Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa
File:                     a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa (raw, json)
Hash identifier:          aYY9fZjjXIio9USUcBsKojVVL2z4WAszTc7iZCZIOpg=
Subject key identifier:   AD:2B:6F:13:4F:E5:7F:04:6D:FD:C1:12:7D:FF:D8:65:FA:51:3E:4D
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584E815F9752A9C783250A4C19AC
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     134450
IP address blocks:        172.84.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:97:52:a9:c7:83:25:0a:4c:19:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=8d0da380-c938-42ca-a8e9-bf2615afa007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:93:90:19:42:f7:15:50:6c:4d:1b:e8:9c:
                    fe:b0:28:11:fe:bd:0f:68:2c:f5:b2:46:4b:da:5c:
                    46:8f:ed:0e:02:e7:24:3c:a8:b1:7c:57:fd:fb:fc:
                    b1:84:4f:52:88:6e:67:ac:59:e0:29:18:05:9d:12:
                    64:f5:4d:0e:f8:89:d7:90:09:93:2e:97:af:e6:36:
                    9b:10:19:b7:1e:30:3e:d1:43:25:a8:5b:d8:ce:a6:
                    79:d3:5a:8b:bb:68:f5:98:d1:80:cd:c8:2d:42:d3:
                    45:cc:7e:4f:b1:8c:f2:e0:83:9d:2f:b8:3d:75:99:
                    bd:98:6d:ff:7d:12:12:f9:05:b3:7e:ed:5b:44:27:
                    44:91:97:b9:e1:38:af:0f:ab:8d:24:4b:6d:cf:13:
                    0f:ba:3a:1d:69:33:21:b2:77:5b:63:01:eb:e6:5d:
                    36:83:f1:8e:82:4d:c3:2a:87:50:bb:23:27:f4:4b:
                    bd:39:56:45:bf:ea:5f:fc:c2:32:3a:9e:93:e0:0e:
                    b5:2c:f6:1e:7b:66:f7:bc:ca:7e:a8:aa:b5:11:fe:
                    0b:08:57:94:ad:d9:69:b8:98:13:39:13:e4:0d:80:
                    22:c0:30:f9:91:75:2d:69:06:7e:6a:cd:9c:9f:c4:
                    ab:27:ac:bc:1b:e3:83:eb:28:b8:ad:52:22:28:57:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2B:6F:13:4F:E5:7F:04:6D:FD:C1:12:7D:FF:D8:65:FA:51:3E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:dd:7e:5b:1c:0d:ed:2e:34:72:61:23:e1:2e:2c:7f:0a:
         68:9a:fa:ef:1d:53:15:7b:a3:fe:10:08:78:4c:7a:38:59:a3:
         db:9d:18:55:f0:67:29:cb:78:82:d0:02:60:83:2a:da:fd:a7:
         97:69:06:bf:04:f1:09:f7:bd:37:16:ce:4f:c7:62:43:5a:88:
         fa:2b:87:96:75:7a:2d:3e:94:70:6e:ec:29:68:84:d1:34:0a:
         f7:3e:06:06:58:cc:c6:37:05:ed:54:7a:cc:06:09:48:f3:97:
         c2:d2:70:8e:75:23:0d:62:5c:91:47:0e:4e:2e:89:25:cb:99:
         6c:83:72:e5:43:86:07:3d:b5:09:eb:ea:4e:23:e6:15:dd:27:
         50:b8:e3:41:ff:e0:7b:8e:9a:14:9b:0d:88:21:f8:7c:21:67:
         df:2a:68:c2:9e:32:a5:d2:b0:bc:6a:5e:a3:bf:68:e7:94:41:
         ac:30:ba:e4:ed:e1:9a:34:a0:7d:5f:a4:72:f1:71:b0:64:c6:
         2a:56:c2:ad:4b:d7:22:44:8f:f0:56:9e:92:04:b2:f8:1f:3b:
         0f:fe:b1:5a:75:f2:45:a7:10:b6:7d:cf:08:67:97:5e:7d:3c:
         2d:aa:b0:85:3c:dd:63:65:d9:a1:26:5f:e0:fe:92:58:d8:b8:
         76:8d:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:23 2026 by rpki-client