Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
File:                     d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa (raw, json)
Hash identifier:          4a7NIuWiG44n/vZk4WrNv8qb/V2a0bCkwMrU54V+OsA=
Subject key identifier:   4D:AD:7D:7C:24:FE:4A:72:F6:D0:8F:78:F7:9A:80:AC:54:F0:2D:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05CC45DA204738F269BE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        141.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:cc:45:da:20:47:38:f2:69:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=3400e650-fcac-41fb-ae83-5966b488bfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2b:ed:a6:44:f2:4e:75:e1:98:5f:34:18:02:
                    91:8b:68:a7:bd:db:f8:33:17:d5:42:5d:1d:0d:da:
                    00:c5:d0:e3:cc:0c:d8:3b:17:dc:81:6c:01:24:98:
                    96:8e:14:f6:d0:65:cc:cd:37:88:f4:d1:80:27:89:
                    cb:f6:46:08:9b:ea:47:ba:9c:b7:ec:72:4e:75:92:
                    3a:52:9b:c7:20:ad:88:a3:04:f7:b8:46:87:7c:a9:
                    ec:e9:e2:00:be:8d:29:85:ca:68:88:10:57:03:5d:
                    c2:f0:15:7f:ea:8b:59:21:fe:8d:74:f8:4b:3a:7a:
                    d7:30:c9:e8:36:e8:b6:c1:31:aa:b9:eb:5e:af:b1:
                    eb:46:f2:a0:a5:d4:12:e1:61:e1:45:d1:06:38:a1:
                    3a:44:2c:69:73:a4:14:72:a8:c8:34:9e:18:38:c3:
                    9f:50:8e:70:95:63:c7:5e:d9:fc:54:dd:0d:96:93:
                    07:df:e7:51:c1:ed:6d:44:33:fe:16:19:a6:9d:f3:
                    c8:93:54:88:f9:f7:51:5f:92:a1:cc:ce:83:be:b8:
                    f8:74:f9:89:30:19:a8:08:c1:9a:e9:67:cd:3a:ee:
                    53:8e:79:c8:ba:9f:e7:ea:cc:a4:77:c9:1d:59:a8:
                    fe:ac:92:46:a2:e3:55:02:bb:86:7b:ef:4a:da:d6:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AD:7D:7C:24:FE:4A:72:F6:D0:8F:78:F7:9A:80:AC:54:F0:2D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:95:89:b7:7b:c7:69:fc:d3:1f:74:11:8b:56:24:11:3a:38:
         d7:7f:b2:9a:5c:a7:d5:24:51:6d:8b:a9:e9:61:3c:a7:88:32:
         fa:55:d8:09:97:19:e1:ac:dd:78:a6:c2:cc:b6:6d:3c:85:96:
         ce:82:44:63:6e:b2:d4:7c:a2:3b:65:f8:eb:73:28:eb:73:eb:
         04:64:a1:2c:58:02:97:2b:5c:a9:2a:ca:cb:e9:b0:f9:af:76:
         99:a0:9c:73:26:1d:9c:b1:4e:ad:53:19:8a:90:24:c2:b7:77:
         2e:69:86:ab:fc:5e:88:fc:6e:6f:69:53:a0:73:7e:28:08:3d:
         a1:6f:74:4b:7a:ae:43:2c:52:41:66:e8:cd:59:8b:fd:96:04:
         09:06:ce:01:5d:c7:a7:1e:26:3c:96:bd:c5:5a:af:b3:d4:02:
         41:9b:cf:54:67:3a:c2:66:12:8c:61:99:37:f4:90:bc:1b:02:
         73:7f:77:19:ae:ba:17:46:5b:e3:43:e9:12:5e:88:89:ec:a6:
         5c:47:42:52:2f:56:f9:5f:af:04:c3:9c:7b:5d:5b:b1:a1:40:
         e5:85:61:7d:a5:da:00:fc:18:5e:40:d0:18:aa:36:31:90:e5:
         6b:3c:6c:ff:f6:42:78:9f:51:d2:7c:e3:c4:31:14:c1:c9:51:
         fa:77:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:11 2026 by rpki-client