Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fd29b5d-4c1f-3685-b38c-2926ea7ddb10.roa
File:                     4fd29b5d-4c1f-3685-b38c-2926ea7ddb10.roa (raw, json)
Hash identifier:          2x7HCC4XiQWmPJ8hJzOP+SjbQgSgpEGR8bsQgOt0L2Y=
Subject key identifier:   AD:9D:4D:79:83:0F:03:54:51:34:7E:36:AE:1E:F9:D4:8A:18:4D:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F48C099D7D95B2F8D2C088F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fd29b5d-4c1f-3685-b38c-2926ea7ddb10.roa
Signing time:             Thu 24 Sep 2026 19:01:43 +0000
ROA not before:           Thu 24 Sep 2026 19:01:43 +0000
ROA not after:            Wed 23 Dec 2026 20:01:43 +0000
asID:                     5650
IP address blocks:        47.143.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:c0:99:d7:d9:5b:2f:8d:2c:08:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 19:01:43 2026 GMT
            Not After : Dec 23 20:01:43 2026 GMT
        Subject: CN=7e9d52b4-c866-4b97-9df7-eb5e8ca67eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:8f:b8:f4:c1:b3:e6:5e:62:d9:b2:8f:5d:
                    15:97:fd:f4:a5:bb:4f:2d:a2:f4:fd:92:87:71:01:
                    98:d2:c6:f1:66:a8:04:75:ef:c7:4e:10:a5:97:e8:
                    b1:9a:8f:24:d4:87:ed:59:c8:26:6d:de:55:a6:99:
                    28:2f:8d:05:97:72:ab:b9:12:15:89:ed:28:64:5d:
                    ef:ec:9d:4f:ee:70:d1:d5:a1:5a:ac:c9:a3:27:52:
                    40:03:fc:af:b0:27:03:69:db:d8:a1:db:c7:6f:76:
                    68:24:bd:3f:d9:3b:67:6d:66:41:be:7f:89:80:36:
                    e5:ec:39:cb:8c:4c:42:c9:49:1e:f9:51:b1:6d:d0:
                    45:25:31:23:5e:23:04:de:59:59:fc:75:46:df:3e:
                    f2:06:93:8e:05:91:08:a7:75:39:20:67:3d:b5:0d:
                    d0:73:f7:17:18:73:ba:f3:b0:ed:38:29:eb:40:2c:
                    e5:72:35:2d:9c:a1:60:5a:d4:4f:e4:ad:49:59:cd:
                    1e:35:46:1f:0a:e3:c6:a7:bf:99:48:7c:98:a8:2d:
                    28:56:96:50:3d:c7:b2:e0:45:81:f3:35:a8:bb:76:
                    a0:b9:68:ff:fd:04:41:de:87:20:4e:e7:5e:fb:dc:
                    91:18:a9:53:32:f0:6a:78:4d:85:2c:92:f2:c6:a1:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9D:4D:79:83:0F:03:54:51:34:7E:36:AE:1E:F9:D4:8A:18:4D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fd29b5d-4c1f-3685-b38c-2926ea7ddb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:cf:02:9d:d7:e4:30:bd:84:d0:f0:d8:1f:49:36:8b:c8:b0:
         40:bf:9e:ef:3b:d1:61:43:cf:4c:9c:16:ad:c8:79:a7:8f:06:
         3d:5d:5e:93:af:eb:13:c4:f0:48:71:49:49:f1:e2:49:8e:23:
         4d:f2:73:5d:4a:b5:d0:4e:24:72:da:7b:9d:76:3a:9f:85:67:
         1f:dd:ed:1b:21:93:61:3f:74:ea:82:2e:af:d5:91:84:91:fe:
         9a:5f:ff:cb:7f:e9:8a:40:80:7a:b4:5d:d2:99:c4:e5:a7:75:
         83:6a:ca:2e:1f:f1:b9:e6:88:7c:1e:34:62:c6:1f:12:be:1d:
         95:62:9f:19:8d:d2:3f:81:4f:a6:d0:ed:3d:84:98:d4:74:ed:
         29:e2:c1:a4:5e:59:17:3d:86:51:7d:ff:90:99:2d:63:2d:94:
         5d:f6:fb:52:7e:13:97:c0:89:98:82:fc:10:1f:3c:1c:b4:5f:
         97:96:d5:2e:3f:e8:49:c1:ec:80:0d:27:59:34:87:86:52:70:
         ef:1c:e5:29:82:85:26:ac:95:0f:02:2a:bb:23:53:1d:cc:1e:
         c1:0b:f2:ef:d8:57:a0:33:31:cc:58:8b:dd:9d:3c:6e:b1:ae:
         99:da:ee:4e:81:ad:1c:34:75:59:13:7e:1c:e0:35:c2:6d:f1:
         ce:1a:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:08:25 2026 by rpki-client