Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3318213-9c9d-3236-aaae-0e1ae6df99b4.roa
File:                     a3318213-9c9d-3236-aaae-0e1ae6df99b4.roa (raw, json)
Hash identifier:          FhW9gyVDgD6YLtHL6l0MT+ELCxjEU7oxXyFULT8YWjA=
Subject key identifier:   91:CF:88:DA:33:7F:CE:C6:01:63:96:20:62:EB:EC:8D:9D:8C:7C:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06726677842B4B68E46A3B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3318213-9c9d-3236-aaae-0e1ae6df99b4.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        141.207.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:66:77:84:2b:4b:68:e4:6a:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=28da9817-e0dd-4c62-ad9a-86f287f15bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:c7:a6:5f:06:93:bd:32:be:26:0d:45:bb:
                    05:cc:d0:ba:7d:1e:72:98:b2:8f:84:e3:90:30:5a:
                    92:7f:c4:68:73:1c:ed:cc:1e:67:91:05:ad:55:38:
                    2c:85:51:9f:6c:8b:ea:21:6b:08:a6:d2:55:ad:d5:
                    a6:52:e8:03:f8:09:46:18:09:51:c4:f3:5b:d6:b0:
                    2a:9e:a6:79:4d:e5:13:48:97:68:a1:b2:19:0f:c6:
                    bd:f7:8a:63:e3:e7:d4:72:c3:fa:14:f2:bf:ad:2f:
                    62:63:65:d4:bb:b1:25:81:51:25:9f:a5:6b:8d:d1:
                    1a:42:3b:de:6c:48:53:c3:df:c4:a8:c0:7e:72:2b:
                    bc:ba:9c:63:f0:83:61:cb:67:cb:17:6f:b7:ce:34:
                    8a:fa:e6:98:87:6b:37:37:8f:e6:c7:ef:5b:a3:2b:
                    ff:3c:ba:6a:0a:50:a3:0e:54:9f:37:87:ff:1c:b6:
                    b0:32:fe:d6:3f:fe:37:b8:c6:fe:90:08:e1:c1:ed:
                    5a:c1:82:05:92:72:9e:cc:59:29:3e:c9:b2:3a:79:
                    56:2c:88:14:c6:30:d9:58:e2:54:dc:53:44:89:b9:
                    8a:08:29:7e:74:9c:0c:04:e0:b5:0c:61:a4:e4:d2:
                    49:40:3b:f3:d0:59:13:ee:63:21:f6:68:c2:d6:9f:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CF:88:DA:33:7F:CE:C6:01:63:96:20:62:EB:EC:8D:9D:8C:7C:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3318213-9c9d-3236-aaae-0e1ae6df99b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:50:7e:39:e5:48:32:96:71:9b:ce:14:e8:83:8a:10:06:c9:
         9f:00:79:84:d7:8e:f6:86:73:d9:dd:7f:7a:f5:1d:02:62:34:
         c5:07:43:33:fc:7a:18:26:a9:e2:17:2f:ac:28:47:51:b9:d3:
         65:50:a5:94:b1:2a:cf:f5:df:23:18:97:25:e5:25:7e:bd:50:
         a4:c8:9e:04:5e:ee:80:02:30:1c:a8:02:35:93:2b:e6:98:cd:
         9d:3f:e8:f2:70:1c:e7:c4:c4:29:bc:56:b7:91:cc:c7:e0:3b:
         cf:59:ef:38:d2:f5:b5:ca:3f:51:4f:dd:67:c6:a5:7d:75:fb:
         ba:23:2c:b1:ae:00:19:88:8a:df:45:bb:42:3c:4b:dc:bc:35:
         92:5d:d7:e6:d1:65:69:77:b6:61:cf:3d:c5:b6:5e:20:28:b9:
         0b:62:ae:ef:17:7c:42:7b:ee:2c:36:72:ed:a0:0c:3e:09:e5:
         45:10:29:86:d8:25:70:a6:1f:76:4f:7e:dd:50:df:49:f7:6d:
         60:91:bf:05:ae:ac:4c:9a:cf:c4:95:77:cb:2b:2f:85:8b:74:
         b9:bc:6b:44:c0:4d:f6:7b:72:71:de:90:d0:1a:73:25:16:70:
         01:97:d4:a2:71:d8:bb:78:38:3b:54:65:e3:59:20:89:10:85:
         35:92:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:39:27 2026 by rpki-client