Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/221d4009-e4fe-36b1-bd99-7aa341393667.roa
File:                     221d4009-e4fe-36b1-bd99-7aa341393667.roa (raw, json)
Hash identifier:          k3A+9//mrol3duZPkskO3+bIjWWzPAEYq3JPzG2+N/c=
Subject key identifier:   86:7E:84:81:1F:5A:D0:B6:BD:2B:2E:8A:C8:32:F6:9B:F5:27:07:DF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E2AF6AAB473C20B6CD680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/221d4009-e4fe-36b1-bd99-7aa341393667.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     19115
IP address blocks:        47.3.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:2a:f6:aa:b4:73:c2:0b:6c:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=285852a3-a73c-499a-bc20-9cec9d15671b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:c7:10:56:0f:a0:16:9d:b2:9d:13:84:56:
                    ec:f4:e6:48:f2:1c:89:f6:7f:95:d9:84:d1:6b:50:
                    36:cf:0f:d7:46:51:b6:2b:c7:5b:58:ab:af:d5:19:
                    ac:22:37:79:46:17:55:ab:59:5e:7a:c7:93:53:d2:
                    d7:05:22:29:87:76:fa:36:f6:20:e9:8a:88:bd:a1:
                    20:06:3f:b9:47:66:f2:90:e0:1d:b9:a0:c6:98:25:
                    6a:c7:aa:38:ae:d3:93:88:10:05:88:63:9d:85:60:
                    75:fe:27:5c:4f:58:14:60:72:af:ac:d9:fd:36:18:
                    31:3c:ba:26:6b:73:ad:0c:13:11:f5:48:9c:97:e2:
                    2b:63:3d:1f:27:a7:78:85:e9:06:f4:33:43:45:8c:
                    05:45:80:34:55:bf:8c:d1:43:69:db:d6:3d:13:30:
                    54:f0:5d:60:a3:75:94:47:70:14:7f:b8:72:e1:bf:
                    96:ed:e3:f3:68:33:68:06:04:08:a1:5c:cc:ac:bb:
                    f6:54:b4:2b:3b:b3:f8:3c:24:db:cd:00:9d:7f:6e:
                    77:27:ea:f0:d4:9d:60:46:19:12:49:e6:4b:2d:35:
                    5a:fa:74:85:cd:bf:f4:71:ed:c8:07:57:26:fc:1d:
                    c0:7e:ba:8b:56:e2:2c:78:57:c5:80:69:26:02:7a:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7E:84:81:1F:5A:D0:B6:BD:2B:2E:8A:C8:32:F6:9B:F5:27:07:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/221d4009-e4fe-36b1-bd99-7aa341393667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.3.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:c2:39:db:7a:ef:19:9e:90:b8:8c:d5:2f:01:ed:46:26:
         40:b2:b4:68:71:bf:0e:f5:74:44:b0:57:55:1b:86:ef:15:d4:
         cc:63:6b:8c:69:1a:6d:4f:d1:be:9d:d0:ac:90:1c:20:ee:d0:
         8c:3b:1d:26:20:27:e3:fb:ab:29:6f:ab:3b:9f:b2:20:85:75:
         06:5b:dd:bc:c5:f1:29:2d:55:c1:de:79:a2:ea:5e:c8:b2:44:
         16:0d:4f:51:af:bc:09:d6:79:c5:f7:d3:e1:b4:a1:ae:91:6f:
         bc:ba:e0:11:98:23:b0:c7:29:a8:b6:84:de:09:c9:1f:50:06:
         d3:d5:b3:35:30:0d:c8:30:22:e0:4d:73:b4:f2:46:a9:8c:e2:
         21:32:75:14:12:a1:80:aa:14:c5:91:44:97:c5:fa:b7:aa:e4:
         8c:ae:f0:02:9e:3a:95:7c:e4:57:40:91:19:50:79:fa:3b:a2:
         df:55:dd:71:35:9a:34:2b:a9:b8:b1:76:c5:15:a6:07:65:60:
         3b:53:f3:3c:64:08:6d:29:0a:16:cf:ea:64:cc:3c:d8:5b:cc:
         9b:07:1a:66:6e:ee:d9:aa:65:da:55:14:e0:b5:d1:fb:84:0d:
         c2:a8:93:86:ea:fc:8a:8a:ac:b3:3a:96:5f:93:dd:5e:71:aa:
         12:d8:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:42:50 2026 by rpki-client