Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6463bb65-67a5-31af-b15e-52ff8508ffe3.roa
File:                     6463bb65-67a5-31af-b15e-52ff8508ffe3.roa (raw, json)
Hash identifier:          XlhgnOGFmruQrR0j5LKkjrmsSXslpDHL2r5dB5tYmq8=
Subject key identifier:   B7:D5:D2:93:0B:4C:D8:09:44:AB:C9:ED:E3:1F:8B:70:B8:75:3E:50
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EEA9F68CEB5E1DD2872626180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6463bb65-67a5-31af-b15e-52ff8508ffe3.roa
Signing time:             Sat 22 Aug 2026 01:48:51 +0000
ROA not before:           Sat 22 Aug 2026 01:48:51 +0000
ROA not after:            Fri 20 Nov 2026 02:48:51 +0000
asID:                     31898
IP address blocks:        147.5.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:9f:68:ce:b5:e1:dd:28:72:62:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 22 01:48:51 2026 GMT
            Not After : Nov 20 02:48:51 2026 GMT
        Subject: CN=fa7f90b8-d1e9-4033-9a3c-1a543961d454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:bd:13:73:84:40:b0:f4:8e:90:a6:32:3e:
                    5d:7c:59:d3:5a:be:17:c4:62:1a:63:fd:17:a4:06:
                    5f:d9:3f:a5:14:44:fc:13:e0:a7:f5:8f:1d:98:27:
                    47:21:54:84:15:38:b1:98:2f:03:17:69:f3:e6:92:
                    00:52:dc:3b:0a:0f:9c:0f:ba:47:f7:18:3f:42:12:
                    71:47:cb:53:3c:6d:2d:c9:84:61:da:8e:84:d1:ab:
                    12:e0:b0:7d:d9:d9:a8:e4:93:82:02:c6:ac:d6:e6:
                    69:9f:3a:78:3f:17:6b:2f:09:89:8f:d6:6a:30:c9:
                    7a:43:45:8d:0c:11:63:27:52:d9:5b:cb:8b:53:d1:
                    62:9f:7c:2f:a7:07:7b:4c:81:1d:4e:71:4e:b2:b6:
                    ae:bc:24:94:cd:79:6a:dc:a9:38:27:d5:a8:07:11:
                    72:ca:38:50:2d:43:a3:7c:db:5a:e0:23:b5:c0:d6:
                    d4:72:40:aa:b6:d1:28:d4:23:6d:75:9f:18:00:c9:
                    4b:ff:e8:c8:78:32:59:b1:87:d5:88:83:b1:16:95:
                    c6:bc:df:f8:3d:09:0b:22:8e:0b:8c:35:d3:a3:c1:
                    bf:1f:88:8f:00:14:7c:43:70:b6:55:bb:46:e4:a8:
                    d6:fa:6b:75:66:b7:10:ca:6b:16:fc:31:25:47:ad:
                    f6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D5:D2:93:0B:4C:D8:09:44:AB:C9:ED:E3:1F:8B:70:B8:75:3E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6463bb65-67a5-31af-b15e-52ff8508ffe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.5.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:63:ee:a0:e4:00:3c:78:fb:3b:61:b0:97:c1:4f:77:35:95:
         3a:90:f1:ac:df:df:8e:3e:a9:16:35:6a:74:f1:4d:6f:0a:f8:
         d6:2b:40:03:2d:c7:1c:f3:0b:00:fc:15:76:e8:54:04:0a:19:
         9e:01:b0:77:94:87:fa:d7:77:a5:08:aa:5e:bb:05:ed:d9:4b:
         2f:75:21:eb:07:3f:f4:ba:1f:be:77:dc:6c:7e:74:e4:13:ef:
         ff:00:a3:8c:5d:80:e3:71:40:38:e3:91:a6:10:48:c9:66:7f:
         cb:e6:1b:8c:4b:5c:5b:e2:7a:21:77:18:d1:ef:ab:da:7e:75:
         83:9a:01:68:f7:3b:80:9a:7e:46:a1:0d:13:9f:49:24:fd:9e:
         45:f9:aa:bf:9a:b6:20:d3:0a:49:47:47:d5:28:71:2a:d9:94:
         93:93:d5:2d:85:e6:d9:14:1c:cd:fc:77:36:53:a7:c3:96:0c:
         57:34:71:9d:8f:63:79:7a:e6:63:76:43:d1:20:aa:4c:1f:9f:
         c1:43:d3:c9:bc:9b:31:ff:2a:43:29:c7:14:5a:64:56:e0:43:
         c4:10:ca:b1:1e:34:52:54:9d:e5:0e:6d:7d:d6:9b:2a:6a:bb:
         da:50:23:48:a9:b6:dc:94:ff:75:0b:fa:f5:e6:c8:19:f4:9a:
         92:5e:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:16:38 2026 by rpki-client