Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae550361-4e24-3096-bd85-05a6b5fe88d4.roa
File:                     ae550361-4e24-3096-bd85-05a6b5fe88d4.roa (raw, json)
Hash identifier:          un+Tk/fknMi94BGm6dZd2wqIvQ7e58l4KpasYBLGMeA=
Subject key identifier:   98:2F:9F:30:D7:83:0C:9E:AF:78:2A:0A:B0:6A:1D:29:F6:9B:9E:59
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A58C0B7215B947883D200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae550361-4e24-3096-bd85-05a6b5fe88d4.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.64/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:58:c0:b7:21:5b:94:78:83:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=04596f2f-89c4-41da-8d2e-00f28448fb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:aa:1f:13:3b:a3:68:a4:d1:1e:ce:3c:5a:
                    2e:bb:e7:d6:58:82:54:82:e7:c0:bb:4c:7d:fd:6c:
                    38:bd:ac:e7:52:57:ea:ff:43:ea:3c:c4:c8:7e:89:
                    15:e1:89:88:44:7b:54:b4:56:40:59:fa:0b:74:36:
                    eb:67:c8:1c:c1:58:3a:5b:56:00:9c:0b:cf:70:f1:
                    92:17:c7:a3:8b:93:22:62:be:e3:11:45:c7:10:6c:
                    b4:6f:82:77:2f:ed:2d:a5:3b:9c:59:da:8c:66:ee:
                    89:46:54:74:6f:18:af:75:55:0f:73:d6:bc:c4:b2:
                    2d:c9:94:f9:d1:6d:cc:80:fb:2b:30:f1:42:60:3c:
                    28:de:eb:2f:3d:cd:2e:11:be:88:2f:a1:5b:47:2b:
                    37:a2:7e:44:1b:be:73:0d:20:50:3f:25:3f:48:a3:
                    fa:94:b7:17:1f:6e:c8:47:21:01:37:44:b5:e5:af:
                    ac:8b:51:3a:07:6c:fd:cf:85:d4:a4:07:62:85:66:
                    de:89:c8:e3:89:57:36:da:4b:32:e9:a0:c4:8d:c1:
                    89:fa:c7:b8:fe:f0:5c:a8:ca:a0:d8:5b:8b:c3:bb:
                    25:91:1f:4f:77:71:fa:d0:b5:f5:a3:7f:09:7f:2e:
                    66:e4:0c:0e:53:9c:42:4c:bc:b5:94:5c:7e:8a:31:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:9F:30:D7:83:0C:9E:AF:78:2A:0A:B0:6A:1D:29:F6:9B:9E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae550361-4e24-3096-bd85-05a6b5fe88d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.64/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c1:97:e0:3c:74:67:69:9a:3f:93:00:d7:cf:99:3d:0d:f2:
         52:2d:8d:53:2e:c8:b2:3d:20:53:1f:2c:6a:bc:3d:09:fe:7d:
         4d:cf:68:c5:2f:6c:35:95:4e:f4:0d:10:0d:4f:66:7a:8e:77:
         10:89:de:f3:b2:65:d5:50:b6:f8:b4:55:a2:3f:46:eb:9b:34:
         40:98:f5:84:85:ec:ec:5a:dd:69:f5:60:58:5c:ad:32:e5:81:
         54:47:66:81:75:f5:6c:74:2b:9a:4b:d3:0f:96:8b:ec:bc:b9:
         77:e6:fd:10:e8:61:01:54:99:e2:f2:ce:e7:5c:5a:9a:a6:a5:
         9c:0f:a8:2c:2d:7c:99:e8:2d:08:91:44:0a:a2:d1:41:be:f8:
         5e:48:b6:6f:2e:a0:66:d3:a3:bf:fb:8e:e6:0c:04:95:5c:05:
         41:00:15:47:64:4c:dd:2e:84:34:36:5d:66:47:60:18:0d:27:
         bd:6a:05:1c:b3:e6:ec:ad:5a:de:77:95:d2:25:db:1f:2b:a6:
         56:3d:f0:46:f9:90:01:7a:9c:2c:9f:6b:07:5e:fb:90:f4:82:
         c1:75:b6:0f:6e:c7:92:b3:e5:96:4e:75:d1:47:6f:32:10:db:
         32:15:45:ce:45:17:b0:8d:09:2a:d8:12:2b:74:e6:7a:13:d9:
         15:19:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:25 2026 by rpki-client