Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
File:                     b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa (raw, json)
Hash identifier:          3kB5uyzEgL02vlBOVOYFPB9jeufI54NEq8LeC1kXIMg=
Subject key identifier:   BE:24:7B:D1:CB:97:8D:0A:68:A0:3A:1A:32:71:3D:56:DE:87:94:2B
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584E921F9EDB441E7EC0EFC42A00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     395092
IP address blocks:        52.129.44.0/23 maxlen: 24
                          107.161.50.0/23 maxlen: 24
                          144.208.124.0/22 maxlen: 24
                          146.71.86.0/23 maxlen: 24
                          208.123.116.0/23 maxlen: 24
                          2607:a680::/48 maxlen: 48
                          2607:a680:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9e:db:44:1e:7e:c0:ef:c4:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=7936aca9-549a-4d3e-88df-6ed2dce25574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:a6:e7:05:3f:8d:de:1a:7f:4e:67:e6:7b:
                    eb:dd:52:0b:72:55:98:5c:28:2f:33:c2:94:8e:0e:
                    cb:c7:57:37:68:76:26:69:ea:88:c6:4e:25:53:af:
                    4a:4a:b2:d9:d5:d7:d5:a1:01:52:72:73:19:1b:b2:
                    0c:aa:a8:f2:d1:17:84:d3:47:ba:da:7a:bb:b6:a7:
                    30:ac:eb:5e:c5:b3:3e:08:14:16:99:d5:b8:1e:9b:
                    26:bb:48:ae:bd:54:37:f1:17:72:ac:29:17:fa:24:
                    14:4d:18:46:9c:6b:24:f1:69:b1:ea:a0:e4:57:5b:
                    e5:3e:ca:e7:2c:16:1d:b9:3b:21:5d:ba:b8:aa:1d:
                    ce:33:87:41:ce:76:ab:91:51:66:f2:e2:e3:ff:4e:
                    36:a1:dc:1c:93:d6:af:c6:56:ad:1a:7e:4a:2f:30:
                    ab:12:4a:ac:2c:44:ed:fc:06:6c:7b:0d:74:c4:5d:
                    85:e6:f7:2a:17:b4:69:a9:2c:14:e3:24:b7:f0:77:
                    b1:31:51:0b:83:82:78:07:44:6a:ed:6e:e6:d1:60:
                    32:67:c2:85:4d:52:77:4d:d9:9f:3e:53:27:89:b0:
                    eb:4a:53:7e:8a:88:26:36:a0:c6:03:81:5e:65:e5:
                    ec:3a:23:cb:fb:56:e3:65:aa:16:fe:ec:46:f7:0b:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:24:7B:D1:CB:97:8D:0A:68:A0:3A:1A:32:71:3D:56:DE:87:94:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.44.0/23
                  107.161.50.0/23
                  144.208.124.0/22
                  146.71.86.0/23
                  208.123.116.0/23
                IPv6:
                  2607:a680::/48
                  2607:a680:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:00:d8:7b:18:ad:23:53:4d:59:a1:36:59:eb:ce:06:14:
         7f:cf:53:2b:b4:92:d1:75:50:14:2e:fa:cb:b5:a9:a3:53:de:
         da:1a:b9:f0:eb:f4:ac:bc:8b:43:44:07:21:e2:76:0c:c9:3a:
         09:d1:db:99:cc:07:92:d9:6f:4e:0f:e4:45:d3:88:49:81:f6:
         25:31:58:1a:04:4a:be:b8:00:3c:47:89:50:e3:98:b2:95:b3:
         13:5e:38:df:a9:bb:7a:96:97:c9:92:37:63:ba:e0:73:9e:bf:
         2f:be:66:b0:10:c1:1d:d7:a8:7c:e0:76:a0:1a:52:cf:1a:9f:
         39:3f:e5:de:5b:ae:f6:09:a9:84:f6:c0:be:5b:28:1e:e0:68:
         a0:67:15:2b:ec:87:68:60:7e:18:90:e5:4b:30:ff:56:13:1c:
         f9:fc:22:8d:10:f6:ba:6a:68:62:e8:fd:36:90:32:98:20:8a:
         69:5a:68:93:17:11:a0:dd:0c:6e:4b:e3:5c:ce:a9:73:95:c4:
         3f:48:76:10:af:64:db:11:4b:a4:4c:50:73:d9:40:40:13:7f:
         31:a2:ce:ba:34:a5:b9:ba:b5:6b:58:da:5a:92:59:19:f2:1a:
         96:08:f8:38:20:64:36:57:b8:e9:a4:52:8a:36:53:49:f5:20:
         47:bf:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:13 2026 by rpki-client