Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72636f83-39d3-36e2-99d7-31a3c991b0cf.roa
File:                     72636f83-39d3-36e2-99d7-31a3c991b0cf.roa (raw, json)
Hash identifier:          GuTkMfwFWfCRYPNXzuGPN7sN+psxKMi9vQREk5NeqUs=
Subject key identifier:   FE:27:BE:E0:19:FE:29:D5:9E:57:F8:45:9C:9E:57:3B:70:08:37:28
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A38AF1A14E9320379CDD8
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72636f83-39d3-36e2-99d7-31a3c991b0cf.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.120/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:38:af:1a:14:e9:32:03:79:cd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=656d0e6c-56a4-4521-9066-16ae7c9b0423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a6:1b:0f:61:a6:44:e7:04:ca:74:ca:e0:48:
                    ab:95:b1:d1:af:21:04:f5:d2:59:4a:a2:ca:04:21:
                    29:a9:3d:cd:2a:15:9a:f9:5c:7f:29:44:0f:d8:f1:
                    8c:81:e9:93:d3:22:b9:ba:b8:cd:e1:db:88:a0:f2:
                    9e:6a:88:74:6c:5a:b6:1a:0b:73:7b:0d:67:0c:6e:
                    b9:c3:25:61:c9:87:fd:83:50:b0:fa:12:86:5a:3f:
                    77:9f:cb:43:ed:a6:ab:b2:19:8e:e3:cf:0e:a3:18:
                    74:6c:11:2e:e6:0e:34:d7:b5:ac:7d:f4:39:28:ed:
                    a9:14:31:0d:a3:cd:ae:62:35:53:bd:18:d2:46:7d:
                    7e:1a:43:ed:2b:8d:8f:61:1c:3f:41:16:fa:47:c0:
                    8a:7e:75:af:ca:fe:ff:68:99:e6:e2:3b:fc:c6:7b:
                    66:ad:32:29:3e:41:11:12:f3:80:92:1e:4c:73:2c:
                    7f:e4:12:dd:18:04:7f:74:20:72:83:23:eb:e8:60:
                    4a:b0:98:b1:bf:6e:f3:e0:2d:d6:c2:14:dd:95:84:
                    d4:e4:25:43:e1:94:46:0b:c8:78:09:39:60:ff:bd:
                    d6:e8:83:cd:74:23:5a:eb:1e:88:95:9b:26:cd:31:
                    84:fb:2c:8e:47:62:3d:f2:2e:0b:25:51:9b:42:25:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:27:BE:E0:19:FE:29:D5:9E:57:F8:45:9C:9E:57:3B:70:08:37:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72636f83-39d3-36e2-99d7-31a3c991b0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.120/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2e:79:eb:a7:c4:87:f7:ee:b4:95:a4:0f:72:a4:d7:6c:4b:
         31:1e:b4:7b:fa:5a:0b:93:a6:2d:5d:dd:cc:0a:d8:70:5e:37:
         0f:e6:cf:13:a4:21:20:67:9e:5c:79:ca:e9:70:52:09:f8:60:
         97:32:54:60:2e:ff:22:ed:37:7a:c6:83:18:e6:a8:27:17:50:
         1d:c1:3c:63:7e:35:d9:37:1a:c0:68:de:d0:9f:60:a9:dd:5c:
         e4:11:86:ed:a1:d7:53:60:4c:88:4f:0d:3b:de:f5:21:e8:5f:
         ac:5c:59:1b:f7:be:b8:e2:85:9b:78:c9:72:ac:40:9a:f6:bc:
         5b:9c:4b:60:64:0d:41:ec:c0:dd:19:5e:a5:93:dc:35:c3:b9:
         51:50:e5:bb:2d:9a:8a:fe:ba:ac:58:1a:0e:c0:74:ca:b5:a7:
         09:85:4f:87:38:73:d2:f7:22:91:cb:af:ef:c4:59:8b:0f:c3:
         0b:03:f6:aa:78:89:b7:31:9b:b3:fe:26:dd:c2:1f:d2:d3:75:
         e8:40:10:20:d3:89:62:ea:dd:05:c7:60:93:4d:6e:52:19:b6:
         51:8f:5c:95:90:01:d1:27:fb:ff:2c:5e:ee:91:69:ba:46:ad:
         e7:8f:1c:87:c0:09:06:96:00:0c:a4:d9:31:8b:d1:ad:bb:f1:
         62:54:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:00 2026 by rpki-client