Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62f32450-6f81-3986-968f-6e55fefd5061.roa
File:                     62f32450-6f81-3986-968f-6e55fefd5061.roa (raw, json)
Hash identifier:          erxCp+6J+hA+pYSlk2KpqqGcrX747ytG9a44ygJC3ME=
Subject key identifier:   37:8F:31:C4:A1:7C:06:9B:0C:94:CB:3E:A5:98:30:DE:70:68:CF:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD1A21BEC4E51F8C23C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62f32450-6f81-3986-968f-6e55fefd5061.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        141.207.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d1:a2:1b:ec:4e:51:f8:c2:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=d84d418e-ba64-41d5-902b-16d291b5bfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:e4:56:11:ab:05:2c:6e:60:65:80:e1:9d:
                    b2:e3:fb:92:a6:6e:d5:6d:30:72:ba:e0:b7:2c:0a:
                    ba:42:d1:59:89:a5:65:c4:8a:65:eb:25:e9:5f:52:
                    d5:68:aa:0f:ba:17:47:d4:83:e1:da:18:4b:77:44:
                    67:37:1d:01:83:bd:0f:13:24:4f:9c:3d:07:22:07:
                    d2:01:4a:11:e3:f6:35:58:3d:1d:49:e6:0e:ad:c3:
                    69:ed:af:61:f6:4b:e2:b1:f7:3e:63:f3:82:e7:a0:
                    d1:7a:65:b2:8a:b1:b4:e8:47:94:50:be:f3:89:19:
                    01:99:a5:86:64:6f:7a:d6:c2:9c:8d:84:db:c9:6c:
                    91:4f:7b:8e:3f:2c:cb:a4:b9:f3:b1:8b:8e:56:f5:
                    e0:b7:c9:a7:3d:11:02:9f:25:ee:e1:77:fb:e0:cb:
                    52:76:c0:d4:ad:32:bb:ca:87:10:a5:43:12:ca:53:
                    5d:93:64:38:2b:a8:8f:b3:f6:b0:c2:66:04:71:80:
                    09:02:46:e8:e2:56:20:26:b8:54:26:b5:48:09:4a:
                    ed:32:69:fe:0c:81:b9:ab:bc:bb:6c:73:77:d4:db:
                    df:35:ef:c5:6e:f2:56:81:fb:21:1f:cc:d0:0a:2d:
                    d0:65:e2:73:7d:70:46:bb:32:25:d8:31:bd:98:a0:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:31:C4:A1:7C:06:9B:0C:94:CB:3E:A5:98:30:DE:70:68:CF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62f32450-6f81-3986-968f-6e55fefd5061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c9:f1:c1:f1:b3:58:e6:74:07:51:21:97:e2:14:dd:06:05:
         55:1e:2c:33:92:a2:82:1c:a7:41:42:c7:b7:0e:46:2d:21:06:
         05:c6:82:6a:99:29:ea:e7:73:09:1a:60:0f:da:c8:20:66:d5:
         67:08:4b:44:b9:9f:42:c8:2c:89:3c:7d:58:6b:1d:10:1c:91:
         c6:02:a3:5f:86:7a:15:22:21:89:28:39:46:d0:a9:4a:77:99:
         7e:53:26:40:41:a9:cb:4a:64:72:ac:08:ee:6e:d7:ef:f3:b2:
         d4:7d:1f:8d:6a:7d:34:aa:22:65:58:c8:be:10:d3:ee:a5:09:
         4a:f7:12:03:e3:28:5f:1d:12:b0:8f:ef:a3:2a:b4:82:a2:02:
         ea:76:19:4f:54:ca:96:19:80:55:5e:3a:db:fc:98:e5:14:26:
         f8:c6:94:da:af:ab:0a:73:11:2c:e4:2b:1a:61:ab:25:1d:33:
         72:2e:55:b8:07:fc:91:e1:22:a9:d8:c0:31:eb:ab:85:ca:60:
         5b:2a:ac:36:a6:dd:62:0f:21:92:32:00:60:b5:a2:52:86:c1:
         62:74:3b:20:1b:d6:03:a3:76:05:ca:76:c4:2d:10:db:ff:1f:
         03:9f:c6:d5:52:d4:71:72:b1:23:bc:49:d2:06:68:3b:79:73:
         d4:f7:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:51 2026 by rpki-client