Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fe6a30c-2110-3a81-aa75-d49a6cf9782b.roa
File:                     7fe6a30c-2110-3a81-aa75-d49a6cf9782b.roa (raw, json)
Hash identifier:          IrEx9Q5tIMFjpWRnpinBMYmRVYz9iHkUuu/628I/qZc=
Subject key identifier:   F4:6C:D0:F2:51:65:E6:5C:CF:E0:27:9F:40:7E:25:BA:44:27:49:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4C54989A5EE15C524FA5FB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fe6a30c-2110-3a81-aa75-d49a6cf9782b.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     9498
IP address blocks:        96.17.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:98:9a:5e:e1:5c:52:4f:a5:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=abc68d22-6555-4e1e-8a5a-910cc2baba90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:d5:33:ac:d2:19:1b:78:ca:55:0c:b9:12:
                    1c:db:3b:d4:93:ad:95:0b:1f:a1:43:da:d6:f6:ae:
                    34:96:b2:42:9e:36:62:2e:67:fa:dd:9b:d3:ba:d4:
                    03:19:79:7e:88:0b:73:cd:2e:c0:1f:84:12:93:74:
                    ca:a7:e1:0b:be:d0:4d:8b:09:1a:cf:47:70:39:d9:
                    ba:97:4f:13:15:f1:15:59:58:1a:da:b3:06:80:b2:
                    70:ec:67:7e:34:10:24:91:51:78:13:ab:d4:c7:bf:
                    a4:a3:e0:85:13:89:47:93:6d:7b:86:1e:fd:b4:56:
                    22:94:0b:f9:91:a3:5d:36:1a:06:dd:a4:aa:bf:dc:
                    40:81:74:f4:b3:72:f5:26:ef:9a:f1:88:29:31:33:
                    54:2e:41:78:fd:5d:65:51:d8:22:f6:ed:b7:af:bf:
                    2d:45:c1:5a:e2:65:cc:12:d3:66:44:76:73:18:49:
                    48:09:ab:29:e5:df:8c:8d:ad:07:d9:2b:92:88:34:
                    90:65:10:21:5a:13:51:c7:e3:05:52:fe:0c:65:a2:
                    2d:20:1d:a4:4f:84:23:b7:70:f8:2e:9c:a2:2c:ba:
                    42:22:bc:93:c5:1e:a1:69:f9:a1:2a:70:1c:62:d1:
                    7e:8f:2d:9f:88:26:92:43:61:14:fb:27:96:89:b7:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6C:D0:F2:51:65:E6:5C:CF:E0:27:9F:40:7E:25:BA:44:27:49:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fe6a30c-2110-3a81-aa75-d49a6cf9782b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:1e:38:bb:a6:45:af:80:c3:90:5b:95:b1:05:a2:88:30:
         20:a0:71:af:28:bc:1a:36:04:39:aa:d6:f8:dc:ce:11:24:75:
         86:40:c4:d4:97:03:50:f6:3b:61:2f:1d:f2:df:40:2a:da:04:
         ef:2f:ab:bf:c4:60:6d:f4:69:fb:ad:28:37:74:64:c5:28:e9:
         1d:4e:b4:53:02:d2:60:48:43:62:bb:1a:28:df:20:56:4d:df:
         94:ba:e2:e4:2a:c9:cb:1d:bf:8d:fa:e4:e3:ef:6c:db:6a:27:
         87:d1:79:7a:05:74:50:a1:29:21:bb:07:e8:22:1e:d0:29:80:
         b0:f9:d4:a3:98:e5:7e:79:53:30:1b:65:68:ec:80:95:cd:96:
         60:d9:d6:7b:a3:65:4b:c9:80:ff:84:e0:eb:91:12:21:0e:f3:
         69:d1:85:3b:b1:32:bd:e2:eb:75:e5:df:7e:08:5b:b0:e9:ab:
         ed:b0:af:d9:d5:8e:aa:cc:d9:75:cb:ed:69:34:79:67:04:59:
         f5:be:96:77:c1:3b:d3:40:c9:c3:fb:8e:51:c4:5b:2c:7d:37:
         b5:b4:06:3d:54:b6:4c:32:b2:06:af:ca:37:22:de:5c:ee:cd:
         0b:97:7f:ac:cb:ea:a3:ca:77:c0:3a:2a:85:56:da:b8:c5:9f:
         e1:ee:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:35 2026 by rpki-client