Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2e1a03e-e74d-3c75-bdf6-e5c05b9a0e2a.roa
File:                     a2e1a03e-e74d-3c75-bdf6-e5c05b9a0e2a.roa (raw, json)
Hash identifier:          aDrbBtGaB2rkhxvuNUdKMEUw4CXVmC1AufBA1A+XnWg=
Subject key identifier:   24:9D:5D:07:85:70:D4:62:50:2E:01:A7:4C:BF:B5:C1:B1:EE:4F:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584FA85E0A7A5AB83ECCE1CA509E
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2e1a03e-e74d-3c75-bdf6-e5c05b9a0e2a.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     22394
IP address blocks:        141.207.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:0a:7a:5a:b8:3e:cc:e1:ca:50:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=bea795da-21c8-4304-b2fc-7a12c8e52718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:1d:0d:dc:de:32:c2:60:73:da:82:01:6f:
                    1d:95:6a:6c:5a:d4:e4:07:43:68:01:a7:22:c4:09:
                    77:9f:84:b0:1f:59:b9:49:bb:28:40:78:5c:1b:86:
                    2e:ff:8d:11:cb:ea:bb:b6:e6:17:e4:1a:26:ea:a5:
                    e9:91:6f:19:12:5c:d0:6b:43:5f:0c:80:46:46:cf:
                    b7:1e:47:19:4d:93:f3:d7:27:83:6f:c1:2e:e2:1b:
                    73:7b:af:ab:71:df:8c:6d:44:82:42:d2:fb:2b:e1:
                    6e:ac:f8:2c:94:e7:2c:39:8f:50:85:32:32:94:15:
                    bd:77:ac:e2:b9:dc:d9:aa:53:63:0e:ef:8e:1b:3b:
                    92:66:ec:de:2f:49:27:36:09:a4:b1:1d:a2:c7:d2:
                    81:18:74:bd:c9:ff:ec:c2:30:0b:73:25:df:bf:a2:
                    69:b0:bd:6c:52:af:8d:44:bf:f4:2e:ba:7b:58:46:
                    cf:a0:8f:76:5e:3e:da:54:c3:2b:98:04:79:49:56:
                    bf:1d:16:24:ad:11:74:51:32:6c:92:35:27:f6:04:
                    75:5c:96:79:54:f6:ca:e5:75:6f:1d:01:c8:b9:b1:
                    32:e4:41:f6:91:91:0e:45:4f:e1:e0:3f:8c:e1:dc:
                    9b:10:96:81:44:a1:74:49:0d:0d:92:1a:1c:a2:eb:
                    ec:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9D:5D:07:85:70:D4:62:50:2E:01:A7:4C:BF:B5:C1:B1:EE:4F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2e1a03e-e74d-3c75-bdf6-e5c05b9a0e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4b:56:21:75:52:c2:9a:a3:6c:d8:34:97:55:d1:e7:b7:a6:
         a6:3b:5e:ce:2a:db:d8:49:1b:9d:62:10:a8:8f:4f:54:29:41:
         dc:cd:2b:dd:7b:db:07:54:ab:f2:f7:c7:9a:9b:a9:9b:20:da:
         8d:4a:42:da:3f:14:57:25:a0:65:ce:d0:5d:99:72:a7:8f:6d:
         bc:d1:64:17:15:53:29:e2:c0:38:fd:a2:fc:71:3b:43:d5:23:
         2c:ae:3c:c1:6a:ab:40:9a:64:ec:db:dc:8e:37:38:89:a2:21:
         1a:a4:3d:84:bf:f7:5c:d4:a5:02:34:c8:db:30:c2:91:d0:f3:
         e2:87:dd:66:d5:c8:f0:b0:e6:2b:96:94:f9:60:a7:08:4b:67:
         78:6d:a1:38:99:b7:5f:82:88:f8:48:09:b2:2c:1c:ba:db:83:
         4b:b5:b4:43:a6:a1:72:4f:7f:bc:e1:17:21:28:a1:28:f1:bc:
         05:d5:64:17:2a:26:a8:1e:af:a5:3a:ec:da:b4:21:bb:4e:75:
         24:8c:44:c6:0d:84:ac:04:3b:87:94:c3:5c:10:f7:3d:1d:71:
         57:e9:44:9c:23:41:03:37:42:cc:60:0f:40:64:51:42:f6:89:
         79:eb:00:39:ef:1b:b7:47:0f:a4:17:16:3f:21:4f:3e:de:be:
         83:29:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:47 2026 by rpki-client