Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aea599f6-8c5c-3406-bc1c-c1e4fd114d84.roa
File:                     aea599f6-8c5c-3406-bc1c-c1e4fd114d84.roa (raw, json)
Hash identifier:          NL3KJUXTHQfFk864+qsRgoYiny3Sbmce+AXlrNb437o=
Subject key identifier:   2B:D8:15:14:19:7F:DE:84:D3:DC:09:EC:C8:63:8B:0E:EF:71:6A:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAC4A67579107D7AFCA000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aea599f6-8c5c-3406-bc1c-c1e4fd114d84.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        141.207.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:c4:a6:75:79:10:7d:7a:fc:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=4c2e8952-d956-4f38-adbe-95fc713886af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:d8:e6:b0:1d:52:7e:44:9e:ba:d1:a7:3f:
                    cb:ce:65:c7:e8:2a:bd:00:16:51:64:7a:20:77:3a:
                    44:a7:e6:90:6e:9d:8a:29:95:eb:fa:d8:f3:b7:71:
                    b0:be:28:43:25:0e:42:11:54:7a:ce:3d:d8:f1:88:
                    3b:2a:16:03:8a:06:33:2e:ff:b7:17:1e:3c:5c:b9:
                    59:54:33:51:7d:60:ae:7f:05:47:60:fc:20:f4:e1:
                    d9:59:81:9e:54:a1:f2:8b:39:80:d3:e7:6f:ca:32:
                    4a:2a:6b:2b:0c:af:87:6b:83:99:97:14:91:ad:e3:
                    48:75:d5:8a:85:60:00:8e:1f:f3:82:db:6d:67:60:
                    cc:29:30:96:15:8d:62:37:45:4f:fb:4b:82:61:87:
                    f5:84:39:ae:10:9a:aa:d2:78:d6:48:de:11:92:64:
                    2e:ac:41:e7:50:2d:dc:26:52:48:fd:62:40:65:02:
                    7d:e5:1b:54:51:e3:2b:15:0a:13:1d:e0:3e:21:28:
                    b9:b1:e0:20:8e:5d:f4:59:fd:e4:77:d8:83:ea:46:
                    1a:81:e0:ca:4a:0a:f6:0e:bb:f7:00:77:02:96:e3:
                    36:54:ab:02:7f:dd:c0:53:a0:81:97:12:99:0d:9e:
                    7a:8f:ab:7e:82:a1:df:b7:fa:48:98:78:41:3a:6f:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D8:15:14:19:7F:DE:84:D3:DC:09:EC:C8:63:8B:0E:EF:71:6A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aea599f6-8c5c-3406-bc1c-c1e4fd114d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:6e:4d:11:cd:7a:7d:69:cf:97:6d:89:3d:02:00:02:ac:
         b6:e3:e0:bd:c0:87:e1:b8:c0:06:2a:f7:70:2d:aa:1c:fb:67:
         a2:d1:1d:da:ae:04:e5:b1:ea:72:11:fc:75:da:76:0d:ac:4d:
         57:95:6c:96:2f:e1:2a:2b:58:a7:50:b9:0b:e9:45:8b:03:c3:
         65:03:c0:9e:3e:b1:73:23:7f:e7:17:ad:49:4b:5c:55:83:c8:
         39:87:e9:db:08:4e:9f:40:07:5e:33:5e:ab:f4:ef:a5:22:8d:
         50:74:d8:9e:fc:23:17:ef:96:7e:49:fb:eb:e8:41:47:f6:67:
         a2:28:41:8f:ee:bb:e2:14:7d:9d:85:1d:9f:da:c0:28:0e:e5:
         dd:3a:74:1a:77:90:96:f1:d0:b7:43:9b:2c:f3:97:bb:b6:68:
         6a:28:ea:f7:6a:d0:44:d2:d2:39:ec:b0:02:ea:f3:33:32:0c:
         22:5e:97:88:97:e7:10:35:18:90:56:a7:95:3c:4f:06:9c:15:
         cc:64:a4:7a:31:1b:3f:9e:ce:4c:67:2c:90:2f:32:b0:2c:a4:
         90:c6:aa:0b:30:77:42:b6:8d:45:9c:c9:cf:a4:4f:b2:8b:1b:
         17:0f:6b:68:e8:55:2d:8a:a9:50:91:4d:1f:44:fe:95:c3:32:
         7b:49:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:55 2026 by rpki-client