Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53202cc1-46f2-3616-a7f7-4ec29f47476e.roa
File:                     53202cc1-46f2-3616-a7f7-4ec29f47476e.roa (raw, json)
Hash identifier:          7tpO9lTjsPmv+OMHsYJhTOzNmkvcYDCoKtyRGnqDZ4s=
Subject key identifier:   D6:8F:B8:84:9B:3C:AE:4B:67:19:AF:B0:FD:46:CC:DF:26:66:CE:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE38367E9D2E15B6482E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53202cc1-46f2-3616-a7f7-4ec29f47476e.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        141.149.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e3:83:67:e9:d2:e1:5b:64:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=ed21c29e-1688-4cc0-b8c1-ba844ad3c125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:14:70:08:58:03:64:3e:f5:f8:ee:04:10:
                    e6:57:2b:3c:12:5b:57:6f:3e:59:3c:bd:c9:92:5c:
                    de:17:77:48:f6:e4:0b:bd:44:6c:c0:1c:e4:6e:fe:
                    05:c2:70:34:f9:cf:98:4c:3a:cc:8c:ea:84:f3:0b:
                    5d:b3:b9:f0:6e:38:b1:bf:d2:75:02:c7:c6:e6:54:
                    e7:1b:98:8e:6c:12:12:70:25:75:4b:dd:0d:ca:b0:
                    1e:c1:14:aa:6c:60:64:48:fe:81:24:b4:7d:98:3e:
                    f6:05:85:b0:54:06:d5:23:f0:21:8e:c9:cd:5b:b6:
                    e5:dd:05:13:eb:b5:75:46:8e:4a:f5:95:ea:1e:d2:
                    d2:97:a7:38:c3:32:e2:6e:cf:49:80:7f:42:24:e5:
                    ec:8e:3d:40:f3:8d:df:02:11:44:67:59:e2:b3:45:
                    81:61:f0:84:a9:d7:39:72:0e:d2:36:a4:ce:24:55:
                    62:3d:be:1d:ce:ad:f7:a3:3c:e4:73:99:bb:d4:2d:
                    cd:95:54:8c:a3:1b:09:d3:d7:6f:e0:3b:ea:7c:7e:
                    67:77:7c:3e:c8:eb:43:b5:d0:49:cd:53:72:93:ca:
                    df:d4:38:19:c6:1b:f4:2d:71:63:65:57:a8:ea:ef:
                    a1:15:b6:48:2c:3a:c3:2e:8b:3d:80:68:ee:ce:54:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8F:B8:84:9B:3C:AE:4B:67:19:AF:B0:FD:46:CC:DF:26:66:CE:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53202cc1-46f2-3616-a7f7-4ec29f47476e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.149.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:ea:89:46:e4:85:2c:a4:11:1f:85:54:90:69:0a:48:70:
         ad:44:33:e5:25:64:41:0b:92:61:00:8f:1c:a3:2c:cb:5e:b1:
         d7:25:d8:f2:3d:4b:48:2b:1e:a3:41:ea:e7:ca:5b:23:9f:d8:
         5a:7c:7d:4c:6c:7d:c0:ec:7b:b4:80:bc:d9:c0:fc:50:0d:a4:
         bd:70:f4:78:7c:7d:bb:bd:8c:09:ee:c4:05:57:32:eb:19:16:
         13:45:46:3e:ca:5e:ce:d9:75:67:a8:ab:eb:5c:87:e2:e0:b2:
         bf:86:ed:93:fa:bd:c7:5c:3e:4e:53:af:cb:49:37:7e:98:7f:
         aa:aa:c2:05:c6:2b:20:9d:84:9b:3f:13:4e:dc:c0:39:30:d9:
         7d:a6:fd:13:01:ec:4a:17:8a:ff:3c:0d:5f:a8:d0:60:28:7c:
         24:de:44:ed:ab:b2:86:0f:ca:8e:f3:1b:6f:14:72:b6:80:22:
         00:ae:19:e4:f6:70:fc:44:52:65:fb:c4:35:af:7c:ca:f4:a7:
         96:ce:53:12:4d:07:01:e4:7c:a5:68:d3:22:73:0e:6e:62:a6:
         94:16:69:5e:9c:6d:61:55:81:e3:21:a9:30:f4:ef:68:fa:a3:
         30:ae:4a:c4:04:64:3a:c3:7c:de:f9:5d:97:72:4f:ed:0d:1a:
         a7:4f:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:24 2026 by rpki-client