Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0f6848e-8c76-3ea2-ad32-5458d0e1c5b5.roa
File:                     c0f6848e-8c76-3ea2-ad32-5458d0e1c5b5.roa (raw, json)
Hash identifier:          3AKIwtTwkhOoU4YlLJdps46+85t52PNJtNHLFhQzy6I=
Subject key identifier:   0C:62:5F:09:3F:95:AE:94:F1:A6:90:40:2D:C9:A9:09:8D:91:CD:DB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37202C6ED936D8656EDB700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0f6848e-8c76-3ea2-ad32-5458d0e1c5b5.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     19157
IP address blocks:        47.42.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:02:c6:ed:93:6d:86:56:ed:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=518c2a6c-312e-4c58-9338-41e07f0e1f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:94:a9:37:fe:50:9b:f3:8e:ef:1f:a1:95:
                    ce:8d:6c:22:f6:dc:dc:77:30:45:84:27:50:10:cf:
                    90:cd:93:63:e6:ea:d4:24:43:33:ed:95:09:bb:23:
                    fa:95:c4:03:f6:17:34:57:18:bc:27:49:cf:3d:ee:
                    e3:c6:49:ab:1c:c6:51:bb:34:84:87:eb:4e:32:fe:
                    78:43:80:86:91:23:89:0c:a2:1a:36:a3:39:dc:35:
                    18:99:3b:b0:64:d4:45:a1:50:84:39:06:ad:57:9e:
                    1c:d5:11:13:b4:64:24:2e:f6:05:5b:a5:e4:89:48:
                    64:91:a3:61:b1:76:25:ca:7f:f8:da:50:0e:5e:a1:
                    16:ae:99:01:46:b3:3c:94:cf:98:28:79:2f:b4:50:
                    ae:28:01:b4:a6:12:9b:d2:eb:0d:38:a1:2a:6f:7c:
                    88:65:f2:ac:4f:71:46:38:0c:b5:cb:d3:5e:ef:49:
                    47:8f:ff:36:a8:84:d9:96:ee:b1:15:de:b0:58:18:
                    15:3e:6b:e5:ae:61:18:3e:3a:98:ab:a3:8e:23:0b:
                    3a:9c:b3:8c:05:b8:ba:46:9f:06:42:5c:1e:00:fd:
                    d6:06:62:62:76:77:8f:9a:d4:9f:15:fd:80:a9:6d:
                    1d:8f:70:18:7e:f5:f1:d0:6f:e9:31:f5:2f:b4:ee:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:62:5F:09:3F:95:AE:94:F1:A6:90:40:2D:C9:A9:09:8D:91:CD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0f6848e-8c76-3ea2-ad32-5458d0e1c5b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.42.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:71:20:e9:35:c4:89:72:ca:7e:39:b4:73:01:8e:d8:cd:9a:
         fa:d0:0b:85:87:8c:01:87:86:9f:b2:27:96:4e:99:06:64:82:
         ac:45:1e:7a:20:94:7c:36:4d:fe:19:0b:80:69:77:b5:a5:bf:
         67:08:15:cb:2d:e4:4b:32:cd:c4:8d:aa:92:88:f0:b5:56:9b:
         95:49:af:e7:2d:d6:29:01:2b:ae:b6:3f:5c:05:80:94:31:fb:
         82:71:8c:7f:e9:38:27:30:86:52:56:b6:39:d8:66:ac:bd:0a:
         5d:e4:7a:9c:f7:bb:fb:9c:3a:e5:0b:0a:c1:9c:d4:dd:c7:ae:
         8b:4d:d6:de:88:b3:67:7a:86:9d:96:59:d6:3f:51:62:3b:6f:
         ad:86:85:05:c9:59:59:a3:81:02:b9:a8:ad:58:3c:f9:d1:90:
         dc:b4:45:6c:e1:30:f6:d5:e4:c9:0b:a2:a7:ba:78:e3:b5:58:
         21:a0:aa:c8:4f:1c:37:82:f7:14:c7:2d:c3:47:ee:d3:3f:5a:
         20:e1:ac:42:8e:da:f1:02:c9:4e:74:e5:f1:4e:b2:09:97:ed:
         b4:8f:d4:d5:4f:a2:d5:32:b6:bc:61:8a:2f:f6:49:2d:57:05:
         c1:3e:11:83:3e:92:13:59:6f:cc:f9:6b:69:e0:78:be:ae:ef:
         8d:7c:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:04 2026 by rpki-client