Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04bc7605-09c8-34fd-bd43-0539d6528e08.roa
File:                     04bc7605-09c8-34fd-bd43-0539d6528e08.roa (raw, json)
Hash identifier:          mss9vhgm3fPX2GcNXY7BhDFdMyOPy45vMHyAHpNE1bo=
Subject key identifier:   CB:E7:43:83:8A:02:1D:A6:D4:06:C4:46:94:2D:CD:F4:41:0E:52:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F17325296883ED09B69C8DD50
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04bc7605-09c8-34fd-bd43-0539d6528e08.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     0
IP address blocks:        47.42.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:52:96:88:3e:d0:9b:69:c8:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=c512a851-047c-47d4-8048-e14d350d3262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7b:ca:38:9c:ba:e9:ae:e9:58:73:b7:a0:53:
                    83:94:26:ac:80:62:4c:97:71:69:db:24:a6:75:79:
                    a5:f8:85:ad:14:29:91:36:62:4a:47:13:ea:37:41:
                    da:6c:d6:a4:4d:5f:91:37:76:a1:6f:eb:92:cc:09:
                    46:d4:5f:61:df:e7:c9:81:42:b8:af:35:9d:6b:76:
                    01:23:50:66:49:f0:35:51:49:24:fd:1c:3f:c5:ff:
                    6e:7a:66:00:97:c7:0b:83:c7:bb:10:98:fa:9f:6f:
                    d1:52:82:46:e2:a1:e3:d3:0a:69:b4:56:7d:19:6c:
                    ca:33:e3:b2:79:12:76:30:61:59:db:40:1e:12:40:
                    06:79:51:ac:ce:3e:1f:c3:00:c1:25:cd:d5:4c:f6:
                    53:09:18:47:b5:58:8d:d5:64:cb:5b:0c:97:b4:95:
                    c2:39:56:19:1f:2e:e9:3b:16:7d:3f:75:f6:75:b4:
                    1d:47:54:8c:e3:0a:af:ae:68:4d:77:d6:30:37:b6:
                    6a:c4:4d:e9:b6:7e:d9:32:37:9c:51:6b:9d:e0:27:
                    12:fc:78:78:13:70:31:43:5d:ab:85:5c:ee:38:25:
                    75:e7:2b:f5:46:2b:f1:49:cb:ff:af:a1:b6:f0:b3:
                    0f:b2:63:3f:d0:a4:64:40:07:41:fc:28:e3:33:70:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E7:43:83:8A:02:1D:A6:D4:06:C4:46:94:2D:CD:F4:41:0E:52:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04bc7605-09c8-34fd-bd43-0539d6528e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.42.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:3b:7e:65:ba:3c:e4:c4:cf:08:7c:25:ba:d0:7e:77:3b:
         a1:db:b0:b0:8f:77:fb:65:51:54:87:d7:f5:b9:c0:65:f9:3f:
         28:23:b3:a9:32:b9:41:9a:c2:eb:08:d7:9f:d5:a8:3e:01:2a:
         e7:aa:8a:7a:f3:84:42:c1:fe:6e:0b:d7:b6:dd:49:bd:a3:f0:
         8b:ea:03:27:d8:75:d2:80:93:74:1a:3e:de:35:22:a0:c3:d3:
         96:c7:a8:3b:3f:47:ee:8e:08:e7:d5:24:35:aa:61:79:42:a6:
         24:ec:15:d1:1f:4e:51:aa:bd:0a:f7:75:c1:57:84:d3:aa:d9:
         96:88:55:bd:92:f3:ef:ce:04:ec:f6:f6:7e:bf:68:36:fb:ae:
         12:4c:4e:ad:f8:d0:4d:91:ee:1a:22:de:82:bf:22:3e:95:8c:
         4a:07:89:7e:04:ed:9a:0a:f6:54:6a:9d:6a:fd:38:ce:31:29:
         82:39:73:23:c0:36:64:d2:ff:a4:e8:2f:ea:1b:ac:4d:f2:e0:
         18:f4:42:e0:d8:7f:fb:b6:4e:3b:98:b7:ee:39:e4:d6:6c:52:
         7b:c3:d1:24:95:cf:77:8d:67:b2:88:c7:1b:bd:a5:bc:73:4b:
         a4:4f:51:33:e0:8a:e1:d4:a6:d7:92:81:c4:77:36:82:1b:55:
         ba:76:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:18:45 2026 by rpki-client