Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/ecc3e4df-c715-3a6c-9e5d-f9cf4c606aa8.roa
File:                     ecc3e4df-c715-3a6c-9e5d-f9cf4c606aa8.roa (raw, json)
Hash identifier:          NZ3mDezIh2B6hbrpf3CrkW5VXqxw3bcbmNI+Ik0QQ90=
Subject key identifier:   F6:63:89:25:DA:1F:F8:C3:02:27:AB:3B:65:F5:5B:04:E8:D8:83:CC
Certificate issuer:       /CN=747cf66b-8b70-4152-8d84-40f9e50bab6d
Certificate serial:       010D0C9F4328584D8D9001FB106E4E5BFCFA5A80
Authority key identifier: D9:1E:8D:16:C0:4A:50:7C:EB:9B:09:0A:FB:7B:E5:87:8F:C3:BF:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/ecc3e4df-c715-3a6c-9e5d-f9cf4c606aa8.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     5777
IP address blocks:        147.234.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/747cf66b-8b70-4152-8d84-40f9e50bab6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/747cf66b-8b70-4152-8d84-40f9e50bab6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:90:01:fb:10:6e:4e:5b:fc:fa:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747cf66b-8b70-4152-8d84-40f9e50bab6d
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=728dc2ca-75de-4630-895e-bd39810d20ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:c8:b8:9e:df:db:78:b7:7b:66:76:59:70:
                    ff:de:92:9e:3c:29:2d:06:f8:20:bd:57:1f:f5:29:
                    2e:8a:33:63:35:1c:c5:ae:48:74:3c:73:49:16:86:
                    1b:9e:42:36:75:d6:11:df:39:87:66:bb:c0:32:8d:
                    65:49:d4:97:39:4a:a4:67:0e:6c:3c:f6:43:a4:00:
                    97:7c:f1:6b:33:7e:93:2f:08:5f:bc:c1:f4:02:aa:
                    10:b7:47:5e:04:ac:02:e1:e8:1e:04:e0:48:13:9b:
                    5a:a8:23:56:e9:fb:a9:b8:b0:d6:68:01:b1:74:ab:
                    68:8f:c5:d2:67:8b:19:15:b6:5d:54:4e:5a:ff:48:
                    5e:b9:e1:b3:dd:d6:0d:34:4c:e0:df:af:75:70:50:
                    ae:03:3b:75:fe:66:6f:6e:f5:ae:75:7e:ce:19:e1:
                    72:33:c8:3a:87:32:2a:65:a0:ab:d8:e9:ea:9e:11:
                    8f:92:b3:12:7d:80:87:4f:2d:d8:8e:75:6e:df:8a:
                    5f:01:35:b5:b3:16:f2:cd:45:33:45:c0:ab:63:84:
                    02:ab:f2:c7:7f:0e:39:75:d4:ee:1d:09:a7:be:98:
                    2a:53:68:b6:b0:c2:45:91:d7:af:fb:1c:07:22:ab:
                    77:71:81:a6:c6:8c:0a:3f:35:0a:97:68:3c:b2:2d:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:89:25:DA:1F:F8:C3:02:27:AB:3B:65:F5:5B:04:E8:D8:83:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/ecc3e4df-c715-3a6c-9e5d-f9cf4c606aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d/747cf66b-8b70-4152-8d84-40f9e50bab6d.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1E:8D:16:C0:4A:50:7C:EB:9B:09:0A:FB:7B:E5:87:8F:C3:BF:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/747cf66b-8b70-4152-8d84-40f9e50bab6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.234.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:39:4e:28:27:98:eb:7b:ff:7d:3d:8d:dc:c6:87:ef:5a:6d:
         d7:01:c1:64:e1:11:b4:66:78:67:98:0e:f7:24:a7:9c:41:a2:
         75:bb:62:62:56:af:41:29:40:b8:1c:6a:3a:fe:77:35:f6:74:
         18:ab:80:84:fd:7a:c5:16:88:09:b9:c2:92:11:88:d3:74:5e:
         da:72:10:69:87:81:f2:0c:ba:93:6c:e1:87:a7:14:ab:aa:ae:
         1b:51:99:51:6d:e1:57:ef:d0:b0:7d:62:e9:cb:8c:e6:b2:12:
         93:78:46:71:4b:d2:8f:35:08:25:d0:e1:a9:42:75:a2:ee:c1:
         ac:ad:4c:77:53:03:35:20:25:4a:54:30:93:b5:fa:12:25:39:
         2b:1e:2f:69:59:77:07:6f:84:55:89:49:35:f8:65:e0:37:27:
         ed:54:b1:f2:6b:f6:f3:9a:23:fe:c8:5a:bc:32:ce:d7:33:96:
         59:8c:35:36:b4:83:f8:f3:6f:46:5a:c4:be:6a:1b:7f:30:09:
         12:33:91:12:59:d9:5d:cc:a6:44:e0:04:35:af:f2:f3:d3:53:
         df:77:6f:0c:dd:2c:de:25:49:67:f8:b1:70:64:b2:1b:06:36:
         ff:12:08:7c:59:7a:12:44:3f:38:f0:da:eb:d7:f7:e0:c6:87:
         a7:3f:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:17 2026 by rpki-client