Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2bd10850-e1d5-371f-b451-00c9b8348b3d.roa
File:                     2bd10850-e1d5-371f-b451-00c9b8348b3d.roa (raw, json)
Hash identifier:          y5iYCnlMpDQXbtLSzdtzCrW14mv3+vxVYeJAwpXBO7I=
Subject key identifier:   53:5E:A2:35:7F:4B:2D:A6:50:DB:81:9E:9F:49:69:B8:C7:F0:A1:44
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A57945DF81B8FD1A9BDA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2bd10850-e1d5-371f-b451-00c9b8348b3d.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.224/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:57:94:5d:f8:1b:8f:d1:a9:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=1c53721c-4202-46ea-8770-4e5fd86a88be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:59:1b:f7:57:08:7d:7a:9d:b3:2f:c6:7b:
                    bf:7e:30:ed:33:72:09:85:98:3d:69:ca:b9:1a:4d:
                    67:05:8e:5b:54:31:fa:2f:af:38:4a:b2:13:2e:b9:
                    69:d8:61:33:0e:32:f8:df:09:12:4f:c0:82:74:d7:
                    86:b6:4e:7f:92:94:1d:73:54:15:4c:2a:de:22:e0:
                    81:ad:fc:a5:93:00:45:83:a2:83:da:41:ea:a8:39:
                    3a:35:0f:1e:1b:0b:1b:93:5a:36:86:b1:11:ac:c9:
                    c2:46:d3:eb:9a:66:95:db:48:eb:65:12:53:8f:18:
                    07:86:8b:64:69:95:37:d9:ab:6c:de:c5:fc:95:0f:
                    37:ef:5a:84:c9:ef:95:72:6a:d6:f4:38:7a:0c:46:
                    7f:22:99:f9:45:b5:f0:14:26:c9:67:b2:03:33:8e:
                    05:32:58:2e:9b:d6:a5:0c:2c:f0:f5:21:2d:6a:dc:
                    27:ad:64:42:78:a6:4d:4c:a1:37:6c:1b:4e:07:fc:
                    ed:19:7a:86:cf:96:03:b7:11:20:79:7b:8c:e4:95:
                    77:2d:d5:ee:92:ee:65:58:14:46:4b:f6:36:3a:80:
                    09:7f:ce:ed:b3:db:14:cb:da:f5:24:2c:94:6c:d7:
                    9a:d5:c2:a5:18:61:45:12:5c:fb:7b:e8:b3:34:48:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5E:A2:35:7F:4B:2D:A6:50:DB:81:9E:9F:49:69:B8:C7:F0:A1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2bd10850-e1d5-371f-b451-00c9b8348b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.224/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:17:94:95:14:6b:96:2e:9e:5a:0d:b8:6c:b4:08:52:34:
         4d:e1:d7:53:67:48:28:b5:7c:dc:81:b6:8d:1f:e8:32:6c:f7:
         76:7a:d0:3c:89:48:44:40:fe:f5:f7:c1:db:15:39:57:43:cf:
         57:75:9c:45:73:59:db:3e:61:a8:76:00:49:99:c1:fe:08:c9:
         f4:7e:72:55:3a:90:90:27:22:59:55:c0:a2:18:ca:fc:61:86:
         2c:1d:25:3a:33:93:5d:5c:38:d7:ef:39:d1:cc:e7:d7:6b:4d:
         49:f2:18:2c:c3:71:14:03:9e:ff:a8:ce:78:ac:5c:90:ea:a8:
         5a:69:7f:50:d4:a9:da:26:8e:5f:d9:66:e5:02:37:5c:2d:ae:
         50:9c:de:87:5c:59:95:05:b4:56:47:04:29:6e:0d:9e:3f:55:
         05:4b:e2:cc:b5:a6:f1:d7:b9:21:12:ca:2e:59:30:2e:03:a3:
         f7:7f:54:01:d6:1a:72:44:cc:fe:2b:c0:be:b3:42:a1:f9:61:
         0d:3b:4e:eb:cf:58:5e:06:75:4b:44:0d:7d:7e:88:67:32:47:
         67:e6:9b:37:51:3e:ae:18:c2:80:d7:16:2c:e8:e2:0b:14:5e:
         23:c8:c9:90:7d:68:4a:0d:1b:e3:5a:07:95:94:9b:77:23:a1:
         d6:b7:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:32 2026 by rpki-client