Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7f946da9-d718-3646-bb94-ea37bac0eefb.roa
File:                     7f946da9-d718-3646-bb94-ea37bac0eefb.roa (raw, json)
Hash identifier:          4N7ui7pMSrKkaiqyKRpoFrbiJaXtf9FBOI999AJbZyE=
Subject key identifier:   4A:60:25:EA:2A:B6:BE:A7:24:63:B5:B9:62:36:C5:50:75:BE:CD:1C
Certificate issuer:       /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Certificate serial:       010D0C9F4328584F024218A872FABC4A722C73C0
Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7f946da9-d718-3646-bb94-ea37bac0eefb.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     401935
IP address blocks:        142.249.47.0/24 maxlen: 24
                          2620:ce:e000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:18:a8:72:fa:bc:4a:72:2c:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=0d558035-06dc-497d-9ee7-f5bb31d62d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1f:be:51:f8:6a:b0:76:99:08:3d:b3:51:b8:
                    46:2d:a7:d8:db:2b:a0:f1:42:80:56:05:7a:77:e9:
                    29:13:9a:20:1b:0b:9f:5b:e0:fe:cf:1d:3c:8c:ae:
                    20:d6:9c:86:ea:71:9e:79:30:a9:68:bc:df:84:ae:
                    a7:9b:8d:4b:f3:07:94:13:16:e5:c6:48:a3:e1:09:
                    2b:ab:6c:07:e7:15:0d:82:ff:b0:44:a3:c5:33:57:
                    01:11:11:21:e2:d4:bf:91:d7:31:24:85:65:42:de:
                    4b:76:a1:d1:a2:90:9b:ab:36:1d:37:5a:80:53:92:
                    76:4c:97:89:9c:5e:1a:b3:b9:36:8f:ba:56:e2:70:
                    b0:90:94:8e:92:7d:50:d1:2f:2a:39:4a:36:a5:ae:
                    51:30:57:ca:fa:3a:e2:26:aa:58:30:bd:ce:66:3f:
                    f2:3e:8f:2b:49:a5:26:ea:bb:16:1a:56:aa:8b:e9:
                    08:18:a3:20:c4:de:ba:97:c8:6a:25:9f:b9:0e:fa:
                    95:c9:d9:60:f8:43:ca:cc:23:1b:12:6a:bf:52:9c:
                    61:17:2c:49:e7:74:e4:2b:c2:53:e6:32:7b:c1:e4:
                    2c:9d:2c:c6:33:9f:9e:a8:98:fb:f3:d5:f0:54:ca:
                    38:b6:19:65:63:ae:7a:a7:7a:67:cb:c1:55:f6:8b:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:25:EA:2A:B6:BE:A7:24:63:B5:B9:62:36:C5:50:75:BE:CD:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7f946da9-d718-3646-bb94-ea37bac0eefb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl

            X509v3 Authority Key Identifier:
                keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.47.0/24
                IPv6:
                  2620:ce:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:73:d2:66:b8:e7:53:7f:de:7c:c3:af:48:eb:33:27:80:
         a7:30:54:52:65:ce:7a:c2:d4:d9:01:bf:ef:e8:e7:ca:a2:b2:
         cd:de:c7:b1:61:a0:be:54:22:10:8f:8a:a6:56:f0:34:31:34:
         26:a2:78:93:9c:ec:9f:de:a6:a5:49:64:4f:1a:0d:0b:58:f1:
         8c:81:b8:99:78:bb:57:64:21:38:3a:ce:7f:9c:6a:e1:83:4d:
         39:a3:5e:6d:e2:1e:7a:3f:86:aa:d0:a9:ab:70:7a:d7:45:39:
         2f:b2:de:2f:9a:c9:5a:26:7b:15:28:cf:6b:45:c7:3d:c2:3f:
         73:20:7e:fc:aa:43:e8:6c:9a:36:10:c0:e2:91:c9:4e:03:46:
         a1:82:b2:53:08:2e:9c:35:10:dc:d7:30:98:33:e8:d7:51:24:
         20:3a:87:e6:4b:fb:25:10:b4:2f:ef:41:ad:80:cc:b9:7d:a0:
         37:42:f1:3f:88:b9:42:06:e0:90:ea:eb:85:cd:23:59:0c:8a:
         04:1c:5d:f5:7b:10:b6:45:ed:b1:a5:cb:e3:78:be:39:d5:93:
         ac:7e:02:92:45:34:42:6e:8f:de:09:ff:1e:fe:6e:6a:e0:fc:
         72:a3:60:3e:68:40:40:54:06:0f:81:13:d5:ad:38:b6:72:a6:
         2a:c9:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:42:57 2026 by rpki-client