Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c7602d02-1c9d-3b84-af3d-046d07d25405.roa
File:                     c7602d02-1c9d-3b84-af3d-046d07d25405.roa (raw, json)
Hash identifier:          SI/7Wyg6BKn3VJ7dFtiTOfaTY35LQOQ32PpPQqh/C94=
Subject key identifier:   1F:67:3D:47:79:74:86:9F:63:36:CE:4F:15:C9:B5:0E:24:86:DE:F1
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E958D4830AF4D6F789E5E3000
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c7602d02-1c9d-3b84-af3d-046d07d25405.roa
Signing time:             Wed 22 Jul 2026 14:28:37 +0000
ROA not before:           Wed 22 Jul 2026 14:28:37 +0000
ROA not after:            Tue 20 Oct 2026 14:28:37 +0000
asID:                     398721
IP address blocks:        217.28.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:8d:48:30:af:4d:6f:78:9e:5e:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 22 14:28:37 2026 GMT
            Not After : Oct 20 14:28:37 2026 GMT
        Subject: CN=01c75014-da04-4b3c-9279-9f6d57a11c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:b1:dd:90:0c:2a:43:9d:6f:bc:7d:9e:83:
                    9e:af:83:02:32:8e:ae:3c:5a:5e:7a:77:66:b6:32:
                    61:f8:37:71:5a:05:9b:2e:0c:93:f5:a1:d8:63:82:
                    74:50:ad:61:32:30:6b:83:9d:0f:60:12:4e:cf:b4:
                    e0:39:2c:eb:9a:5f:5d:83:3c:a1:49:c9:43:4f:89:
                    0b:d6:25:93:7f:bc:3c:ee:16:9a:60:92:53:26:11:
                    b1:1a:af:a9:15:d4:e0:38:55:66:97:ce:4c:31:ec:
                    46:61:8c:bc:fa:f9:ca:3f:5a:18:21:00:08:ca:0e:
                    bf:fd:f7:cc:5b:0f:28:bd:b5:2d:76:fa:ea:6c:1d:
                    05:b7:7d:8f:95:e7:c0:9c:40:51:19:3f:01:3d:aa:
                    de:5f:74:cd:ef:8b:61:45:d0:2b:0f:ec:06:04:33:
                    bb:4c:e1:08:08:83:84:35:47:29:64:47:d5:d2:7a:
                    5a:e6:9e:13:f0:2c:d6:61:07:8f:2f:c9:48:9a:b0:
                    26:4b:b0:f2:89:3a:ab:cf:b7:86:1d:55:dc:ac:bd:
                    2c:9c:a5:3f:22:0b:a1:88:a8:8d:35:9c:4c:b3:1f:
                    05:48:b6:e4:d2:5b:bc:2e:18:1d:1e:f1:d5:84:62:
                    5e:4a:9b:9b:41:d8:2f:19:e0:3d:44:46:59:1b:99:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:67:3D:47:79:74:86:9F:63:36:CE:4F:15:C9:B5:0E:24:86:DE:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c7602d02-1c9d-3b84-af3d-046d07d25405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.28.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:1f:c0:43:70:54:a1:d2:45:2c:75:e4:0a:ac:03:b1:15:57:
         39:32:e9:b2:d2:eb:00:b9:dd:8a:96:23:07:5a:61:df:dc:67:
         1c:f8:d2:f2:da:71:6c:9e:1b:5a:56:c2:0d:29:03:01:f6:0d:
         bc:6f:f9:ed:f9:18:47:78:ab:01:d1:86:ad:f9:2f:5e:0a:2e:
         5f:f3:71:01:74:c8:ec:79:cc:fb:bc:48:68:9a:32:a7:38:dd:
         67:0f:52:e3:7a:ce:4b:44:42:20:3b:03:be:33:81:6b:57:f0:
         3f:be:62:d3:70:88:b3:9c:c0:93:ef:1c:8f:71:2c:88:83:51:
         ab:7c:16:30:f2:91:d4:2f:9d:77:11:76:26:af:74:69:6d:df:
         4c:54:2a:39:34:95:a2:d1:c2:8d:98:06:5d:7a:59:72:6d:e5:
         3e:73:8a:d2:a4:75:19:23:22:d0:9e:a6:12:6c:a6:cb:63:f9:
         6b:3b:33:07:05:11:cf:81:17:42:6f:af:af:73:ba:09:73:b0:
         21:66:b1:52:9d:09:87:f8:4f:65:9e:75:59:cf:db:44:80:24:
         18:a8:97:39:27:95:3e:21:66:77:a9:c3:70:17:d7:d0:ec:26:
         f3:ae:62:26:9e:d5:03:36:94:9a:8c:45:c1:98:58:0e:75:fb:
         9e:31:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:50 2026 by rpki-client