Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0f6848e-8c76-3ea2-ad32-5458d0e1c5b5.roa
File:                     c0f6848e-8c76-3ea2-ad32-5458d0e1c5b5.roa (raw, json)
Hash identifier:          s67VF0xtDAsX65bg/A2s4d9EF2kTtdFzWBqQSfqdf0M=
Subject key identifier:   58:C4:96:C3:A0:19:24:28:9E:00:5D:73:DB:3F:45:8E:23:66:69:B9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DBAC8D646A2A29F93D040
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0f6848e-8c76-3ea2-ad32-5458d0e1c5b5.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     19157
IP address blocks:        47.42.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:ba:c8:d6:46:a2:a2:9f:93:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=b805d2d2-0416-4351-bd42-987f02756c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:3e:b6:59:d5:20:f6:bd:70:46:3e:a5:38:
                    5c:14:5d:b7:14:96:90:e1:0b:65:69:0b:5f:db:20:
                    4d:39:59:fc:77:b0:cd:f1:b1:aa:4d:25:cc:49:97:
                    fd:32:10:90:2e:14:2a:1d:c6:aa:32:62:be:49:b5:
                    ac:4e:0a:06:39:f8:42:a8:bd:b7:32:32:a1:a0:fa:
                    a6:dd:89:83:5c:2c:2a:78:2d:9e:f8:c4:f5:7b:28:
                    ee:dc:85:3b:4a:1c:54:3a:db:05:c9:d9:35:cd:0d:
                    14:5c:3d:0b:ea:3f:06:46:8c:9d:73:c6:ff:f6:57:
                    c0:3f:b2:f8:bd:19:cd:1e:ff:b6:13:66:c0:c1:2e:
                    62:a6:af:10:ce:04:e3:52:22:2d:70:56:b5:c5:16:
                    0d:9e:5f:54:cf:d4:62:e9:38:54:3e:28:5d:b7:2e:
                    d2:04:67:af:37:52:8e:36:29:44:1d:d8:97:c0:5f:
                    81:4b:51:2c:fb:33:63:5b:ab:44:fe:7c:35:5c:78:
                    ed:bc:c5:3c:71:e7:de:dd:7a:24:31:6b:da:1b:05:
                    11:5f:ed:a8:fd:71:3c:d5:a8:33:fd:91:76:da:8b:
                    99:f2:91:b0:88:84:d1:cf:b0:4d:6c:98:f3:3f:6c:
                    c5:44:cb:9d:85:71:4f:59:4b:02:fc:12:49:0b:3b:
                    ad:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C4:96:C3:A0:19:24:28:9E:00:5D:73:DB:3F:45:8E:23:66:69:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0f6848e-8c76-3ea2-ad32-5458d0e1c5b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.42.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:83:25:97:55:ad:e5:06:c9:fe:ce:5d:dc:28:4c:29:17:92:
         f2:88:f7:7f:7d:91:8b:34:38:e1:0e:d8:73:87:91:88:5d:a3:
         e5:7e:2e:98:a3:4f:32:aa:9b:f2:03:e9:da:20:7c:7d:e0:95:
         ef:bf:fa:bb:4d:63:ea:3b:c1:a2:cc:ca:c1:e9:03:e5:2b:e4:
         01:8b:07:ec:17:3a:46:98:73:fd:c7:1d:a0:ff:38:2f:ad:4a:
         e3:7d:5a:b8:e5:f0:a8:db:1e:1f:cc:86:b7:0c:d8:69:d9:c1:
         83:03:c6:cb:f8:2f:10:91:f8:90:6d:e6:63:cb:f3:bd:24:08:
         3d:ad:35:f8:a8:5e:a5:3f:8a:1e:79:a8:42:4d:8a:87:d6:8a:
         18:fe:a5:ed:fb:d8:b5:da:c0:fa:1f:29:c8:64:12:3d:74:68:
         d7:4e:1d:8c:58:9d:8f:b6:7c:ff:f8:34:05:e9:06:5a:8e:80:
         a8:16:3f:37:de:51:ed:c0:f2:fc:06:7f:4b:5e:8b:da:d5:61:
         f0:b8:f9:4d:2a:28:fc:3d:41:c6:3e:37:c1:b4:45:9c:9c:45:
         7f:b3:1c:27:07:14:95:20:85:90:79:f2:f5:7d:f3:05:be:9c:
         ac:16:e7:f1:c3:5b:40:b2:e8:7b:8b:da:ac:9c:dc:93:fb:e4:
         01:8e:bf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:08:46 2026 by rpki-client