Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b777829-a1dc-367e-9751-2ff05020e7e8.roa
File:                     5b777829-a1dc-367e-9751-2ff05020e7e8.roa (raw, json)
Hash identifier:          4ypkhHbB3+mvfcPisprk1vjcIPAPvtBDlAx26mtnq3o=
Subject key identifier:   1A:3A:D0:FE:38:7D:D0:BE:6C:91:4E:EE:13:6B:1C:B2:C3:A4:6C:17
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A42DA460BD798A8A16CC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b777829-a1dc-367e-9751-2ff05020e7e8.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.232/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:42:da:46:0b:d7:98:a8:a1:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=3ab002bf-72af-49b9-8a9d-b2b695b226c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:b9:d2:19:f8:fe:5a:f6:c5:3c:29:c3:f6:
                    04:d2:1d:d9:64:05:70:b7:b3:79:ce:53:3d:02:e2:
                    b5:b1:4c:3b:24:f3:94:e1:81:99:8e:09:ea:1e:63:
                    1c:7c:34:7c:59:a7:20:51:26:5c:19:7f:5c:15:56:
                    03:33:25:5a:2a:3d:3a:ee:fc:b5:16:54:e2:ed:7d:
                    f2:5d:a3:77:e8:4f:73:1b:81:53:0d:6a:c8:35:99:
                    08:e8:b6:52:c0:31:23:c0:af:b5:c8:6f:25:1c:7d:
                    27:94:d5:3b:18:0b:df:69:9f:0e:cf:1b:ff:87:27:
                    25:c2:4b:0d:98:a3:1e:f6:63:a2:c6:bb:92:bc:ec:
                    ea:19:ac:78:f6:2a:56:2e:c8:4a:40:dd:94:12:c0:
                    c4:5f:cb:01:a2:90:3b:37:33:89:aa:21:fd:3d:da:
                    b6:77:f1:36:74:53:37:4e:29:bb:7b:2a:7e:3c:da:
                    bf:c4:fa:da:03:ce:a6:b2:f4:2a:5c:7d:e1:94:d8:
                    2f:fe:7a:4e:59:b9:ca:d7:0d:4a:4d:cb:75:b0:bb:
                    58:ac:93:53:94:1c:b7:b6:6c:c6:05:b8:d0:04:3e:
                    75:16:23:05:3d:57:d1:d5:0b:9d:39:28:64:d4:d9:
                    cb:dd:d7:b5:e9:4c:4a:93:d1:a2:95:9c:eb:4f:e7:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3A:D0:FE:38:7D:D0:BE:6C:91:4E:EE:13:6B:1C:B2:C3:A4:6C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b777829-a1dc-367e-9751-2ff05020e7e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.232/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:b4:34:bd:3c:0e:f7:87:f1:04:a4:29:b8:a1:c1:9c:7b:
         df:37:ce:b0:e0:56:8a:18:a2:31:5c:43:4c:40:4e:76:73:a9:
         4c:1f:36:c0:ae:a7:63:7b:34:a0:7c:34:35:82:7a:c8:a4:ae:
         9a:e8:52:49:5f:fb:84:4e:a8:09:13:91:cc:f7:64:2a:a5:0c:
         ea:9e:15:55:af:ed:27:5f:8c:5b:82:9e:e0:67:81:2f:f4:60:
         ec:58:8e:e9:79:4b:5e:89:bb:c6:1a:d1:ca:f9:de:9b:e6:4b:
         c7:b6:df:0c:48:f9:3d:52:0a:44:4c:9c:bf:94:59:17:14:bc:
         10:fa:68:21:d2:e6:a3:1b:f2:90:a4:53:e1:ca:38:a8:16:6b:
         bc:83:81:e8:7e:50:0c:12:51:ec:cc:c3:a5:7f:f8:8c:cc:f4:
         fb:a9:13:ca:ae:8e:86:c8:3e:ec:80:cd:c8:b5:19:2d:da:b9:
         71:2b:01:2f:df:40:8d:46:cf:b1:0b:fc:55:3b:9c:34:72:e8:
         3a:92:fa:62:d0:cd:ec:66:79:d0:90:ad:cd:a1:bc:74:ec:f5:
         ec:67:f7:50:45:f6:67:58:de:c1:ad:6f:60:e0:a2:18:c6:cb:
         f2:f8:df:74:6c:c1:a0:16:b3:eb:fc:22:66:74:68:1f:30:59:
         51:03:8d:80
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6IWkLaRgvXmKihbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
M2FiMDAyYmYtNzJhZi00OWI5LThhOWQtYjJiNjk1YjIyNmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojG50hn4/lr2xTwpw/YE0h3ZZAVwt7N5zlM9
AuK1sUw7JPOU4YGZjgnqHmMcfDR8WacgUSZcGX9cFVYDMyVaKj067vy1FlTi7X3y
XaN36E9zG4FTDWrINZkI6LZSwDEjwK+1yG8lHH0nlNU7GAvfaZ8Ozxv/hyclwksN
mKMe9mOixruSvOzqGax49ipWLshKQN2UEsDEX8sBopA7NzOJqiH9Pdq2d/E2dFM3
Tim7eyp+PNq/xPraA86msvQqXH3hlNgv/npOWbnK1w1KTct1sLtYrJNTlBy3tmzG
BbjQBD51FiMFPVfR1QudOShk1NnL3de16UxKk9GilZzrT+cX1QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBo60P44fdC+bJFO7hNrHLLDpGwXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWI3Nzc4MjktYTFkYy0z
NjdlLTk3NTEtMmZmMDUwMjBlN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExH6DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB+CbQ0vTwO94fxBKQpuKHBnHvfN86w4FaKGKIxXENMQE52c6lMHzbA
rqdjezSgfDQ1gnrIpK6a6FJJX/uETqgJE5HM92QqpQzqnhVVr+0nX4xbgp7gZ4Ev
9GDsWI7peUteibvGGtHK+d6b5kvHtt8MSPk9UgpETJy/lFkXFLwQ+mgh0uajG/KQ
pFPhyjioFmu8g4HoflAMElHszMOlf/iMzPT7qRPKro6GyD7sgM3ItRkt2rlxKwEv
30CNRs+xC/xVO5w0cug6kvpi0M3sZnnQkK3Nobx07PXsZ/dQRfZnWN7BrW9g4KIY
xsvy+N90bMGgFrPr/CJmdGgfMFlRA42A
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:23 2026 by rpki-client