Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/23f7bfb6-0f56-31d5-b52f-241d76c78559.roa
File:                     23f7bfb6-0f56-31d5-b52f-241d76c78559.roa (raw, json)
Hash identifier:          6XhQSMbjK6kA4OO6+9wOy+EfpmJmgziL8LbhhiVxsmg=
Subject key identifier:   21:F5:A5:1D:49:C8:9F:35:B6:A7:56:C2:60:3D:E6:15:CC:F7:46:6C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D879B1675FA3E348F02396C4C
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/23f7bfb6-0f56-31d5-b52f-241d76c78559.roa
Signing time:             Thu 16 Apr 2026 21:48:11 +0000
ROA not before:           Thu 16 Apr 2026 21:48:11 +0000
ROA not after:            Wed 15 Jul 2026 21:48:11 +0000
asID:                     0
IP address blocks:        47.43.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:9b:16:75:fa:3e:34:8f:02:39:6c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 16 21:48:11 2026 GMT
            Not After : Jul 15 21:48:11 2026 GMT
        Subject: CN=02d33840-45e8-485c-b327-1240fe9466d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:30:de:55:2e:1c:60:a1:35:6e:0b:a5:7b:09:
                    48:2a:b5:dc:0d:d7:a9:9e:a8:3b:38:09:60:c8:d6:
                    de:bf:65:8e:b5:4b:a1:4b:29:9b:4e:41:bf:2d:3d:
                    7d:93:c3:fc:36:50:6b:48:7a:fc:36:aa:7e:44:d8:
                    62:0e:60:4e:f8:2d:cd:fd:2d:57:c7:70:43:a5:92:
                    cf:15:e1:7f:04:f8:13:f7:8a:3a:53:9f:df:40:30:
                    20:07:90:21:5b:9e:e0:48:45:ca:bc:53:d0:6a:2b:
                    f8:1f:96:a8:9a:6c:0d:6d:87:41:bb:e8:de:fa:40:
                    68:37:e2:b9:08:b5:31:15:d2:6b:ae:82:e5:1a:b2:
                    b7:e4:13:30:89:64:0a:a1:6f:c6:57:ca:a6:8c:9a:
                    da:67:d3:83:cb:78:80:f6:9c:4c:ef:6a:8c:1c:2d:
                    8a:8d:c7:75:6e:cf:4e:e9:4a:4c:49:cc:60:80:1d:
                    12:7d:13:54:09:1d:46:d0:19:27:95:49:b8:d0:24:
                    ab:1d:07:c9:c8:4c:26:b7:32:3c:e7:6f:9c:61:81:
                    69:4d:3a:39:a0:22:cb:27:de:94:21:56:10:12:40:
                    97:d1:b0:77:89:7c:c5:30:1e:09:ed:bb:60:e1:ac:
                    2a:14:b2:4b:7f:0c:d9:33:27:a6:f9:72:72:5f:2f:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F5:A5:1D:49:C8:9F:35:B6:A7:56:C2:60:3D:E6:15:CC:F7:46:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/23f7bfb6-0f56-31d5-b52f-241d76c78559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.43.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:86:bc:49:1d:bc:35:3d:60:ca:f9:fe:4e:f1:ed:d9:be:6a:
         e9:db:a8:ae:bc:36:dd:03:95:69:73:0c:52:86:1c:c4:10:eb:
         ce:55:ac:a7:b2:ad:0b:89:f8:db:99:4c:e5:91:7a:c3:a0:1b:
         b8:55:57:29:07:67:a9:33:b9:e7:1d:9f:0b:9f:8b:fb:6b:1d:
         f2:68:2a:b3:41:93:79:d9:5f:f3:72:3b:7d:a6:64:fd:43:f4:
         72:5d:33:65:8b:38:9a:d8:b8:5e:cf:bd:3b:b7:da:bf:3d:df:
         49:0d:f4:c5:56:b8:09:93:a6:30:9d:6f:a9:2a:85:a3:c2:f3:
         9e:85:db:c8:bf:c9:2e:b6:d4:99:16:1a:f9:e0:45:1a:ec:71:
         5f:d1:c9:19:16:39:a7:5c:e6:75:dc:62:8f:9e:a9:b2:6e:23:
         aa:b9:b2:e4:8d:44:4d:ac:b0:c4:24:05:2b:15:5c:eb:b5:37:
         51:e1:e3:53:df:37:8f:36:05:cc:29:ed:65:d4:b8:96:41:3d:
         b5:9f:9f:80:9c:fc:12:13:8a:00:4b:df:65:ca:44:e0:52:48:
         a4:26:b5:4e:83:90:61:9a:5d:af:5d:12:e7:1a:9d:7a:7a:8e:
         32:08:b1:ca:c2:45:29:fe:5b:93:09:5d:f1:15:53:30:ac:b2:
         8f:9c:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:05 2026 by rpki-client