Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
File:                     33981a11-ee98-3be8-afd7-464452a032db.roa (raw, json)
Hash identifier:          bcQogmSEKXHdX79dL3cLYfeTpPucVRKfRjLDDOqur/g=
Subject key identifier:   28:8E:1F:A2:7A:AB:3B:3D:A1:9A:59:53:C4:EA:90:25:AE:E0:62:86
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584E5FDF53E59A1C5AA2E7D09C80
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     5050
IP address blocks:        147.73.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:53:e5:9a:1c:5a:a2:e7:d0:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=4e01b09c-2210-4f54-abf7-908ca7b9be56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d2:09:b4:35:de:e0:b3:cd:b1:81:41:3d:e1:
                    d5:da:a5:31:ac:d8:9f:38:11:38:09:89:1f:3b:ff:
                    9a:4c:d5:d3:6f:3b:c9:9f:95:03:3f:50:53:58:87:
                    01:43:cc:58:8b:4f:4b:81:18:a7:1a:54:f3:63:2e:
                    93:0f:1e:b8:bd:57:78:76:37:b7:1b:59:b1:25:24:
                    a5:1c:04:f6:e8:5d:66:66:4e:c9:2e:0b:4c:b0:89:
                    0a:9e:86:f0:43:65:90:56:ae:86:dc:74:54:88:02:
                    db:2b:17:ee:73:77:8a:0a:a0:06:98:ac:c5:a4:5b:
                    34:f1:4e:d0:84:77:d8:ca:51:25:41:5c:1d:66:26:
                    b8:12:36:58:7b:e6:65:0c:3a:6f:40:02:50:66:2e:
                    c0:44:66:3c:ac:b0:54:58:d1:44:e5:56:68:e3:78:
                    5b:bc:66:f5:db:62:77:1a:02:c5:78:c4:9f:9d:eb:
                    24:6f:ea:14:66:20:a5:35:49:f5:45:be:ff:57:31:
                    ba:3a:df:6b:a4:cc:11:71:29:78:5d:64:7a:af:c6:
                    bd:69:88:30:66:08:d4:a1:b4:88:bf:4f:d1:b3:39:
                    d0:08:e0:45:62:e7:24:c3:09:1c:50:73:d4:e5:2e:
                    78:3d:d4:bc:15:2f:53:5e:e2:99:5b:9c:39:fb:4c:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8E:1F:A2:7A:AB:3B:3D:A1:9A:59:53:C4:EA:90:25:AE:E0:62:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ad:2e:06:29:41:50:1a:6b:72:3f:2e:ee:cd:61:1f:38:8c:
         db:79:45:a7:2f:81:a9:d5:d9:70:c9:4b:89:db:34:31:2e:1d:
         cf:37:2b:6a:17:78:e8:51:8d:9d:25:a0:e6:cd:d5:22:4e:f2:
         0c:71:7d:b2:2c:f1:bb:32:cf:69:d9:88:d4:2e:a2:d5:71:c8:
         25:e0:52:4b:1c:1c:1f:41:46:07:4d:97:cf:64:1b:2e:d8:f9:
         03:3d:f4:14:21:59:be:aa:0d:c5:51:70:fc:b1:c5:52:21:09:
         e6:17:75:01:ff:e4:c9:e8:9f:b6:43:9f:7e:db:8a:04:6c:f9:
         3c:20:d9:6c:4b:f1:aa:16:0a:9c:8e:b9:68:5f:76:8c:85:2b:
         aa:ad:49:3c:4a:82:a9:11:37:a7:52:8e:3f:f0:ec:3a:6f:c9:
         5d:45:de:20:93:f9:4d:11:c9:4c:d3:bc:66:e8:bf:c5:4f:6c:
         88:71:ad:37:ea:0a:83:55:27:e7:6b:d4:df:44:67:5e:a4:e8:
         33:06:ea:ac:2e:72:03:b8:21:14:ec:7e:00:76:d6:0b:86:bd:
         5d:5f:35:32:ec:c6:0a:b5:1f:46:e1:82:8c:75:87:97:15:62:
         15:9d:34:f8:f0:af:57:36:80:b7:f9:8e:97:97:e6:75:65:c1:
         78:ce:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:12 2026 by rpki-client