Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4be1634-2f9f-34aa-8429-f4f4ded01943.roa
File:                     f4be1634-2f9f-34aa-8429-f4f4ded01943.roa (raw, json)
Hash identifier:          OeQTwKWv4kcoGKVAh+QN5ENeHVUQJ+kTiY8bs0s21Ss=
Subject key identifier:   9B:12:72:48:37:84:66:5F:44:C4:87:2E:67:8B:7D:F3:32:48:E6:66
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372888B6867CAB525D3CA98
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4be1634-2f9f-34aa-8429-f4f4ded01943.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        47.44.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:88:8b:68:67:ca:b5:25:d3:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=d62a7387-8e41-44aa-874b-794cbd2ab08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:f3:84:4b:5d:b6:b9:87:d2:16:2c:4e:3a:
                    6f:bb:18:c9:f5:3f:6c:fa:d4:07:79:24:8f:60:45:
                    ab:6e:5b:e4:21:c2:4d:28:b5:4f:1c:55:71:af:2f:
                    20:f2:89:eb:f4:f8:cf:23:5c:f5:ea:cc:80:1d:b5:
                    d2:0d:6f:fd:ba:ef:18:57:3d:92:b1:24:10:7c:5c:
                    41:e1:30:3c:7d:b5:5d:41:37:4d:60:81:a6:79:12:
                    2a:bb:11:1b:96:93:6f:29:57:4b:29:67:83:5b:c2:
                    90:2a:5c:28:53:a9:2c:70:f0:c2:e3:43:c7:17:2a:
                    96:21:eb:ea:f4:59:8d:bb:bd:b5:7f:ab:40:c2:48:
                    5b:26:80:af:90:c6:86:0f:29:0a:51:25:15:30:b0:
                    84:33:ec:f4:b1:e0:97:79:70:47:23:0e:3a:39:ee:
                    a3:a1:94:0a:17:e9:d1:fd:5b:66:c3:ea:66:0c:1a:
                    af:bc:5e:f1:93:ab:d5:6b:74:73:57:ec:97:73:ce:
                    2e:1e:ec:e7:1b:3b:7c:78:34:8d:46:fd:90:d8:e6:
                    f5:2b:28:16:b8:5d:db:32:03:b5:9c:67:2a:e6:60:
                    62:2d:7b:ea:f0:7e:c5:58:13:b3:1f:e7:5e:5c:f0:
                    3d:d6:e2:df:24:91:2a:e9:5a:4c:a8:e4:40:75:8c:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:12:72:48:37:84:66:5F:44:C4:87:2E:67:8B:7D:F3:32:48:E6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4be1634-2f9f-34aa-8429-f4f4ded01943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:19:a6:2d:6d:2b:f1:a6:2f:02:21:6a:d0:15:1b:61:50:a8:
         28:23:36:54:25:07:37:71:b9:12:6b:e7:0c:aa:88:27:91:a1:
         f9:e0:ba:95:fe:63:5f:52:6b:51:5e:16:68:bf:a7:2d:f4:63:
         c2:11:05:cd:5e:af:4c:eb:1e:49:9f:56:5f:54:83:b0:9f:66:
         5c:14:6a:84:86:c5:67:f9:5b:4b:ef:05:af:b6:34:24:57:fb:
         c5:66:4d:0a:b0:17:36:51:68:aa:a5:ab:5e:48:c8:95:1a:0f:
         ef:ae:ac:63:43:2b:de:32:3a:4f:fa:a1:2b:bb:46:22:97:d9:
         d5:bd:aa:38:ef:cb:ba:89:c1:2d:4b:d7:c2:8b:33:b5:b5:86:
         5e:15:16:d1:77:12:9c:7f:41:9d:c6:ca:ec:6a:84:a5:17:76:
         dc:69:de:b9:b9:77:e9:9b:f6:a1:e2:28:0c:18:a2:67:2e:5c:
         c4:20:ae:7d:7e:43:ef:c4:9a:94:99:25:5e:3a:63:96:c9:0e:
         71:51:90:2c:27:81:2b:6c:94:c9:9f:1d:3a:b8:00:b1:7b:2c:
         30:33:19:66:3e:23:7c:8a:6e:03:9e:ad:c0:c6:2a:84:41:53:
         69:bb:59:70:c8:65:d9:ee:e8:0e:0c:bf:5f:9c:5b:11:b4:11:
         d9:ae:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:18:57 2026 by rpki-client