Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e5d8cbb-e3d8-3b42-bda5-0d9f824713e1.roa
File:                     7e5d8cbb-e3d8-3b42-bda5-0d9f824713e1.roa (raw, json)
Hash identifier:          VuMmO3ZlTaEp8kljERWZmopTu0921dLaHYWB27g3fUc=
Subject key identifier:   75:05:DC:02:E9:84:A6:6D:45:C1:52:DB:6C:E0:77:04:04:7B:A9:54
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A38BE47ADD039FF48A618
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e5d8cbb-e3d8-3b42-bda5-0d9f824713e1.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.40/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:38:be:47:ad:d0:39:ff:48:a6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=d7870103-98ab-4510-a122-7c6cef40fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:aa:7f:e8:5f:4f:c5:ca:25:81:5a:59:25:
                    c1:3e:38:39:44:fd:f0:22:99:bd:5c:91:cd:19:d0:
                    9b:19:61:f9:95:5c:16:08:70:bb:b5:db:29:aa:e4:
                    7c:a5:85:2a:90:21:03:95:d0:f8:a7:91:4a:dd:e8:
                    1b:da:43:3f:f5:33:cf:c4:8f:3b:7c:d6:f5:4b:2e:
                    60:48:6e:13:45:8a:7a:fd:11:a8:84:a1:17:3f:de:
                    6c:bd:62:fa:39:2b:5c:4c:27:84:dc:ec:2e:1c:3f:
                    f9:ca:a2:02:6a:28:08:ef:98:3a:5e:c9:2d:af:31:
                    02:3e:05:31:68:c6:46:7f:54:f8:18:86:e0:a0:58:
                    b8:f6:65:ec:aa:e0:53:4f:f6:1e:46:1c:32:ab:94:
                    7a:cc:cb:c6:44:54:02:98:1f:dc:12:35:24:89:40:
                    c3:2e:18:cc:5c:04:73:35:be:21:ad:7d:3e:5f:de:
                    0a:34:9e:69:5a:4a:3a:15:e2:61:d8:ce:ac:ff:d1:
                    67:c6:ad:1a:86:ab:75:5f:9d:56:aa:7e:dd:cd:73:
                    1e:e8:fe:19:de:7d:4f:57:46:7b:15:7b:fa:c1:71:
                    75:20:c7:da:be:ae:96:81:af:cb:ab:fb:d7:39:21:
                    c9:da:0f:ae:8d:c4:a7:d7:90:f9:4b:9b:f4:3f:18:
                    b2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:05:DC:02:E9:84:A6:6D:45:C1:52:DB:6C:E0:77:04:04:7B:A9:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e5d8cbb-e3d8-3b42-bda5-0d9f824713e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.40/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:71:d7:be:a0:93:f7:9b:3a:8d:41:79:c2:81:d7:aa:28:04:
         1f:1c:a8:de:0e:90:45:4d:90:f5:34:c3:ca:ff:29:9f:a4:5e:
         c0:ad:d3:f6:b6:95:10:9b:f3:fa:a3:03:0e:94:2a:46:9a:e7:
         50:51:a1:f1:5b:1a:f0:ef:97:6b:42:71:01:9d:81:4d:8c:b1:
         72:6e:b7:e6:02:d0:cf:9d:55:9f:ef:67:ee:26:4f:d8:c6:5f:
         0d:45:cf:69:e4:a7:5e:1e:1b:c2:63:8d:8b:17:64:57:ad:39:
         84:f5:1a:98:10:65:0f:e5:5a:12:33:51:4f:28:24:e6:90:ef:
         cb:39:6c:87:fc:82:7e:ca:1f:2f:ad:39:a1:6a:19:92:50:52:
         e1:f3:5c:c4:35:95:7f:72:53:c4:6d:f5:43:d3:26:03:93:2c:
         0f:65:bb:b9:1e:70:c7:40:fc:1d:0e:b1:e2:89:ec:96:15:08:
         43:9b:b1:55:a6:27:b5:1b:ba:fd:cb:5b:27:7b:04:16:21:72:
         13:2d:06:14:04:62:d9:85:b6:5e:d8:77:2d:78:ba:93:d0:3f:
         34:2b:53:5b:4e:78:eb:f9:12:32:e2:81:47:af:d0:55:fe:a8:
         84:1c:72:57:d0:37:6a:5c:76:38:02:cd:8e:d4:78:b3:7e:3e:
         43:9b:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:16 2026 by rpki-client