Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47033ed0-7d68-323b-868c-4b2f6c6b801c.roa
File:                     47033ed0-7d68-323b-868c-4b2f6c6b801c.roa (raw, json)
Hash identifier:          Hx0Yhod8P2gwwWKZ/WQSqTkM8AntAhcgYy7ddm1CWD8=
Subject key identifier:   07:97:23:96:1A:4C:8A:17:20:E4:ED:02:13:0A:E3:C7:44:ED:11:6F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F119D00F712C912EA3B139780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47033ed0-7d68-323b-868c-4b2f6c6b801c.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        140.204.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:00:f7:12:c9:12:ea:3b:13:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=e83c51bd-87c2-47ef-820b-2e4133c20740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4c:5d:0c:8d:9c:9c:48:d4:33:98:d2:a0:1b:
                    8e:8c:0d:53:88:27:95:8f:b4:a1:fa:ae:8f:fb:ce:
                    ee:02:9b:2f:32:42:c6:93:78:9e:e3:ce:c0:fa:99:
                    8f:cc:71:df:c1:ec:db:8f:55:6c:97:7d:c1:04:5a:
                    ba:26:74:6a:8c:d7:7d:a8:41:25:c9:a3:aa:5e:ab:
                    e1:67:da:0a:5f:8c:8f:cc:00:52:92:bf:70:4e:a4:
                    f3:d9:cb:73:22:25:18:a6:60:1b:12:05:0a:33:75:
                    67:3a:85:f4:9a:a3:14:07:42:0a:a6:31:84:6d:c6:
                    e2:df:2c:bd:96:66:c9:f2:34:58:a3:8b:af:29:ce:
                    17:a2:e5:c8:7b:b8:00:7b:8e:8e:ae:58:5a:e9:18:
                    39:25:1d:e7:70:94:40:42:fe:45:95:03:17:0c:91:
                    b0:96:ff:3f:1a:4f:4d:63:57:ed:c1:90:44:2e:cd:
                    cc:a5:d1:1e:a3:54:3d:2d:03:6c:b6:68:12:f5:f9:
                    62:34:31:19:2e:60:f0:7e:d3:09:56:6d:6e:40:e5:
                    a7:c5:23:e6:9e:69:0e:5f:c9:90:f0:8f:76:59:29:
                    04:e7:66:28:40:b8:92:d8:ba:fb:c3:2f:47:e3:6b:
                    9e:fd:2b:13:ce:9c:7a:c8:8e:06:8e:d8:1d:a8:4d:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:97:23:96:1A:4C:8A:17:20:E4:ED:02:13:0A:E3:C7:44:ED:11:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47033ed0-7d68-323b-868c-4b2f6c6b801c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.204.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:c4:9e:0f:a4:1d:05:f4:b0:2a:dc:db:37:ec:8c:0e:ee:
         64:b0:89:ed:74:01:00:33:7b:4f:ef:ad:f2:7c:f0:6d:df:ec:
         fe:22:6c:d3:02:b0:01:3d:b8:0d:1a:53:e0:66:99:56:4e:d7:
         c1:31:5b:86:ee:1e:03:df:4f:33:1c:fa:af:b9:fb:e1:86:3e:
         de:0b:4f:f6:46:e6:34:63:2a:d3:8e:a2:2c:b1:1b:6c:e1:3a:
         7c:54:7d:42:95:92:7c:25:87:09:8c:47:b6:fe:19:5b:47:4f:
         1c:18:4a:f4:80:2f:1b:f4:31:5a:35:bb:0b:1f:19:db:d1:7f:
         ea:9b:30:0c:cc:e9:94:f2:2b:5a:11:a6:d6:83:62:88:a8:29:
         78:33:59:86:37:73:68:c2:71:49:a6:22:d6:f0:c7:f5:95:d4:
         b7:5b:25:b2:e0:fc:3c:10:9f:bc:65:c5:81:18:d6:a7:ce:1a:
         3f:0d:89:2a:7e:2b:f7:11:5b:1c:62:cb:e7:9c:3e:6c:91:e1:
         15:75:b6:6d:ff:8c:f0:e4:b9:83:a8:38:f1:44:75:82:06:62:
         15:f6:89:2a:56:b3:18:38:b4:ab:f8:14:bc:96:df:a2:76:84:
         d9:b9:00:9e:c9:86:35:11:15:5c:78:38:76:59:d2:12:0a:9c:
         c1:19:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:47:00 2026 by rpki-client