Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d3dbc15-d796-368b-bae0-58957b5682ae.roa
File:                     5d3dbc15-d796-368b-bae0-58957b5682ae.roa (raw, json)
Hash identifier:          DXyUh4opI0Lndj0U0Tx1ZO09W+K6lwPaKsgMo82mZ70=
Subject key identifier:   9D:63:F0:7D:5C:FB:41:51:CC:44:8D:84:6E:03:4B:9D:20:E6:7A:3D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A7A8F2ADD397D76F42300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d3dbc15-d796-368b-bae0-58957b5682ae.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        141.152.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:7a:8f:2a:dd:39:7d:76:f4:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=065ea166-2481-4564-a453-073ed23c0a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:18:11:ec:ed:34:76:43:c7:fe:e2:a7:7e:ab:
                    a2:43:03:0d:66:69:82:b5:f7:ed:66:fa:4d:bc:1a:
                    ed:56:6d:87:68:62:e4:eb:fb:df:5e:34:7c:c1:c5:
                    f5:bb:94:2f:40:8b:b1:26:fc:3e:65:94:37:b4:f6:
                    c6:31:71:17:d5:b1:a2:fe:e3:95:c5:44:a8:29:da:
                    2c:32:2b:a5:2e:15:15:a1:c3:a0:fb:7b:d1:f7:42:
                    3d:11:36:87:60:05:46:04:69:66:ac:f2:13:52:33:
                    0b:f5:77:c2:0e:0a:3f:2c:e2:80:96:4b:a5:d9:3c:
                    8d:2e:f5:2f:7c:87:97:c8:ac:33:30:17:a9:35:50:
                    09:39:82:3b:13:75:c2:b2:81:bc:c1:00:54:36:f6:
                    d1:47:2b:99:da:61:45:b9:25:39:06:21:8f:52:54:
                    b9:b7:49:d8:c4:a1:d4:d8:00:58:bd:67:1d:15:63:
                    2e:9f:7c:e3:5e:c4:43:e4:79:47:5a:c4:e0:5f:2e:
                    99:0f:a6:6e:8b:9f:36:69:11:7e:c4:ee:00:e8:b7:
                    0b:1f:89:ac:19:1a:19:e8:77:8b:e0:10:a5:24:d3:
                    cf:56:ff:f7:64:ae:64:b7:66:2b:55:44:73:04:3d:
                    65:50:9d:0a:35:14:5f:e3:4e:27:3d:67:db:80:5b:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:63:F0:7D:5C:FB:41:51:CC:44:8D:84:6E:03:4B:9D:20:E6:7A:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d3dbc15-d796-368b-bae0-58957b5682ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.152.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:3b:4a:6f:a0:b4:5c:de:72:b5:4e:ac:95:1c:5c:2e:61:17:
         75:62:80:55:42:8d:77:4e:71:ee:b5:60:73:55:99:1a:26:35:
         01:03:f7:1b:55:13:29:17:f2:17:ff:e7:69:c9:22:19:07:88:
         fe:64:f8:ad:74:4d:94:35:01:93:27:85:a4:78:82:5b:8e:05:
         9f:fa:17:59:7a:88:8b:99:f5:c1:38:dd:83:21:55:17:af:5f:
         bd:92:e2:33:f6:12:a9:c7:55:c1:47:72:c0:d6:bd:2d:92:23:
         a3:1e:ec:08:a3:e9:00:13:25:e6:5b:b8:c4:20:ff:b7:69:58:
         f1:6e:2e:31:07:1a:43:9c:05:f5:74:12:a1:7d:92:c5:f1:34:
         57:1a:a4:b1:ea:dd:96:57:fa:1e:40:48:34:41:ae:96:3b:0f:
         29:97:79:00:d3:b0:ec:84:58:9d:6c:e3:a5:30:7e:bf:f3:b2:
         aa:bf:65:66:f8:28:60:bf:de:51:e6:33:25:03:56:92:ad:ce:
         06:65:84:70:f7:70:f0:78:73:14:b4:c3:66:b3:b2:bf:83:84:
         de:69:f0:12:54:2d:9f:95:9d:c5:2b:9a:66:b2:0e:8f:e7:ec:
         78:5a:12:68:31:10:58:8c:0b:7c:ee:76:34:53:4a:3f:0a:4c:
         70:fe:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:47:47 2026 by rpki-client