Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/47e8f717-7151-3c37-9dd9-d36776a8d44d.roa
File:                     47e8f717-7151-3c37-9dd9-d36776a8d44d.roa (raw, json)
Hash identifier:          yH+Q615jKeXFHHSh0Y8kdHBrt9TJfFcSEpD/eOu99wg=
Subject key identifier:   AC:3C:A2:E9:4D:0E:29:E3:C8:88:19:EA:E6:00:DA:C8:CB:54:0A:FA
Certificate issuer:       /CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d
Certificate serial:       010D0C9F4328584EEF741F72BD103D5AB3C72680
Authority key identifier: 34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/47e8f717-7151-3c37-9dd9-d36776a8d44d.roa
Signing time:             Sun 23 Aug 2026 19:20:41 +0000
ROA not before:           Sun 23 Aug 2026 19:20:41 +0000
ROA not after:            Sat 21 Nov 2026 20:20:41 +0000
asID:                     0
IP address blocks:        149.112.81.0/24 maxlen: 24
                          149.112.82.0/24 maxlen: 24
                          2001:504:136::/48 maxlen: 48
                          2001:504:137::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ef:74:1f:72:bd:10:3d:5a:b3:c7:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d
        Validity
            Not Before: Aug 23 19:20:41 2026 GMT
            Not After : Nov 21 20:20:41 2026 GMT
        Subject: CN=eaef6db1-7366-499f-a070-5e483f7ead86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:b3:ce:57:85:22:80:32:58:9b:a7:2f:74:
                    11:ae:f3:39:06:f9:9c:cc:e7:69:04:ed:15:9a:d2:
                    6d:ed:9b:4b:1c:5e:3a:9e:60:ee:41:ae:5b:83:f0:
                    f1:f9:0e:21:3d:db:d1:16:4f:f9:dd:91:5c:9a:8b:
                    c7:7a:fe:05:18:2f:48:56:a4:74:93:be:05:9b:8c:
                    b7:cd:96:f5:f5:4d:7e:89:b1:9e:98:9c:c6:58:11:
                    b9:ac:34:12:53:88:77:6a:52:c8:7b:dc:21:6c:bd:
                    88:3f:a3:df:3d:0c:17:eb:2c:ce:16:46:5c:b9:46:
                    42:4b:71:01:e4:f5:98:7e:97:ff:9c:62:47:aa:60:
                    6a:e1:ea:97:1f:c0:fc:7c:f0:e3:d5:63:f0:c5:9b:
                    91:9d:6a:c5:9e:e2:89:46:56:3b:6c:40:11:b5:e6:
                    54:31:22:c3:9a:1b:88:90:bb:7d:96:b8:68:d5:6b:
                    16:43:85:47:21:2b:f5:eb:72:9d:b8:36:74:b1:e4:
                    7e:5f:e6:4c:87:d0:74:49:f7:1f:01:f5:e1:80:7a:
                    fc:7e:a5:3a:08:4c:a1:c8:7c:60:2e:8a:40:3f:a1:
                    56:a9:84:ca:76:bd:c4:fa:ad:58:e6:66:04:cd:02:
                    35:40:5b:f3:0c:f5:d3:8e:09:31:10:b8:b7:a3:e0:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3C:A2:E9:4D:0E:29:E3:C8:88:19:EA:E6:00:DA:C8:CB:54:0A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/47e8f717-7151-3c37-9dd9-d36776a8d44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl

            X509v3 Authority Key Identifier:
                keyid:34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.81.0-149.112.82.255
                IPv6:
                  2001:504:136::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:88:58:f9:56:7e:95:00:a4:ce:99:93:8c:52:bf:35:de:
         43:0c:b9:ad:da:92:b2:94:0b:b7:fd:fb:31:60:24:e0:eb:2f:
         3d:9b:3c:ec:e3:84:98:59:c7:47:a2:3f:31:5b:22:75:0a:36:
         fd:a9:17:e6:4b:99:6e:a4:05:0e:29:a6:b0:b3:8c:e2:bb:75:
         f3:18:b8:78:92:73:af:a3:ae:c2:16:27:76:11:65:6a:86:cb:
         71:b6:e2:63:e9:21:5d:52:d6:11:c6:a7:0c:2f:6c:f4:b4:b9:
         a5:dd:9f:c2:c3:86:5e:8b:83:68:6d:f9:08:77:19:ed:3c:9f:
         11:29:4f:98:af:18:49:cc:96:38:d9:3f:ac:46:e6:ce:eb:3f:
         5b:30:2b:7f:5f:13:4e:2e:43:cb:09:9e:2a:0f:25:b8:68:db:
         9a:83:7d:76:52:b6:c4:93:08:06:00:d4:eb:45:3d:2d:15:d7:
         a2:f7:27:df:a7:de:4a:15:14:05:1c:f8:05:3f:dd:b8:3c:00:
         b2:a1:7c:e3:dc:5d:d5:c7:4e:a2:ad:09:ea:bc:1b:b2:ee:6d:
         09:1e:d7:dd:9b:2a:a1:47:81:42:e9:b7:1e:05:cd:32:87:ed:
         59:d4:4c:c2:ae:59:25:e8:89:32:65:99:c5:09:7a:c7:07:cc:
         21:d5:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:34 2026 by rpki-client