Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa
File:                     0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa (raw, json)
Hash identifier:          TY5w3tOFDJXLg1u2lAGv4LTUR6kyU790PSvs4ddOKkQ=
Subject key identifier:   45:1E:4A:9C:99:A2:C7:AD:EE:28:C8:B0:2E:83:DB:E8:D6:AC:46:03
Certificate issuer:       /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial:       010D0C9F4328584EFE12193E0465CE13B88F69C0
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     23467
IP address blocks:        162.247.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:19:3e:04:65:ce:13:b8:8f:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=a7335a93-a52f-4ca1-8a99-debdcba0087f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:3e:a5:44:d6:79:90:6c:5c:69:1b:f0:0e:
                    88:ac:5d:ee:4c:e3:cf:03:8f:44:97:e3:3d:04:dd:
                    94:7b:96:24:21:67:a3:eb:a3:b6:35:b5:d3:59:e3:
                    2c:7d:21:3e:bf:fc:a0:03:88:08:66:b7:5e:8c:e1:
                    79:54:96:c7:d6:30:0e:36:b6:26:37:01:e6:46:68:
                    cc:8f:8b:a1:44:da:ce:27:c0:5e:1d:ce:9c:10:eb:
                    0f:13:4c:02:89:80:01:de:26:19:d1:5c:f9:36:76:
                    77:0a:a2:dc:48:93:9f:56:59:6b:5e:87:87:a9:dd:
                    1d:0d:ab:3e:2a:d6:2e:dd:c0:30:9b:93:f9:75:0b:
                    be:8a:ec:ea:43:63:01:fc:6a:99:8c:ce:95:b5:c5:
                    3a:f8:c7:da:68:cf:45:2d:10:ad:6f:43:1b:c0:5b:
                    39:7a:e9:47:61:48:56:94:de:d4:41:7e:ca:f2:51:
                    f3:8b:60:68:7f:f1:76:4f:e4:54:64:7b:eb:50:14:
                    32:70:db:09:6e:8c:75:19:12:9b:c6:0a:13:5b:9d:
                    ff:87:b0:31:d2:e3:f7:10:8d:e7:ef:ba:a0:2e:b8:
                    be:41:3d:3b:69:17:97:9c:4c:39:ed:44:c9:9f:13:
                    ac:db:9b:51:37:63:71:c9:a5:e4:58:00:54:fd:31:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1E:4A:9C:99:A2:C7:AD:EE:28:C8:B0:2E:83:DB:E8:D6:AC:46:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl

            X509v3 Authority Key Identifier:
                keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:37:d3:ec:18:3e:08:c0:0c:a6:ea:59:24:1e:a9:a9:b3:
         52:df:13:70:d5:16:9b:05:f0:a2:a1:8a:75:75:96:e8:72:d2:
         69:31:56:74:b9:96:e4:8b:c4:a4:9f:37:2e:c3:55:87:93:82:
         73:b2:cf:f6:d5:51:79:85:f5:45:67:cf:f2:ed:45:c9:1c:44:
         de:79:6f:dd:64:72:ef:0f:4a:5f:7f:e4:49:27:79:3a:33:07:
         1c:db:1d:34:da:c2:06:c0:94:08:67:8b:4f:23:35:59:85:98:
         89:12:ef:75:09:49:9e:b6:2a:dd:04:86:95:c4:f3:99:39:70:
         89:e8:6f:a2:5b:29:9e:e7:79:ad:01:31:64:74:29:51:c2:f5:
         88:18:5c:7c:4e:5b:49:b6:1b:68:5a:78:e0:ea:65:26:84:e5:
         39:19:bf:a8:98:6f:97:87:ac:ef:6e:e4:9e:91:09:03:ce:96:
         64:18:2e:87:4a:61:df:64:80:61:ad:68:ee:1b:3e:59:4c:d8:
         e8:9a:8d:af:80:69:5e:e9:bb:55:d5:0f:f5:1e:f9:b3:1d:90:
         17:5c:a0:10:78:b6:ef:44:63:ff:4f:df:bc:5d:f0:49:4e:2d:
         24:61:90:b6:73:e5:52:fc:e3:67:ba:9f:91:e0:f3:57:b2:c4:
         c7:65:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:48:25 2026 by rpki-client