Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa
File:                     2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa (raw, json)
Hash identifier:          Sh7cN+Xd1UiSD3pyJ9PGBixRYLsnDXIEZQXIgeqMzjQ=
Subject key identifier:   F2:2D:57:C3:45:A8:D9:B8:5C:D4:F7:28:DE:91:83:09:B0:0F:C3:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD6B63266D95538FBDF338
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     701
IP address blocks:        141.150.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:6b:63:26:6d:95:53:8f:bd:f3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=6fd3bcb0-9b7b-420e-adc0-2c6816fd5b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:50:5c:e4:64:f7:63:88:41:4a:80:dc:93:
                    7d:4c:08:49:2b:90:c0:9b:ce:b3:a9:af:af:b8:f5:
                    e7:b4:c1:0e:c3:55:42:e9:60:5f:bd:05:1c:89:93:
                    6d:22:4b:93:81:db:be:5b:e2:4a:4c:07:63:5a:8a:
                    e9:f6:ca:99:45:be:f9:d2:7b:2f:61:59:94:90:26:
                    1e:c2:c3:5b:a6:3e:3d:e9:9a:c1:3a:6e:7c:1c:18:
                    94:42:6e:27:29:55:7f:21:26:bb:57:97:ad:08:2a:
                    74:1d:df:40:d9:c5:57:19:27:9c:e4:8e:d2:1f:bc:
                    5d:6a:1d:98:9f:1c:5a:c8:e7:cb:28:aa:eb:29:8d:
                    09:e9:47:e4:da:0d:2a:db:8f:39:72:7d:e1:85:1b:
                    72:79:de:19:2d:15:9b:d4:8d:b2:f2:af:e9:2e:d9:
                    5f:a3:c8:8a:cb:f4:21:25:ca:c3:3b:42:35:dc:60:
                    2e:35:21:9d:29:2b:a8:b8:96:0e:78:33:88:b1:1e:
                    8e:78:c6:19:6d:08:02:b8:0d:d8:b4:ef:24:70:53:
                    99:7b:69:09:c3:b4:dd:34:1f:db:5d:59:fc:71:5d:
                    8c:50:da:9f:00:4b:48:3d:54:c6:3c:33:70:7d:3c:
                    62:4e:aa:89:1a:f8:4b:dd:5a:89:e9:28:66:fd:d1:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:57:C3:45:A8:D9:B8:5C:D4:F7:28:DE:91:83:09:B0:0F:C3:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:68:e5:f3:23:d3:13:6e:33:44:6a:bc:c3:71:df:0c:3a:2a:
         bb:6a:38:c8:ca:2d:e3:6c:42:5e:3f:6f:3c:c8:5d:b4:ad:a1:
         97:df:d0:15:36:70:1a:6c:f6:84:2d:d7:93:ce:af:5b:23:74:
         db:5f:75:aa:6b:48:18:1b:91:42:a8:97:43:25:8e:e5:13:dc:
         ad:a9:ff:77:c4:44:0a:09:3e:5d:9e:b6:80:16:ac:13:31:2f:
         39:44:6f:d4:f8:9e:ce:22:4d:f5:41:c3:68:c1:00:c5:09:87:
         36:a0:e2:f7:3f:d6:51:bd:e2:95:bf:f0:87:c3:64:89:c5:39:
         27:54:78:97:11:98:0a:77:cc:39:45:61:bd:b9:15:4c:29:73:
         6e:ee:07:f3:fb:9c:d7:54:41:9c:7e:02:0d:d2:f0:d4:c6:ac:
         f0:64:e8:12:2d:3b:74:88:a2:9a:69:e2:51:d1:1b:52:39:69:
         7f:51:0e:de:04:73:60:6c:83:00:08:42:2c:b1:6f:ac:a8:50:
         8b:6a:97:d1:cc:bc:57:e4:bc:3f:bf:fd:ff:5f:cb:96:eb:5e:
         47:e5:9d:71:50:ae:9e:87:c8:b6:c4:c9:f9:11:3d:54:d2:61:
         31:b0:1d:b1:b7:49:01:d8:71:a2:84:c3:7d:85:de:fb:30:64:
         ea:5a:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:37:17 2026 by rpki-client