Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29f6bc24-0736-3603-b9f8-823f16c6ebae.roa
File:                     29f6bc24-0736-3603-b9f8-823f16c6ebae.roa (raw, json)
Hash identifier:          pqziwkuIpXxOChufgreKZWI/vyDfG2dcEIS3lQvRaaE=
Subject key identifier:   A9:FE:71:9C:06:DB:F9:C2:67:88:11:2A:7C:6B:4E:96:53:68:F5:98
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F173250AADCC41E19F9C53900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29f6bc24-0736-3603-b9f8-823f16c6ebae.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     0
IP address blocks:        47.228.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:50:aa:dc:c4:1e:19:f9:c5:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=c5675e4d-fea1-46cb-9fa3-1e8a4f3a7642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:fc:d2:de:92:95:90:22:89:39:28:97:7e:
                    af:3b:85:7a:82:96:96:dc:06:db:8b:79:d5:af:43:
                    34:35:60:9c:82:c8:72:f2:e9:e5:fc:4d:ff:22:0c:
                    3a:84:92:32:9d:46:98:22:1e:f5:60:29:12:33:0d:
                    3e:4d:ab:c9:a8:e5:85:06:98:33:25:84:97:2a:fc:
                    0f:93:f8:ee:9c:75:aa:7f:a1:7f:82:ea:b1:a4:bd:
                    9d:54:14:9d:7a:e8:25:7e:27:e1:c2:a6:07:b1:54:
                    d4:9b:f3:be:f9:f0:da:b3:9f:0e:12:7d:9f:0d:87:
                    2d:b9:64:3b:55:16:02:20:e7:b3:3a:63:72:17:3a:
                    d8:33:3b:85:c8:36:bb:b1:2e:74:d0:6a:78:71:ae:
                    34:b5:87:d3:29:bc:e0:09:d8:2d:a8:83:51:1b:87:
                    bc:3d:af:58:3d:01:48:c4:70:15:87:a3:fd:a3:e3:
                    64:bb:16:50:9d:80:f4:da:07:a0:1f:5b:5b:8a:8d:
                    ea:84:b1:b3:0d:42:9e:da:66:ad:32:5e:5a:da:1e:
                    34:cf:c5:79:20:ea:87:cf:91:ae:8f:19:4c:dc:46:
                    28:f3:d7:28:ac:47:82:bf:f9:2a:f6:46:c7:92:4e:
                    d1:0f:15:fd:55:dd:34:88:63:ab:bf:0b:31:91:22:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:71:9C:06:DB:F9:C2:67:88:11:2A:7C:6B:4E:96:53:68:F5:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29f6bc24-0736-3603-b9f8-823f16c6ebae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.228.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:23:3b:46:d9:e9:2b:5c:ed:2d:6a:8c:75:66:d1:35:55:3c:
         56:95:d5:0b:fa:67:31:e5:3d:df:31:0e:6a:8b:fd:c9:a0:ee:
         35:d6:70:85:da:e8:51:65:b2:f1:e3:62:7b:49:47:e0:79:e0:
         35:68:47:cd:4f:d3:4f:39:4c:eb:33:0d:b3:b4:2a:e1:16:be:
         89:44:05:7a:a5:64:50:fe:fc:65:f4:9e:fa:21:84:b6:f6:1f:
         61:4f:dd:42:b7:75:7a:93:3a:77:67:58:fc:96:ea:f2:ef:9e:
         51:eb:50:7a:67:23:c1:e6:26:2f:46:d9:80:c7:27:4e:ab:2c:
         c4:8e:f4:21:6b:42:50:ee:68:a5:81:9e:03:c1:f8:32:8e:dc:
         9c:28:69:1c:36:3a:0b:01:54:9e:fa:d4:33:c8:67:33:52:28:
         fd:b6:28:71:ef:42:a7:8c:3f:0c:fb:93:d4:19:0a:dc:54:1b:
         21:b5:05:c4:40:2e:88:cc:3e:05:e6:8b:40:1c:e9:de:48:12:
         bc:c0:96:30:17:e7:28:76:8f:34:d7:aa:93:9c:48:e2:5d:2c:
         31:7b:0f:b7:14:84:19:75:96:2c:a9:17:ed:ce:2b:fb:33:c3:
         8d:06:e5:04:e8:8a:58:6a:16:9f:86:a3:db:ba:6b:4e:92:61:
         ed:6a:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:19:36 2026 by rpki-client