Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/17917937-3e41-37bd-99b9-b5ae9e23c408.roa
File:                     17917937-3e41-37bd-99b9-b5ae9e23c408.roa (raw, json)
Hash identifier:          v/66fCXvV98en9QmPNo6HzkBbKbR8DJqdn3+FLbB4ts=
Subject key identifier:   DF:5D:B6:82:E8:5A:E4:6D:56:A9:51:B7:85:DA:D7:3A:2F:B4:86:77
Certificate issuer:       /CN=7f9bfed5-7587-48e5-9b67-f2ef1b415fea
Certificate serial:       010D0C9F4328584E5E5F2D6CF6843E6288061380
Authority key identifier: C8:2B:CC:FA:69:DC:6A:B8:47:0B:0C:40:1E:08:51:3F:1A:9B:3A:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/17917937-3e41-37bd-99b9-b5ae9e23c408.roa
Signing time:             Thu 02 Jul 2026 20:06:16 +0000
ROA not before:           Thu 02 Jul 2026 20:06:16 +0000
ROA not after:            Wed 30 Sep 2026 20:06:16 +0000
asID:                     22040
IP address blocks:        169.128.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:5f:2d:6c:f6:84:3e:62:88:06:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9bfed5-7587-48e5-9b67-f2ef1b415fea
        Validity
            Not Before: Jul  2 20:06:16 2026 GMT
            Not After : Sep 30 20:06:16 2026 GMT
        Subject: CN=dce1e00d-fdc3-4326-bb8d-f66652eec3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:2e:e6:b1:e6:d6:bc:e7:b8:cd:98:99:9f:
                    e0:51:f2:f4:19:8e:8f:55:b3:a3:bf:c7:2a:b6:44:
                    6e:f9:ff:d7:73:80:c7:cf:96:af:0e:53:68:43:74:
                    37:46:22:66:e3:27:3b:54:af:33:7c:7b:aa:14:7e:
                    e7:23:0e:86:5e:a2:1a:78:ef:1a:09:ca:14:9f:c7:
                    1c:31:7a:5e:d7:71:e1:37:f0:bb:70:a3:39:ed:64:
                    72:2d:96:58:57:23:ec:1b:07:9f:d5:71:db:24:a1:
                    c6:cc:94:e2:68:06:f8:d2:17:f7:6a:df:8a:3e:e9:
                    65:9c:87:e4:d7:c6:90:57:e8:2f:52:1e:be:dc:b9:
                    f4:7e:48:d2:bd:c3:d3:e4:02:d8:b0:cf:3d:2f:c7:
                    dd:4c:34:25:8a:fc:ee:49:14:f8:ba:3b:d9:b9:52:
                    44:5f:cd:d6:68:b3:3e:d8:9c:19:5d:6e:08:75:44:
                    7e:cb:5d:3c:4e:00:68:bf:24:3f:ba:99:9a:da:a4:
                    8d:ef:a3:ab:1c:a1:ee:a0:2c:95:b2:cc:78:e2:bb:
                    3e:f4:0d:c3:71:c0:6d:f4:9b:4e:1b:2f:46:ed:95:
                    d0:05:76:7b:38:34:43:59:93:f9:b6:0f:de:06:9a:
                    60:97:85:52:47:e5:42:da:ca:c6:d1:2c:1d:b9:93:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5D:B6:82:E8:5A:E4:6D:56:A9:51:B7:85:DA:D7:3A:2F:B4:86:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/17917937-3e41-37bd-99b9-b5ae9e23c408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.crl

            X509v3 Authority Key Identifier:
                keyid:C8:2B:CC:FA:69:DC:6A:B8:47:0B:0C:40:1E:08:51:3F:1A:9B:3A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7f9bfed5-7587-48e5-9b67-f2ef1b415fea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:03:d0:4f:77:8d:db:1b:1c:9e:d4:b5:44:71:46:64:8a:
         96:ae:c7:b6:65:de:f0:39:bf:e1:9b:25:b4:93:00:83:83:1a:
         8c:bd:dd:62:8d:c2:23:f8:d9:3c:14:f2:01:bd:2e:3f:16:73:
         56:50:32:7b:a1:f9:d4:49:d5:c6:9b:77:e4:14:f0:e9:12:d2:
         6a:30:a8:d4:49:f9:a3:e4:07:2d:00:01:eb:a1:e5:37:d3:c3:
         ac:1f:86:bd:18:25:cd:e2:bd:09:d8:91:dd:df:91:ec:b4:52:
         53:ee:5f:58:f7:88:36:24:55:35:f2:28:ec:1a:a8:ca:95:9c:
         c8:51:5e:78:a6:c8:7e:67:99:2a:f0:31:ba:8d:72:1a:2c:26:
         c6:9f:86:d7:d2:84:90:cd:dc:c5:56:3a:93:67:59:c8:d0:52:
         10:c4:9f:ea:85:e7:c2:d5:dd:84:52:1e:73:82:39:27:e4:3d:
         3c:3f:74:fb:4d:eb:48:0d:0b:37:b5:43:76:7f:96:86:ef:ff:
         a0:46:66:89:37:ac:0c:a2:33:b4:a2:de:78:bd:7f:1b:cc:0c:
         ec:e5:23:11:d7:71:f1:50:0d:28:18:1d:be:8f:44:7a:7c:ab:
         91:f5:63:9f:8a:c2:cb:63:cc:65:a0:f0:55:6a:4c:ed:a8:fa:
         4e:ac:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:43:25 2026 by rpki-client