Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa
File:                     3a652f60-cec7-329a-b702-fd9ae911cdae.roa (raw, json)
Hash identifier:          XEYSc4EZ5qP2cenOTDRvBJeZslgtQuUp1Q2sUMz1HtQ=
Subject key identifier:   47:7F:81:63:3B:77:3D:25:5D:0E:4C:B9:86:EE:3D:A4:2A:E2:9D:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAC4CBE1D66EB347FA4300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        141.207.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:c4:cb:e1:d6:6e:b3:47:fa:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=516530b7-aa39-451c-96c8-8215ee9942cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:8d:78:86:f3:fc:8e:ed:37:30:fd:e4:77:
                    01:36:2e:89:62:e2:2a:52:8e:c1:2e:58:63:dc:97:
                    39:c6:08:cf:ca:9e:29:e8:c4:51:ff:97:65:42:ac:
                    30:4d:e5:f7:1c:29:85:9e:41:f5:4d:a7:b1:bf:23:
                    67:82:e1:3d:36:e7:91:4a:ff:1e:18:e4:63:a6:42:
                    bc:4c:b8:5c:6c:23:46:37:11:0d:84:7e:3c:ca:92:
                    6c:91:b4:8a:fb:4d:24:3b:0c:1c:04:8d:38:ec:df:
                    c2:97:71:cb:c8:82:d4:cd:b8:e3:be:30:3d:40:4e:
                    bf:de:d6:70:de:03:08:58:55:f8:9e:c8:e9:cb:52:
                    e6:3b:d0:05:10:44:47:a3:03:34:98:84:ae:21:15:
                    b9:f9:ed:22:58:77:c4:97:13:5f:d1:66:63:8d:ab:
                    88:20:b6:35:ca:a1:6f:d2:ae:b3:40:0c:51:0d:b3:
                    dc:e5:54:a0:0d:16:f5:31:2c:5f:be:5c:68:9c:49:
                    93:e7:10:ad:3a:1d:01:b9:76:3f:b3:15:c7:26:c2:
                    21:1c:0f:54:d7:97:28:e3:3f:83:60:51:0c:70:f0:
                    86:d9:9f:68:f2:1b:ed:e1:08:83:a1:e8:c7:bb:f7:
                    3e:96:f2:86:e2:12:2b:98:14:0a:49:cf:b0:d6:ec:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7F:81:63:3B:77:3D:25:5D:0E:4C:B9:86:EE:3D:A4:2A:E2:9D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:ae:00:8a:34:a7:a2:f0:a6:f2:26:2d:2d:12:78:31:f7:
         7a:c7:04:ca:5f:d1:d3:9a:26:53:cc:7d:0d:0b:ed:01:48:af:
         03:a2:c5:b2:f4:1e:98:64:09:6f:ba:54:15:a3:27:95:fe:87:
         77:1f:a7:85:9d:b2:6c:9d:17:50:03:b4:5b:42:cc:be:54:ec:
         c1:60:71:a9:77:f6:47:4c:b4:33:7d:9e:aa:83:2e:1a:dc:87:
         2e:66:fa:a3:80:09:9b:8c:ff:de:a4:d9:37:1c:0e:f7:22:86:
         60:b1:33:04:59:5f:e5:25:29:a6:32:c3:ec:96:eb:7b:ec:5f:
         25:82:cf:8f:3f:34:fd:3b:61:2f:be:53:5d:ec:d9:f0:d7:96:
         f6:4b:54:77:37:26:9f:e5:e1:04:f4:f8:51:04:86:35:c0:a5:
         ef:ab:ce:74:50:4e:48:4b:b3:f0:f0:84:3c:52:f8:a2:4a:94:
         12:d5:2d:b0:39:4d:30:78:97:59:c5:75:76:44:91:6c:99:06:
         8d:63:0b:83:9b:0a:0c:c1:71:f2:6d:93:73:a0:63:14:ff:e7:
         6c:c1:2a:63:3d:2b:d8:f3:b2:34:27:22:40:51:e1:6d:a8:8b:
         12:25:19:1a:14:84:c6:68:bb:93:f0:ab:ef:2d:c4:05:d2:01:
         56:5e:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:19 2026 by rpki-client