Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8334c1cc-2776-395d-ba2c-96d69adec73d.roa
File:                     8334c1cc-2776-395d-ba2c-96d69adec73d.roa (raw, json)
Hash identifier:          W9rUR4E4zhYu+++J9h/gHTOSc7/Ua7Ty+CV9Tsrff8w=
Subject key identifier:   42:84:B0:97:CA:4A:DE:CC:C8:EA:7D:01:53:72:19:F3:BF:C3:94:B5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A37B4202E6E6E03CCB2C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8334c1cc-2776-395d-ba2c-96d69adec73d.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.112/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:37:b4:20:2e:6e:6e:03:cc:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=8fdf8fdd-36a0-4920-8101-b65de808362e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:4b:6a:7f:f5:7f:ad:26:ea:af:15:4b:06:
                    90:b4:71:6f:9a:03:7f:eb:77:34:ac:c5:cb:fd:13:
                    be:bf:68:cb:56:7c:66:22:39:a7:eb:63:f7:2c:0d:
                    5f:45:3e:e2:ee:86:14:02:d9:19:a3:e1:b5:19:f3:
                    3c:f6:73:a0:7d:82:61:a0:fc:7a:47:32:a9:a7:3a:
                    28:6d:24:c8:2e:29:29:c5:a2:f7:62:c9:2f:c9:c1:
                    de:d5:86:24:37:c8:3d:01:ee:52:c9:3c:0b:24:52:
                    e9:6c:0e:d7:9d:68:71:f8:42:66:9d:22:82:02:fa:
                    a5:84:71:bb:49:a2:fe:31:25:3c:8c:f2:5e:97:ab:
                    9b:7b:24:bf:36:8f:58:77:4b:40:ea:67:f7:cc:40:
                    5d:ea:98:21:91:95:04:d4:db:6d:ea:d3:2c:62:a2:
                    f0:06:e3:0e:44:8d:94:bc:ff:55:13:74:57:53:e9:
                    52:9c:a2:d8:65:57:64:e3:29:d4:49:46:50:91:2c:
                    98:b0:89:70:94:6c:97:51:e3:00:41:82:be:50:7e:
                    43:50:db:a2:b8:45:4c:44:00:20:36:9f:78:b5:bc:
                    df:0f:e0:6d:22:f2:07:6a:e3:ae:e0:be:81:48:98:
                    7f:51:50:8e:fc:e7:ec:cc:a6:1b:82:33:cd:c9:8f:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:84:B0:97:CA:4A:DE:CC:C8:EA:7D:01:53:72:19:F3:BF:C3:94:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8334c1cc-2776-395d-ba2c-96d69adec73d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.112/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:32:9b:b6:ad:23:f2:fb:cd:3a:3a:6a:f6:76:24:25:51:75:
         bc:e0:b9:dc:d5:6d:61:e2:eb:61:1f:26:0b:15:fc:1b:82:d2:
         5c:51:6e:8c:2a:78:2e:42:2f:65:73:7c:12:ef:7b:08:62:46:
         da:93:23:87:2d:e3:d3:5c:05:27:aa:36:d0:86:77:7e:fa:e4:
         50:e3:6e:1d:7c:d3:4a:83:77:ac:77:d4:16:99:e7:a3:1d:05:
         b5:37:e0:26:f8:e4:62:df:19:eb:d0:e9:eb:dc:1f:06:9b:58:
         b5:14:ba:b2:57:69:4b:64:7f:3a:89:f5:ed:cb:73:0e:3b:71:
         11:fe:53:82:43:14:2c:2b:19:ef:09:7b:fa:32:f8:91:65:68:
         ac:95:38:36:8f:12:3d:a8:6d:a4:a5:a7:00:aa:6e:6d:df:3e:
         f5:a6:42:2e:f2:58:44:df:15:a5:03:86:4a:2e:53:c5:ad:94:
         3b:e3:6e:c9:64:ca:4e:8f:0b:84:11:f6:03:c6:50:75:71:99:
         73:63:30:f6:28:50:4d:ea:12:e4:4f:80:cb:cd:ab:22:82:53:
         50:cb:9b:6d:a9:22:02:74:95:2a:b5:2f:71:32:50:1a:75:74:
         36:3a:8f:08:fd:73:43:56:11:5f:78:bf:bb:ef:52:c9:50:1c:
         10:dd:4a:fd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6IWje0IC5ubgPMssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
OGZkZjhmZGQtMzZhMC00OTIwLTgxMDEtYjY1ZGU4MDgzNjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgNLan/1f60m6q8VSwaQtHFvmgN/63c0rMXL
/RO+v2jLVnxmIjmn62P3LA1fRT7i7oYUAtkZo+G1GfM89nOgfYJhoPx6RzKppzoo
bSTILikpxaL3YskvycHe1YYkN8g9Ae5SyTwLJFLpbA7XnWhx+EJmnSKCAvqlhHG7
SaL+MSU8jPJel6ubeyS/No9Yd0tA6mf3zEBd6pghkZUE1Ntt6tMsYqLwBuMORI2U
vP9VE3RXU+lSnKLYZVdk4ynUSUZQkSyYsIlwlGyXUeMAQYK+UH5DUNuiuEVMRAAg
Np94tbzfD+BtIvIHauOu4L6BSJh/UVCO/OfszKYbgjPNyY+0+wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEKEsJfKSt7MyOp9AVNyGfO/w5S1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODMzNGMxY2MtMjc3Ni0z
OTVkLWJhMmMtOTZkNjlhZGVjNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHcDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCQMpu2rSPy+806Omr2diQlUXW84Lnc1W1h4uthHyYLFfwbgtJcUW6M
KnguQi9lc3wS73sIYkbakyOHLePTXAUnqjbQhnd++uRQ424dfNNKg3esd9QWmeej
HQW1N+Am+ORi3xnr0Onr3B8Gm1i1FLqyV2lLZH86ifXty3MOO3ER/lOCQxQsKxnv
CXv6MviRZWislTg2jxI9qG2kpacAqm5t3z71pkIu8lhE3xWlA4ZKLlPFrZQ7427J
ZMpOjwuEEfYDxlB1cZlzYzD2KFBN6hLkT4DLzasiglNQy5ttqSICdJUqtS9xMlAa
dXQ2Oo8I/XNDVhFfeL+771LJUBwQ3Ur9
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:45 2026 by rpki-client