Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13893d4b-a3e0-3d4a-92b0-ca26a871454d.roa
File:                     13893d4b-a3e0-3d4a-92b0-ca26a871454d.roa (raw, json)
Hash identifier:          wQY8DTcFXTMXF4P4a6Swx/Yk+7IeyQdjbYagpDAJHC4=
Subject key identifier:   78:05:47:CA:AF:57:AC:99:7A:EC:12:B0:BA:EA:97:40:70:2E:A3:45
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A582CB405AC8B62824C00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13893d4b-a3e0-3d4a-92b0-ca26a871454d.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:58:2c:b4:05:ac:8b:62:82:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=798559b9-86ef-4a06-85c5-5ce92459e61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:ce:d9:a8:92:d0:d9:14:fa:fe:09:38:73:
                    79:8d:69:79:c1:89:34:01:b7:ff:62:dc:85:9f:1e:
                    9b:a7:28:9b:9e:d5:d4:c7:e7:aa:d0:68:26:2b:51:
                    e8:00:ec:77:17:b6:0d:23:ea:53:df:11:2e:a3:37:
                    51:38:09:35:d8:5a:f6:b8:74:df:f3:19:5f:17:1b:
                    e2:12:2e:dc:21:3a:c4:5f:a3:a0:92:b4:c4:1e:67:
                    a5:76:34:83:94:2e:a2:f4:82:37:8c:aa:02:ee:dd:
                    2f:2a:f8:4f:99:69:2b:d0:10:a4:15:47:b2:2e:da:
                    b3:ff:01:b5:d3:2a:96:a5:de:7f:df:90:6a:55:06:
                    b1:a8:f2:bd:78:49:19:46:a7:c3:e5:4f:5e:bd:d8:
                    7a:a7:39:1c:73:13:1d:6e:68:a0:2f:b8:25:b7:32:
                    06:c8:0d:43:06:ef:fd:3d:b2:58:b0:60:be:2a:b9:
                    27:76:cc:12:56:32:ea:47:8d:3c:de:cc:5c:01:5a:
                    d2:1a:a1:91:cb:ea:90:5a:de:04:ac:bc:5d:e2:a4:
                    3b:84:b9:35:ca:20:6e:d4:4e:31:79:25:0b:4e:c9:
                    2b:51:0a:98:dd:14:09:51:63:30:36:73:f2:ba:28:
                    5b:5f:c3:16:a6:cf:59:b9:fb:03:19:b7:14:02:d0:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:05:47:CA:AF:57:AC:99:7A:EC:12:B0:BA:EA:97:40:70:2E:A3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13893d4b-a3e0-3d4a-92b0-ca26a871454d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4a:f6:8d:72:e6:c9:0d:b0:2b:08:ef:ee:c9:ff:5a:5c:37:
         76:b7:6f:27:23:8f:b4:94:ec:d0:f7:f1:47:69:03:e3:48:18:
         10:d6:79:1b:ce:10:1c:ce:e4:50:25:b2:e7:6e:89:62:c8:70:
         00:ea:ca:1f:a4:9d:85:0c:b6:d7:76:38:d0:50:12:17:ce:c4:
         05:2f:6e:af:f0:9f:a6:f5:21:65:a5:51:18:46:fa:bc:b0:3a:
         99:9b:d8:b2:76:a4:07:21:96:37:3c:54:57:c0:40:a4:e9:91:
         ca:78:75:c7:5c:dc:a6:41:7b:35:b8:f3:96:a2:b6:51:3e:f7:
         5b:7a:a8:22:91:9f:de:1b:29:52:6f:59:5b:1a:de:c0:4d:4b:
         2e:46:ce:61:f3:a2:b6:3e:52:ea:42:62:f8:02:d5:00:aa:04:
         c9:fa:2c:ca:44:84:9a:bd:e5:80:e2:71:82:1b:21:c8:57:1f:
         7d:2a:a8:49:e4:6c:db:db:1c:93:ab:80:ac:54:05:1f:bd:f5:
         aa:b0:11:67:a8:48:28:77:a9:10:b1:49:03:dc:e1:24:fc:b5:
         de:10:2a:df:30:5f:60:20:cf:7c:4f:d6:ed:d9:fc:a9:2b:88:
         f4:4a:f8:9e:cf:a1:39:8b:90:5d:5d:91:e2:24:f0:fb:a5:85:
         4c:5c:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:28 2026 by rpki-client