Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b6354a1-3d07-30eb-a798-bc15c348444c.roa
File:                     3b6354a1-3d07-30eb-a798-bc15c348444c.roa (raw, json)
Hash identifier:          Wx3Cv0niz8q2YM+5QnNrHeO6k9yeIVeuwlY0b5PApZw=
Subject key identifier:   A7:A1:0D:67:68:AC:85:9E:D2:A4:C9:CB:9B:3B:A5:37:E2:F0:F7:E1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A382EABCC38240FEE1980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b6354a1-3d07-30eb-a798-bc15c348444c.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.80/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:38:2e:ab:cc:38:24:0f:ee:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=633656bb-01f6-4285-9387-4806b0369d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:c2:c6:af:61:cc:09:62:70:cb:19:45:8a:
                    4e:26:9c:50:b3:2f:f8:83:bd:2b:63:29:cf:10:a9:
                    0a:5b:81:30:89:fe:af:87:34:f3:49:ee:71:23:2b:
                    a3:71:7c:a4:c1:01:d0:a3:f0:e2:54:f6:4b:ff:e0:
                    90:4d:af:09:7b:63:77:82:f9:8c:6e:a4:70:18:a2:
                    92:20:e1:2b:55:68:a3:56:be:4a:ad:08:f5:bb:90:
                    57:03:0d:ad:7b:98:a7:e9:14:0e:50:a8:6a:cc:57:
                    58:91:2d:7a:03:28:b0:90:0e:07:f6:1a:04:e8:ef:
                    00:6a:84:da:6a:2a:ae:80:ad:79:98:08:e0:33:ae:
                    a4:70:85:55:4f:ce:e2:d9:6e:aa:62:eb:fc:58:0f:
                    b2:cf:23:11:7a:1c:dd:71:01:62:73:c0:d9:26:b3:
                    c6:bb:34:3a:1c:c2:ae:b3:99:4e:b0:0a:c0:41:b1:
                    0d:76:aa:7f:0b:de:6d:79:d4:86:6d:9b:8c:d5:6c:
                    5a:66:d7:5d:1e:3d:bb:b2:06:ba:40:f8:78:49:17:
                    5f:53:92:d9:06:42:29:b7:1e:5c:5e:30:f5:bb:e1:
                    30:fd:94:95:01:a2:72:05:5b:6a:0a:4c:43:fa:d3:
                    e3:a4:4a:26:f4:5a:1d:09:f4:40:d2:44:5b:34:be:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:0D:67:68:AC:85:9E:D2:A4:C9:CB:9B:3B:A5:37:E2:F0:F7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b6354a1-3d07-30eb-a798-bc15c348444c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.80/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:31:0c:09:b3:b6:31:16:32:f3:96:ca:1d:83:cf:30:cd:
         3c:6f:d5:07:1b:86:3f:52:c7:8a:e5:8d:a6:bb:81:c0:a2:6d:
         f9:29:90:64:3f:58:88:8a:a1:87:8d:65:f8:18:27:ee:3f:f8:
         80:00:2f:42:9b:32:7c:a5:06:06:24:83:0c:de:01:74:e8:4f:
         c6:3a:4b:24:3d:50:97:4c:56:a0:8b:16:95:21:9b:6a:f3:3b:
         2c:56:b5:37:d9:7b:e4:b1:8d:31:ab:bb:1d:de:db:12:fa:3d:
         15:e3:1d:4d:1a:ad:7b:83:9d:80:37:fe:38:4e:60:83:84:c4:
         18:c4:a9:43:03:d8:90:6c:b0:3b:16:bf:cd:a1:65:da:e1:81:
         62:11:e8:06:f5:50:1e:1a:46:3a:88:09:29:fd:e4:ce:c9:92:
         7d:07:a5:1f:70:cf:36:be:5b:ec:48:b6:0d:a6:94:44:c8:d4:
         20:d8:a5:27:88:39:76:fa:fd:e9:8f:39:09:bd:38:1b:2e:82:
         6e:f6:24:27:c4:51:2c:66:50:3a:15:02:01:4f:58:b3:09:a9:
         cd:63:cd:37:ce:65:03:86:40:e8:1a:87:1e:77:2e:5c:ec:02:
         f0:1f:c1:dc:8e:ed:e3:14:77:73:a5:ee:7f:c3:e4:2c:ff:6f:
         9a:43:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:20 2026 by rpki-client