:49:0b:14:72:45:0c:12:be:64:f5:dc:da:
                    ef:f6:79:69:a2:68:bb:c8:47:86:e2:8e:15:55:aa:
                    ae:55:9f:92:e4:d9:d2:67:d7:c1:0f:04:6f:9b:8a:
                    e0:d9:e1:b8:43:2b:29:8b:49:8b:42:3f:1e:ad:18:
                    57:cd:c9:57:c5:84:78:5d:93:63:92:3e:47:91:14:
                    b8:0a:70:5b:0b:17:6a:bf:f6:6b:c4:69:c4:e4:69:
                    56:1f:c9:da:3a:01:c7:e5:f4:61:0d:bd:dd:f7:f5:
                    b6:dd:dc:64:53:bc:57:a6:47:03:96:e1:01:29:38:
                    d6:95:59:b7:81:a3:d7:09:af:4b:f1:5e:e7:a8:61:
                    55:bb:20:49:ec:d7:bb:f8:f5:e7:47:b6:5e:a3:a6:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:9D:56:44:EE:42:B3:F1:2F:FE:D9:DB:42:C3:A9:9C:05:44:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0a716547-66e4-379a-9aee-6204e34478aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.43.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:86:f0:a1:37:44:2d:f4:03:c7:32:f5:1c:3a:af:af:ff:9e:
         d1:87:c3:a5:42:94:03:fb:73:72:58:77:4f:1f:c8:3e:d3:97:
         3b:48:b1:88:8d:47:6f:10:03:88:16:95:57:fd:c6:47:8f:b4:
         1b:c4:14:30:9d:04:b6:51:9e:70:18:4e:d0:82:6d:2c:14:16:
         e4:51:81:4b:a1:5c:b6:a0:ca:1b:34:ae:08:aa:98:df:4a:9e:
         32:db:bd:5f:e8:b7:ac:e0:87:cb:4d:87:3f:bd:b6:46:a4:42:
         68:49:25:4f:b6:35:3e:7f:32:60:58:6d:c0:f0:0d:36:74:9e:
         0d:8e:2e:25:ea:f1:9e:6c:e0:fa:97:d2:a4:51:09:3f:84:b8:
         53:0c:19:eb:98:13:bb:67:37:14:04:06:8c:27:dd:f0:97:c5:
         e4:b3:27:79:83:64:8d:40:cf:92:bd:86:d2:2c:35:6a:12:dc:
         a2:c7:40:0a:78:bc:9a:bc:89:54:8d:00:9b:a1:b5:ab:4b:ed:
         c9:62:d6:83:83:77:a0:55:42:9f:14:dc:3c:cc:e9:36:bd:46:
         c3:b1:60:28:d0:16:47:b8:17:af:72:80:41:b5:de:17:fa:92:
         85:d7:be:bf:4f:ea:59:c7:0f:d4:f1:f1:77:29:c6:46:9c:d5:
         07:a1:d6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:59:55 2026 by rpki-client