Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83973eb3-b20d-3fe6-84ab-e56dbd0a5dc3.roa
File:                     83973eb3-b20d-3fe6-84ab-e56dbd0a5dc3.roa (raw, json)
Hash identifier:          a+wXqF49O/atYnrIQc1vtFZ/Q+6wujzbRKTaSXpv/8o=
Subject key identifier:   AA:FC:FF:29:69:D7:21:D3:94:65:4E:50:CF:82:F8:EA:0F:93:7D:8D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D97555594F5CD01327466C700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83973eb3-b20d-3fe6-84ab-e56dbd0a5dc3.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     33363
IP address blocks:        47.248.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:55:94:f5:cd:01:32:74:66:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=f9321e46-c6ce-4ce4-9ae1-29c3c845781e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:66:69:b5:72:ee:3a:31:06:e5:4b:f0:b8:
                    8c:70:4f:e9:5a:9d:d6:1a:a6:e4:23:0b:06:8c:26:
                    c6:40:6e:4b:63:f3:87:7f:45:2c:db:17:0f:63:c5:
                    31:48:86:6e:da:66:6b:68:ae:6a:9a:27:84:ed:3a:
                    e7:03:78:4e:1e:8b:ce:f1:25:95:49:45:7d:b0:f3:
                    08:d5:2e:15:04:25:27:57:72:07:e2:58:fb:1a:97:
                    46:a2:9b:24:ad:01:43:84:9f:72:5e:2d:c5:ed:6a:
                    4c:1b:21:a3:9e:a6:cd:a8:b1:3d:e0:43:b9:15:3f:
                    3c:e2:fd:98:50:de:c3:72:52:17:b2:52:c2:35:87:
                    3d:22:01:a1:18:e7:33:ff:9f:7f:9f:18:4d:81:4e:
                    f9:28:a1:79:b6:d2:96:ec:61:1f:6f:32:10:7c:7b:
                    7e:8b:cb:65:f5:4f:cb:2d:47:22:62:5d:31:14:55:
                    a8:89:e5:e5:7a:2c:d6:5c:22:02:e2:a7:94:0c:df:
                    de:d0:d5:00:79:bf:aa:9d:c3:06:3d:79:d7:d2:9b:
                    90:47:5a:54:1b:53:b2:b9:37:52:15:b9:74:bb:2c:
                    3d:03:2a:01:07:b0:ce:13:60:08:2e:aa:8a:43:be:
                    e7:4e:b7:81:e6:58:9f:f4:3b:a6:b8:6f:52:ba:b6:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:FF:29:69:D7:21:D3:94:65:4E:50:CF:82:F8:EA:0F:93:7D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83973eb3-b20d-3fe6-84ab-e56dbd0a5dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.248.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:23:8d:c5:89:91:74:db:93:2a:3d:92:84:eb:a8:26:6c:
         4b:68:ca:36:7c:37:de:71:ae:58:09:1d:58:7b:9e:88:fd:9d:
         c8:c9:1f:2c:b1:c6:80:71:be:c5:b3:de:bd:a6:ea:20:11:39:
         0d:d6:1f:eb:10:23:82:1f:ad:1b:23:88:94:10:1c:63:85:c1:
         3f:d7:d8:4a:15:c5:d2:51:f7:68:16:b4:2c:8b:3a:85:a4:70:
         eb:93:48:eb:45:bf:0a:06:9d:7e:a1:01:6f:a2:35:e3:70:6f:
         47:87:d0:8f:00:e3:1b:2a:20:ca:2d:1b:14:0c:b3:43:6b:70:
         03:3d:3d:b7:0e:d9:c6:9c:22:5a:9e:30:32:b3:f1:83:a6:49:
         a6:07:39:f4:88:c2:f9:23:06:c7:40:da:ed:e8:f8:19:d6:f0:
         bf:cf:a6:a2:f3:b4:6a:b6:75:c5:3f:d7:2f:e9:87:9b:8a:51:
         b2:a4:b4:b1:ff:13:1e:90:7d:64:2f:41:5b:ed:18:84:01:9d:
         64:8b:53:87:03:d6:f0:ea:45:f6:42:14:48:9b:d3:d5:0f:bf:
         f0:56:81:5f:b2:f5:89:80:b2:fa:68:da:ff:3b:3d:87:9a:f9:
         63:10:9f:9a:9e:44:cf:ce:6a:4c:60:a8:0f:04:cf:3a:01:aa:
         e9:7e:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:32 2026 by rpki-client