Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4414db84-adda-3c68-bb8f-b690bacfb7ed.roa
File:                     4414db84-adda-3c68-bb8f-b690bacfb7ed.roa (raw, json)
Hash identifier:          hAsLiIAr90eA/t1UMvrRuMowSVFR07AHMxPLmPzXNPs=
Subject key identifier:   CC:E5:E9:75:44:AA:D8:AE:05:97:09:B2:88:C6:EB:58:0F:24:DB:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAC5AE743FC544F3FC5120
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4414db84-adda-3c68-bb8f-b690bacfb7ed.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        141.207.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:c5:ae:74:3f:c5:44:f3:fc:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=25833a16-90b3-4fa7-8ac6-ccfad67bfdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:05:87:75:f1:0d:ba:49:da:44:ea:a5:7d:
                    46:15:52:ab:98:df:c2:f5:a9:7c:c4:f1:4b:8c:f6:
                    5f:e9:3d:bd:3f:3e:df:86:92:3f:bd:de:81:61:5b:
                    ac:43:13:99:6c:a7:9e:f0:5d:0d:ed:48:7d:9d:12:
                    13:c1:87:ad:87:16:92:ed:7b:77:ca:41:4b:f3:0f:
                    8a:ee:19:6c:e1:2c:03:b5:f2:60:4b:49:a6:88:56:
                    66:54:55:97:01:ca:39:cb:34:d8:51:11:b3:e6:f3:
                    6c:5c:8a:a4:06:7b:16:6a:07:a6:90:b7:0d:c6:48:
                    fb:bf:95:ec:ef:0e:19:09:bf:f7:82:2a:58:9a:62:
                    3e:a4:23:41:dc:1c:09:90:a4:aa:2c:0d:e4:7d:fb:
                    b1:7c:29:56:dd:25:bc:c5:a3:88:47:cb:83:91:c8:
                    08:c4:3a:d8:3d:b2:c4:fb:99:32:c4:38:74:88:44:
                    b3:6f:a9:01:ac:78:2c:63:c1:b5:70:0d:14:e2:2f:
                    10:a3:b3:34:a8:74:9c:30:e6:92:2a:ba:44:2f:67:
                    e4:c2:fe:33:ef:f8:a4:57:c4:5c:d5:8b:28:62:d4:
                    c2:23:9d:ff:ec:90:c8:d0:86:2d:3a:ef:5c:bf:ee:
                    03:c9:61:78:bf:b2:27:a6:0d:ad:f3:dc:26:76:44:
                    25:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E5:E9:75:44:AA:D8:AE:05:97:09:B2:88:C6:EB:58:0F:24:DB:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4414db84-adda-3c68-bb8f-b690bacfb7ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:3d:14:3c:8f:06:d5:e9:bc:2b:f6:3b:5e:08:60:83:90:
         79:81:ce:ab:64:6a:f8:f1:6d:90:43:12:f3:01:3c:2d:29:9d:
         28:9a:0b:66:93:14:74:f2:fa:1e:f1:ca:f6:df:72:f6:32:f9:
         f7:c5:1f:f0:7e:25:f1:fe:53:ce:a6:a9:29:29:ed:6b:57:f4:
         bb:be:36:c9:9b:52:a4:7f:53:7e:04:77:18:e6:96:93:c7:68:
         9f:50:cc:4c:bf:df:08:3b:1c:6b:e5:70:4a:c8:30:d1:a5:8f:
         b8:a8:5d:01:37:e1:30:ea:78:cc:fe:7c:78:8f:8b:2f:74:fc:
         89:85:7e:90:1d:34:52:fc:bf:3f:1d:4f:7f:5d:d8:ed:fd:70:
         32:4b:9e:da:c0:1f:7a:d7:c5:05:25:80:da:7d:5d:e3:19:ea:
         70:5a:9f:a8:e8:89:8b:fc:de:37:c0:e1:e1:74:f6:8a:e8:e7:
         7a:d0:0a:79:b4:7d:69:a1:9e:64:b4:ff:6c:c6:7f:a6:e1:a2:
         ee:95:b7:66:3d:67:72:db:a3:7f:30:e4:54:a8:a4:8c:2a:16:
         55:68:3a:db:d6:46:74:0a:8b:bd:96:48:13:68:ab:ef:3d:28:
         a9:85:ea:0c:ab:1f:ca:ef:59:12:9c:30:8c:d9:a4:cd:64:08:
         a3:c1:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:55 2026 by rpki-client