Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa
File:                     958db347-b590-339b-ac95-b832c056324d.roa (raw, json)
Hash identifier:          BD/MimvvfTqoUy1yHdTl/reZ97xu80LM8Vj8Q452jcM=
Subject key identifier:   41:47:F1:DC:3A:AF:39:E8:17:FE:5E:AC:0C:0F:BF:BF:A4:29:51:96
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584F305271DC36D42E7F69F5D180
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     27604
IP address blocks:        147.72.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:71:dc:36:d4:2e:7f:69:f5:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=912539f6-7685-4ac9-b1c8-e5687536f189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:b4:d4:84:33:49:ff:1c:ac:e7:7e:c2:31:
                    14:91:18:0f:63:68:6f:6c:70:b2:cd:83:0f:ab:28:
                    be:c2:21:3b:66:f8:3f:01:bf:ab:4b:49:1a:51:7d:
                    ae:dd:f7:72:46:cf:99:86:e6:60:a5:f1:bd:b4:a9:
                    dd:08:da:14:8d:62:13:0f:33:8f:a5:db:68:1c:4d:
                    a5:a1:21:5e:99:ca:38:d1:f8:35:52:2f:5d:e6:dc:
                    b0:07:31:a2:5f:f6:e1:d7:e0:8c:0c:b9:08:7e:44:
                    99:56:36:52:34:d3:07:92:f9:78:39:ad:3b:a6:bf:
                    34:7f:49:1d:c6:6f:3b:93:ac:54:c4:2b:03:21:40:
                    2d:2c:a9:48:cc:97:f9:3a:19:d8:f1:c2:11:e3:41:
                    82:27:93:83:33:c2:22:29:52:ff:36:26:a6:e4:0d:
                    70:63:5b:ca:a2:8c:61:f4:a2:6b:a6:8c:22:26:f6:
                    02:4c:75:83:ca:61:5f:ba:20:32:90:97:a9:66:f4:
                    d2:e6:eb:9b:f4:7e:f2:5d:eb:26:46:18:ba:4a:ec:
                    e1:92:18:10:5c:9c:22:8c:55:c8:84:45:81:a2:e5:
                    57:27:1d:0a:ac:70:a8:4e:c3:af:31:b5:bb:55:4e:
                    76:69:7c:5d:21:ad:9f:8a:9d:74:cf:37:ca:19:b2:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:47:F1:DC:3A:AF:39:E8:17:FE:5E:AC:0C:0F:BF:BF:A4:29:51:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.72.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:19:9b:8c:c4:8e:cb:af:f3:cb:78:81:8a:94:16:0e:8f:34:
         7c:90:c9:7c:f2:df:df:03:a7:cc:b7:32:89:e9:2a:9a:ba:2f:
         f8:fc:6b:ca:db:3d:e4:b9:ed:5d:fc:3b:fc:e3:6c:6d:e0:03:
         89:03:f6:40:53:65:e7:a8:0b:34:e1:c6:ea:7c:70:69:61:fc:
         0e:29:06:3a:08:77:89:bb:41:80:c6:95:9c:85:ef:b0:b0:2e:
         a7:01:a2:6f:1e:16:f9:df:2c:25:aa:ba:fc:95:22:85:70:bb:
         d9:31:31:95:4a:ed:ee:37:0e:cd:39:22:7e:5e:de:7f:e8:b8:
         84:ae:f3:2a:76:a9:1c:06:4b:a4:28:2e:75:8f:ac:14:eb:a9:
         88:74:ad:73:00:6e:ce:50:b2:44:ad:90:39:df:3f:5c:43:7f:
         6a:15:2a:33:50:b2:29:95:ad:86:12:f5:b3:ce:95:a4:d9:7f:
         fc:36:0b:ee:ca:1e:5e:ce:ea:fc:fc:99:c7:2a:b7:b7:7d:4b:
         b4:eb:ad:58:04:27:f4:83:45:71:9f:04:fe:bd:fa:f3:1f:7c:
         54:65:09:c6:53:01:7d:51:44:ad:44:9e:b4:d5:e7:ce:fd:42:
         df:55:6b:7b:28:17:71:86:4e:7b:4d:89:7b:a3:4a:63:dd:be:
         45:fb:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:57:33 2026 by rpki-client