Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8ec4c404-cc49-3c7b-95c9-2c1aa64d1c68.roa
File:                     8ec4c404-cc49-3c7b-95c9-2c1aa64d1c68.roa (raw, json)
Hash identifier:          KAAfgqAGBIrakIeEcBODYVeFkxN3zxQ8M9V9DLvgKJA=
Subject key identifier:   FA:BC:8D:01:5E:B7:65:61:60:6F:65:EF:43:71:9A:00:36:08:15:DF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E9A7FAEDEC777B6A490C0AC80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8ec4c404-cc49-3c7b-95c9-2c1aa64d1c68.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        97.71.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ae:de:c7:77:b6:a4:90:c0:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=58be85a6-af3c-4f87-9ff1-8c1d28c41538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:6e:ee:30:40:8d:b3:2b:25:fc:ef:0b:c8:
                    56:83:4b:c6:9e:8e:c8:8a:83:16:39:7f:59:7d:bf:
                    ac:31:25:ac:b9:94:e3:59:7f:a9:6f:c6:4c:33:07:
                    40:16:08:de:d2:41:35:8f:43:b8:2e:9d:e8:6a:ad:
                    44:89:5d:9e:75:6b:7d:58:f8:75:db:cb:0e:e6:9c:
                    c8:7a:8f:57:d8:1c:d0:14:2c:a0:42:16:7c:5a:2a:
                    67:ec:2c:be:4f:e4:1e:a8:5a:e9:00:07:76:a2:0b:
                    43:22:98:7d:11:d0:4d:c7:d5:16:31:19:7e:61:4f:
                    fd:16:e2:e5:15:e1:12:51:29:6c:84:40:c1:85:75:
                    fb:05:ae:95:fd:af:06:81:a3:44:18:c5:a4:a7:9d:
                    fe:5b:21:bd:0f:cf:cd:d4:4c:14:47:c5:b2:4b:0b:
                    c9:4f:ea:00:a2:6e:eb:a1:37:ba:5b:eb:08:c0:6b:
                    23:30:04:ad:c6:ea:37:ba:d0:b1:d9:35:cd:6b:49:
                    d4:18:c6:30:d1:b3:9e:bb:68:f4:d2:0f:30:44:10:
                    ea:08:0e:05:70:f8:2e:43:5c:e3:14:b5:62:bc:a3:
                    6a:d3:ad:f7:a7:0e:68:e0:77:89:e5:cf:e5:fa:54:
                    d5:26:26:78:d1:2b:22:81:1d:81:da:71:ce:6d:d3:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BC:8D:01:5E:B7:65:61:60:6F:65:EF:43:71:9A:00:36:08:15:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8ec4c404-cc49-3c7b-95c9-2c1aa64d1c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:33:94:7f:01:46:97:bc:9d:60:8a:c2:90:3f:86:66:a3:b9:
         70:d7:4d:9a:01:f9:7a:12:93:5e:86:27:28:7c:e5:4b:eb:33:
         26:01:2b:89:b8:fe:22:66:53:71:b0:3a:74:c9:47:5e:5d:79:
         63:8a:f0:14:0e:09:1e:e2:7d:76:6c:39:10:9f:5e:8c:2b:73:
         a5:38:57:3d:0c:07:80:1a:19:d2:1c:c8:e5:30:2b:b9:c7:23:
         7c:64:7a:9c:5d:db:76:8f:5d:71:0d:98:21:3e:f1:9b:a9:df:
         1d:69:d7:5e:41:71:ee:00:50:2b:db:b0:31:13:9f:6b:bc:fb:
         67:e6:89:0f:8c:28:0f:4f:63:1d:2a:91:9b:8d:42:7e:0d:b3:
         d7:aa:e6:00:cc:47:64:95:0b:29:a6:6d:09:b1:ad:4c:12:9b:
         d2:62:af:13:67:04:66:6d:cb:8b:b2:5e:38:fd:c1:31:de:21:
         f7:0c:83:1d:ca:ff:12:50:04:44:84:2c:a4:b5:41:83:d2:46:
         a7:42:1c:77:5b:68:54:94:fa:cb:9a:d2:50:56:df:8f:dc:1e:
         c7:1d:b2:0e:db:9c:eb:dd:2a:45:ed:cc:46:86:d9:b5:df:3d:
         60:8e:e9:ae:87:b0:d2:9f:c6:90:78:08:24:21:58:47:5d:90:
         5d:6e:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:06 2026 by rpki-client