Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fe9ba2-c0b7-3963-b08e-cd6648ce9b86.roa
File:                     a6fe9ba2-c0b7-3963-b08e-cd6648ce9b86.roa (raw, json)
Hash identifier:          ijGW5wnMmwjx8qz7XSQwbaYRhr7EkLewHD++Kf8sJ78=
Subject key identifier:   05:C4:EB:2F:D4:F1:DE:33:5E:29:2F:73:28:5D:D6:A0:50:FB:4E:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A7A3EEEE1E9EFD4606880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fe9ba2-c0b7-3963-b08e-cd6648ce9b86.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        141.150.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:7a:3e:ee:e1:e9:ef:d4:60:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=5d1497fc-3646-469e-9f2b-85d1cadedd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:d8:88:97:c2:6a:a2:0e:df:d8:95:1f:52:
                    e9:5c:28:89:ba:d3:d2:64:92:12:2d:86:b6:af:09:
                    3c:80:1d:26:c9:b6:bb:54:13:66:4c:08:54:40:36:
                    0c:2a:57:f8:98:1f:80:63:fb:5a:fd:c6:ee:76:14:
                    62:49:16:4d:72:29:87:f4:40:fd:a2:b0:ab:d8:e1:
                    fc:d8:ea:a2:18:eb:61:32:02:ac:a1:31:8c:5a:b2:
                    22:c6:23:99:b2:c0:7b:48:98:b4:72:b6:1c:57:ba:
                    21:37:d6:45:1d:7a:ae:4e:55:d2:f6:a0:39:cc:30:
                    60:f1:ef:bf:aa:90:86:6d:e5:96:9b:c3:e6:1e:91:
                    12:c4:62:b5:e4:b0:67:93:18:8e:8a:2c:a8:cf:0b:
                    f1:5a:ea:fb:ad:45:a3:95:57:a3:c3:8d:19:a5:85:
                    5f:88:7b:47:6d:8d:0f:0f:26:c9:32:ae:42:39:42:
                    6f:eb:59:76:4f:c8:cc:31:a2:29:bd:23:94:09:09:
                    fe:63:51:c4:6a:0e:d0:9c:9c:90:33:51:84:78:eb:
                    33:66:e2:ee:08:89:49:98:42:f1:37:27:20:64:ab:
                    88:ea:ad:3b:34:91:5d:31:b1:25:92:f9:4d:ad:d6:
                    c1:72:4c:00:d9:34:22:44:30:fd:33:80:d0:76:77:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C4:EB:2F:D4:F1:DE:33:5E:29:2F:73:28:5D:D6:A0:50:FB:4E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fe9ba2-c0b7-3963-b08e-cd6648ce9b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:c2:da:6e:90:c8:b2:52:f3:d2:56:e4:31:17:b3:c3:dc:
         eb:5e:c8:f5:86:0b:85:06:5a:53:90:4d:16:b8:34:36:47:46:
         7b:7d:0a:96:64:71:c4:2e:1e:ec:97:52:52:52:65:06:e1:b7:
         c4:3f:57:2c:55:f5:67:94:2f:51:66:9b:b8:3c:44:7b:94:76:
         74:db:86:ee:0c:e3:58:b5:91:18:04:23:5f:02:71:24:32:d8:
         ff:1a:6e:65:84:2c:1a:fc:ab:83:91:0a:38:38:cd:dc:08:c1:
         86:37:96:cb:52:0d:f0:2f:51:68:12:45:fe:bb:56:b6:a8:f0:
         fe:5b:09:64:0a:6e:f7:58:66:3a:fd:03:f0:ec:57:b2:6e:a3:
         3e:71:b2:e2:e1:af:39:29:f9:80:e3:13:4b:82:34:8d:b5:35:
         11:e5:89:3a:90:e9:64:b8:c6:d6:1d:c2:b8:12:8c:fc:31:03:
         a7:b5:df:e3:41:d3:4b:16:37:98:ed:a7:6f:31:eb:5f:29:38:
         89:40:32:10:07:03:df:21:a4:63:54:90:dd:b5:20:16:38:52:
         56:22:60:b8:8b:ee:73:9a:20:50:a4:0f:7c:3a:3d:c6:60:f0:
         81:89:1b:b9:30:44:88:db:a9:37:98:97:20:22:9a:85:ed:a0:
         d8:10:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:40 2026 by rpki-client