Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa
File:                     207c5881-e7f3-366b-a899-246463e7043e.roa (raw, json)
Hash identifier:          Fdjm9k7zzXzs4WzOPhptA89aBfOFg2QI57sS2vg6zz8=
Subject key identifier:   EA:23:60:D1:A8:6E:07:D6:82:CE:AB:1B:4B:78:81:B1:46:0E:A0:C4
Certificate issuer:       /CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
Certificate serial:       010D0C9F4328584F4975132C2D5D3D75F94946C0
Authority key identifier: 83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22644
IP address blocks:        147.140.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:13:2c:2d:5d:3d:75:f9:49:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b0ab063d-ca26-420f-a382-918f5f183d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:fb:30:a4:6f:ff:a4:42:7a:5d:6c:b6:dc:
                    1b:ce:7e:77:42:5b:9f:0d:a5:23:ad:cf:82:2b:5e:
                    e4:38:ae:90:fc:59:61:32:6a:b7:42:11:f9:16:49:
                    b7:8e:4d:78:80:5e:70:1b:f4:94:97:bb:48:49:e2:
                    96:57:69:46:3a:95:c7:70:5c:94:85:01:c0:e0:9f:
                    8e:ae:8c:68:58:7a:e6:ea:e6:ec:69:91:48:6f:5c:
                    81:ae:a0:48:3c:04:71:74:f9:b9:01:27:21:b2:3f:
                    19:fb:4d:07:3f:f7:bb:da:cf:52:ef:fb:78:7e:a0:
                    79:b7:39:ef:81:c7:ac:50:76:ec:4e:cb:1e:45:54:
                    a4:ba:1e:dd:9b:ef:12:fc:08:8d:c4:8c:fb:22:b9:
                    c4:d9:db:d2:95:5d:74:2a:19:1a:e3:e3:47:9f:5c:
                    94:82:8e:c0:a3:cc:26:df:ea:51:30:48:c3:a3:32:
                    f9:b9:77:d9:7c:6f:c8:86:9a:cc:cd:10:7c:a0:d9:
                    0d:23:eb:c2:23:75:47:e3:c4:1b:14:ff:02:cd:c4:
                    61:02:3d:3b:22:79:29:67:1e:e3:2d:2f:61:fd:38:
                    cb:86:c4:6c:86:e6:b2:d6:56:18:1d:85:dc:d8:53:
                    80:28:de:c8:de:f4:35:65:bf:9b:c0:ac:68:de:c6:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:60:D1:A8:6E:07:D6:82:CE:AB:1B:4B:78:81:B1:46:0E:A0:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl

            X509v3 Authority Key Identifier:
                keyid:83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:28:3f:52:a0:74:dd:fd:94:d4:4f:c3:af:7e:21:a8:c6:66:
         b8:1a:e9:8b:cd:22:57:d5:14:1a:9d:f1:d2:9a:10:e8:2e:7a:
         fb:1c:34:1d:48:5f:fb:01:8c:d1:7d:c9:82:57:58:00:cd:8f:
         a6:ba:76:f8:c9:e3:b5:3a:65:38:3a:c7:13:e3:03:0b:60:fb:
         6a:9d:19:6b:6a:47:69:a5:7f:07:b3:93:0e:25:0d:ab:72:7e:
         cd:71:49:d9:76:43:09:8e:da:a9:3f:f9:79:c7:f7:e3:12:6d:
         a3:13:c7:b3:1e:90:a5:f4:40:62:5f:a4:07:5f:4c:a0:fc:81:
         d4:81:0f:b0:d6:52:d3:96:6a:05:67:00:61:25:45:82:bc:61:
         6b:40:1e:9b:08:c0:fb:be:ca:33:1e:2a:82:81:8a:a4:bc:e6:
         04:c6:ef:c6:53:0d:e2:35:0f:34:ae:61:c8:10:e8:1d:2a:b9:
         79:e7:5b:5d:15:0b:7f:24:a1:06:46:c1:9c:cd:7b:16:8f:ad:
         a3:c7:e7:bd:bc:65:9e:c4:40:6b:99:75:ed:47:9a:7f:7b:12:
         e3:a4:4a:86:14:0c:fd:35:5d:64:0a:78:20:3f:e8:a7:1d:2f:
         8a:69:65:03:e0:87:fb:69:33:67:e8:b4:85:f2:15:0d:bd:7a:
         2d:56:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:36:23 2026 by rpki-client