Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/7c06dfba-c600-3c03-9073-b6231e07bbdb.roa
File:                     7c06dfba-c600-3c03-9073-b6231e07bbdb.roa (raw, json)
Hash identifier:          4RH0ZzzsiOABFRPYPLXTn6Iv3nfyOh7rzq/JPTK4Ij0=
Subject key identifier:   A7:82:64:70:B3:4D:C5:49:81:D7:29:81:93:7C:E1:F5:4F:BD:0D:3F
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584E5FDF4FDBD032A58E20A8C080
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/7c06dfba-c600-3c03-9073-b6231e07bbdb.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     5050
IP address blocks:        147.73.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:4f:db:d0:32:a5:8e:20:a8:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=39b4ddcd-e7a6-465e-af62-ec85693f9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:bd:8b:f8:bd:3e:68:a1:5b:5f:fe:4f:99:
                    73:cb:89:55:bd:dc:d6:f6:e2:05:c4:4b:f5:39:84:
                    34:63:44:03:0c:23:06:c3:aa:f8:f3:b4:f8:b9:b0:
                    1f:05:1b:05:4b:23:4b:1a:d5:74:c1:a4:3f:e8:58:
                    84:e7:fe:09:15:ac:13:3e:57:ed:34:a7:f9:61:90:
                    87:18:21:03:87:05:96:41:a5:38:bd:bf:ea:e2:66:
                    61:fc:7c:61:f7:89:2f:1d:64:e2:8e:7e:d8:18:8c:
                    b1:7d:44:06:23:64:0f:10:ce:4b:56:5a:1e:b0:40:
                    c7:eb:7c:b1:28:c2:34:72:1d:a1:e8:f8:da:cb:a9:
                    17:d5:35:1d:a0:c5:83:ff:5e:0b:c1:c1:aa:a7:fe:
                    9d:2e:e2:bd:2d:50:eb:c2:32:74:b0:a5:8e:07:0f:
                    5a:c5:f7:da:22:80:17:f0:93:e1:c3:50:f8:63:0d:
                    ac:63:b3:10:cc:c3:f9:c1:33:0c:a2:bd:b1:d0:45:
                    e4:44:f4:79:f3:86:cd:0b:1c:e9:df:53:b8:60:63:
                    06:25:63:01:59:c5:1a:18:56:31:b5:4c:98:c5:4c:
                    c8:e5:50:33:4d:3d:c3:42:4f:8b:f0:97:06:43:27:
                    ae:92:58:66:b0:7f:3b:a9:61:d2:ca:aa:8d:12:ab:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:82:64:70:B3:4D:C5:49:81:D7:29:81:93:7C:E1:F5:4F:BD:0D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/7c06dfba-c600-3c03-9073-b6231e07bbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:a9:71:6b:28:5b:80:cc:88:f0:f6:46:28:17:f4:b2:cd:
         dd:ae:57:79:78:20:4a:20:34:4a:50:f5:0c:9f:99:6c:e8:87:
         e0:ea:b6:98:bb:e9:10:04:e6:70:47:ba:0b:b8:f5:d4:90:af:
         72:12:1f:fc:b8:4d:0b:bd:8f:4b:5b:8e:26:45:bb:25:5e:48:
         48:e2:b9:13:39:4f:89:87:bc:ca:bb:41:92:f1:f6:0e:72:5d:
         1d:c8:ad:31:c9:12:12:93:7a:03:81:d2:f9:2e:a0:43:43:96:
         59:11:bd:10:64:6a:93:9a:16:96:ae:0f:18:aa:d9:51:d3:cd:
         e2:96:0e:1e:03:cb:01:8b:96:f0:eb:16:d1:18:3b:3e:e4:43:
         be:7b:30:a7:29:be:8b:18:4e:0d:19:b4:57:bd:c0:40:79:12:
         a4:77:03:12:93:0f:a8:18:c6:98:0a:1c:9b:44:c8:e4:45:b3:
         1c:20:93:92:c4:b0:d3:68:08:41:d4:bc:87:f9:ef:f1:97:5e:
         68:e2:2d:69:aa:ee:f2:d0:97:81:16:11:5c:c1:09:54:49:e4:
         c6:c9:d1:ca:40:56:62:74:56:1c:8f:6d:ff:ce:8f:92:e5:ed:
         65:12:5b:1d:a7:58:28:95:30:71:2b:0e:ec:82:d7:f6:3a:9a:
         28:6a:d1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:49 2026 by rpki-client