Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa
File:                     28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa (raw, json)
Hash identifier:          jZD3T11H+cIHzHuhvPaCLbDobXBTOvl3u6j+gS2l/Dw=
Subject key identifier:   E7:FB:AE:80:8A:85:F7:E3:05:D3:59:DB:8C:4F:55:44:FC:BF:01:BB
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F4328584E885A475CF2A724178A430490
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     53869
IP address blocks:        199.47.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:47:5c:f2:a7:24:17:8a:43:04:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=ad65f57a-1fd0-4016-adc1-368b73032f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:67:e6:db:c3:8f:2c:89:89:1b:74:f9:a2:3b:
                    5e:35:bb:23:13:e9:3c:61:c0:6f:50:c7:b9:4a:c3:
                    51:3e:39:63:cf:0a:a0:05:ed:7a:32:55:ab:8b:49:
                    8d:3c:29:17:77:17:4b:c5:94:1b:47:a1:77:66:5c:
                    b7:c9:a0:76:ad:72:8d:58:4f:17:0a:22:99:6d:a4:
                    eb:65:ec:96:c1:f7:7e:d6:55:e2:7d:35:59:d5:98:
                    42:82:54:ac:d9:e3:1e:60:3b:5a:0d:f8:8d:34:2d:
                    01:f4:40:8f:5b:e2:95:18:fc:73:15:92:04:9f:af:
                    e4:1e:7c:1a:15:c2:36:b3:94:5b:e0:b4:c6:bf:27:
                    db:c6:13:6f:e9:76:b9:f2:d6:4a:4a:a3:7b:60:47:
                    d4:83:11:ad:43:e1:8b:04:f0:ac:2e:d7:a0:8a:3c:
                    df:0a:7c:50:c9:e6:db:45:9e:13:44:e9:2f:fa:45:
                    5b:e0:2c:07:6f:2b:ae:33:ec:03:c7:4d:c9:09:3b:
                    ed:c9:2b:7f:80:2f:e9:70:a3:ad:56:3a:e6:7b:6b:
                    7d:30:98:68:6b:39:8f:1a:b6:a7:12:7b:04:6a:16:
                    c0:6b:d6:37:90:a6:fa:61:1f:39:18:80:61:eb:cd:
                    db:80:1b:c9:16:32:f3:25:7c:c3:f1:83:d4:e8:59:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FB:AE:80:8A:85:F7:E3:05:D3:59:DB:8C:4F:55:44:FC:BF:01:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e8:a9:8e:85:ce:60:3e:1a:6e:71:8d:0d:d2:ba:ad:f4:88:
         5b:40:3b:80:90:89:cb:39:85:fd:00:10:46:89:88:ba:a4:9a:
         de:df:28:f4:fa:e7:2a:ed:ee:27:dc:65:c1:74:1b:9f:30:e9:
         67:db:fa:45:2a:44:50:8b:08:6d:ff:36:80:4d:ba:a4:d2:6c:
         92:7c:61:51:9f:7b:d9:10:15:9e:f2:a5:d4:48:23:94:66:33:
         9d:0f:61:5b:c2:f0:97:17:c0:b0:35:1d:65:ad:2b:66:cf:8a:
         b8:e9:ff:40:df:14:80:7b:03:ce:0e:16:20:91:3d:2b:cc:1a:
         70:37:b0:73:00:b0:f1:29:26:8f:d5:3f:65:8e:e5:24:cd:5a:
         b1:c4:0b:94:3c:a3:6b:4c:bc:dc:7a:b0:b0:8a:78:d1:56:26:
         d5:37:d5:d8:4b:d9:2b:3d:2d:73:4a:5a:c4:de:06:4e:e3:8a:
         19:ed:ff:34:87:d9:75:c3:c1:dd:9c:f6:54:1b:cc:b1:62:2c:
         95:e8:06:28:42:df:f8:82:a0:f0:34:a8:46:72:78:93:40:5b:
         dc:f7:3e:85:a5:df:54:ff:2b:6e:2d:fd:1f:bf:b6:f8:9b:8a:
         10:b8:1e:d3:b9:ba:3b:58:31:20:44:03:1e:43:82:c2:32:45:
         6c:ae:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:06 2026 by rpki-client