Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa
File:                     7ee28a40-8cc6-3784-ab6c-7741c7816572.roa (raw, json)
Hash identifier:          IBJ4+hwyLfuzSO+iKfM5y90IP0GgQU4zQv2DotYJXQo=
Subject key identifier:   46:9E:10:16:E3:9B:F0:4C:C5:29:53:72:D2:D7:7F:11:03:60:89:02
Certificate issuer:       /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Certificate serial:       010D0C9F4328584EA2DFC90068D9ED0414B246E0
Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     396982
IP address blocks:        142.249.47.0/24 maxlen: 24
                          2620:ce:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c9:00:68:d9:ed:04:14:b2:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=709fec57-4280-40f0-8676-30d4243b3e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:3e:5a:2b:54:4e:e3:3e:7a:fc:19:dc:99:
                    27:68:bc:42:2e:97:d3:e4:6c:99:17:12:8f:ad:8d:
                    e8:3a:bb:8f:90:1f:f7:b4:dc:4a:63:60:a2:0a:cd:
                    b3:31:56:72:31:03:51:fd:32:8a:6b:55:03:34:86:
                    dd:0a:66:f6:f8:c3:7b:ef:64:af:20:bb:9f:ed:0f:
                    39:7e:73:80:b7:0d:5d:ba:75:20:f1:f0:77:66:6c:
                    53:d1:c6:ae:3e:02:ef:50:f9:05:49:1d:69:5d:ad:
                    54:35:a6:ef:71:10:85:5d:28:c5:17:86:8d:9a:7e:
                    69:14:db:de:13:fc:d8:18:fd:4d:b8:98:5f:e0:9a:
                    84:7c:44:f8:9a:09:eb:d1:93:8e:db:ca:bd:ec:b0:
                    8e:42:5d:b7:c6:dd:18:ca:5b:40:f0:4c:f4:aa:57:
                    97:fd:49:85:d1:d0:29:cf:e5:5b:49:1f:8b:68:19:
                    f9:34:f5:81:98:e5:dd:3b:2a:9c:81:6f:1d:c4:ca:
                    22:5e:9d:78:5a:3e:c4:d8:2f:91:e2:e5:ef:78:50:
                    5d:15:11:50:87:d8:39:53:82:36:4d:c3:2c:fb:c2:
                    0a:3c:2c:1c:1e:ab:12:ac:9b:05:ff:da:9f:48:0e:
                    c4:b2:9b:c8:85:73:73:fd:2d:4b:41:b1:28:95:5a:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9E:10:16:E3:9B:F0:4C:C5:29:53:72:D2:D7:7F:11:03:60:89:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl

            X509v3 Authority Key Identifier:
                keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.47.0/24
                IPv6:
                  2620:ce:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:fe:c5:77:cc:93:0b:c5:c0:6d:c2:ef:3a:c1:bc:05:e1:b8:
         bf:7f:9b:fd:f5:8f:1b:79:f0:62:49:75:8b:b6:d9:ff:14:61:
         30:78:8c:ae:9a:60:5e:b0:3a:50:55:cd:4d:ee:1e:95:f4:cc:
         45:0f:fa:ad:c9:ec:e9:0a:fb:66:cc:05:15:cd:bb:84:19:27:
         e6:62:f8:a5:c2:fe:0e:22:7a:2a:02:78:d6:f8:49:b0:52:b0:
         84:e4:fd:f2:00:da:4b:d6:a4:f9:5c:05:07:76:85:83:da:16:
         2f:57:fc:51:14:eb:5c:5c:2d:db:7b:84:c9:b3:71:ac:5a:5f:
         e1:72:3c:8e:d0:bf:c8:db:16:c5:cf:2d:ed:cd:00:1d:ee:54:
         13:0f:fb:0d:62:e1:36:69:7d:b1:dc:43:da:ec:59:e0:8b:38:
         d8:61:2a:02:bb:54:ba:b2:42:3b:63:bd:de:5c:08:56:2f:18:
         b8:f9:71:24:c1:d3:ed:ae:0c:ec:7d:2f:f7:1e:4f:e5:48:5a:
         fc:5a:b4:0d:7c:b7:f8:03:09:8b:c2:49:9d:1a:7e:c5:d1:94:
         b3:36:f3:ad:07:0e:94:43:fc:f3:bb:31:60:56:81:b7:04:f7:
         3e:b1:f1:6c:16:22:29:9b:39:b8:4f:4d:93:4a:ee:2a:99:6b:
         68:8b:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:35 2026 by rpki-client