Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33f67ad8-34e5-3c14-a684-3d2ceec671f5.roa
File:                     33f67ad8-34e5-3c14-a684-3d2ceec671f5.roa (raw, json)
Hash identifier:          7fFZp7tSTOcIFQEbSqYPranbYjj9H98YXNpzNm6qkfY=
Subject key identifier:   3F:EB:1C:D7:DF:58:9B:7E:C7:1F:A2:6A:95:A3:1E:F7:56:9E:BF:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67C8A280F30446BEA77AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33f67ad8-34e5-3c14-a684-3d2ceec671f5.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        141.157.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:c8:a2:80:f3:04:46:be:a7:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=331048c1-8938-47f4-bea8-374236567027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:df:6c:34:0d:1d:f4:47:56:55:69:e2:38:
                    5f:b7:36:c7:ec:e8:48:12:b1:41:1c:11:4d:c9:76:
                    95:d9:6e:81:94:1f:d5:3e:7d:76:48:08:ed:9c:a0:
                    1e:7c:85:b7:b3:25:af:d7:08:e2:3c:6e:1f:58:0d:
                    79:00:6d:4b:27:a2:e3:f8:b2:55:80:9e:b8:a7:e3:
                    85:01:a2:43:9b:69:fc:bc:c2:f5:62:10:c9:2e:07:
                    e1:01:ce:bb:30:96:33:01:a4:1b:c8:65:93:ad:68:
                    d2:b8:4c:b0:f0:fa:86:00:11:e1:fb:b4:c1:3d:df:
                    46:20:e7:3b:73:d4:0b:c5:fc:8c:4e:dc:ed:a0:cc:
                    7a:bd:ae:98:3f:b7:2c:8b:f4:5a:33:74:ec:92:a2:
                    26:3a:d9:4f:72:27:ed:17:fc:4e:57:c9:b3:90:4a:
                    79:35:36:3c:6b:24:48:f4:68:25:79:25:81:57:33:
                    61:44:49:f4:60:81:08:88:14:70:3b:4f:3e:a0:ed:
                    83:24:5e:bd:ca:da:c3:d4:e8:7e:43:2b:82:33:a0:
                    42:3c:fd:5c:11:ed:95:29:db:f2:5c:25:f7:58:1e:
                    b9:30:18:94:ca:93:2b:13:87:9b:56:f8:98:f9:95:
                    9c:a4:4c:d6:09:9a:37:2b:59:1b:27:ff:71:ec:84:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EB:1C:D7:DF:58:9B:7E:C7:1F:A2:6A:95:A3:1E:F7:56:9E:BF:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33f67ad8-34e5-3c14-a684-3d2ceec671f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:56:f3:4d:15:6e:43:d9:da:63:db:0a:1c:fe:cf:9e:c4:24:
         b9:c5:c0:37:81:e4:ea:3a:35:c5:5e:1b:9c:2e:da:3e:65:93:
         8a:ee:01:77:c9:12:d8:de:dc:78:58:9f:2c:57:df:3e:38:3a:
         9f:58:f4:7d:fd:63:24:26:9d:23:e6:1e:cc:6a:01:71:23:8f:
         9c:9c:fa:46:33:fc:7f:1a:cd:3f:5e:93:0f:f1:8e:78:04:c0:
         ca:35:3c:6b:98:3b:f2:41:90:e0:b2:6b:d3:81:7d:93:99:55:
         39:af:20:74:15:23:ee:89:be:1f:9e:9a:8b:2e:ae:f6:55:cb:
         ae:bc:59:f8:8c:01:b6:c6:7f:29:44:72:4c:7e:ea:70:25:e0:
         7e:8d:b1:6e:7f:f2:6e:0d:2f:de:c4:0d:9c:14:54:d9:6a:d5:
         f5:62:39:7b:4f:64:6e:00:6b:d8:eb:c9:58:e0:26:7e:71:4f:
         0b:a9:bc:fb:18:75:1e:17:a0:f0:f4:f7:80:3a:32:1e:d0:f5:
         1d:b0:b0:30:a6:8a:b9:01:2e:0a:3e:be:ab:5d:44:75:8e:db:
         fc:e8:1e:9d:35:69:a5:37:4f:bb:17:af:10:9e:c5:52:73:0a:
         5c:2a:56:7c:30:76:7a:68:19:b3:12:cf:92:7f:de:39:09:c6:
         bd:24:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:02 2026 by rpki-client