Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/feeb50e0-aa90-3e40-a656-4961b71ede8d.roa
File:                     feeb50e0-aa90-3e40-a656-4961b71ede8d.roa (raw, json)
Hash identifier:          gfLyJYIc9V29GHAU81AYCwszgkY8xaRNDZ+Gx8XCvDU=
Subject key identifier:   5C:6A:04:18:31:8E:8E:B9:A9:C0:34:63:F0:B6:56:9A:13:20:86:BD
Certificate issuer:       /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
Certificate serial:       010D0C9F4328584E97B4FE1A13BD97C606F59E80
Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/feeb50e0-aa90-3e40-a656-4961b71ede8d.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        173.213.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b4:fe:1a:13:bd:97:c6:06:f5:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=fdcf3073-268e-4788-afff-718f5947b5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:cb:57:f8:91:25:21:64:c7:cc:9c:05:25:
                    32:d5:14:ba:a7:82:a1:9e:5a:c1:d0:9e:fe:c1:31:
                    65:25:79:12:c1:0c:91:f2:df:c0:d2:d5:6f:ca:4a:
                    a7:3f:0e:2a:f8:c3:54:ad:84:99:0e:da:8b:ee:84:
                    08:12:46:71:7b:54:0b:1e:44:c6:64:1a:47:06:0e:
                    f2:4f:68:7a:39:70:cc:5d:3a:06:89:4e:85:31:1e:
                    ca:5f:55:35:41:39:c0:ad:1f:52:05:3b:a7:81:8a:
                    18:95:19:6b:1f:56:57:69:ef:4c:00:47:86:f4:6c:
                    88:64:7c:0b:25:41:2d:a5:ea:30:58:1b:dd:06:a8:
                    75:f9:e0:1f:5a:2a:18:bb:c7:1e:b0:b9:9c:59:b3:
                    36:b1:28:dc:56:86:17:73:be:a9:3d:7a:85:0c:21:
                    dd:19:d3:d5:de:b4:cb:c3:9e:75:7f:a5:0c:25:ee:
                    60:5a:be:c5:3b:2d:14:d4:fb:87:b2:88:49:04:4e:
                    84:13:40:7b:fc:d6:bd:52:9c:94:de:7e:d0:e5:da:
                    b4:ce:10:55:c5:a4:64:e8:27:f4:ba:91:21:d9:d0:
                    fb:b9:08:df:f9:f5:74:dd:1a:ce:a5:a2:a6:8d:88:
                    c3:b6:7e:c4:f6:cb:f9:16:a4:e3:ac:61:67:7c:99:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:04:18:31:8E:8E:B9:A9:C0:34:63:F0:B6:56:9A:13:20:86:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/feeb50e0-aa90-3e40-a656-4961b71ede8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl

            X509v3 Authority Key Identifier:
                keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:db:16:34:26:86:df:cb:63:a0:f4:1b:ec:49:cd:4c:bf:82:
         bc:04:13:2d:d8:c3:95:64:98:8a:1f:1f:e7:fa:a6:be:f3:a3:
         bd:c7:3e:13:2a:42:0a:ec:ce:a3:56:ba:a5:ad:ec:6d:a0:fd:
         3d:9c:23:f5:86:30:ec:58:a7:9b:6d:0a:91:5d:1b:16:85:7e:
         aa:19:0e:e0:12:ff:21:af:97:1f:a9:59:14:e8:48:24:3f:1a:
         eb:50:37:ac:6e:c9:f8:e0:24:2c:00:28:82:20:8f:7e:b2:ae:
         45:c5:42:21:e3:53:44:6e:d4:3a:0f:35:9b:e5:5e:6d:94:81:
         27:7b:ca:ee:60:fd:72:47:24:79:66:aa:bb:9b:2b:d7:e5:79:
         96:4c:f3:d5:7c:05:67:c9:d5:97:e2:51:01:68:4d:ce:df:6b:
         93:2a:5e:d5:f5:f6:64:85:ad:48:64:8d:cc:44:63:c3:fc:6f:
         ce:47:11:37:7e:b4:98:af:ff:99:37:76:d0:49:35:5a:c2:35:
         9e:7f:6d:10:d4:4b:29:89:4d:4e:fa:3f:40:08:f2:0f:89:39:
         61:cb:9b:f0:b7:38:f6:b7:e3:6c:35:b9:4e:23:1a:36:e4:67:
         9c:04:2f:12:b3:91:13:c6:a3:3f:4a:01:f7:e4:43:28:e9:b5:
         60:ce:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:51 2026 by rpki-client