Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa
File:                     8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa (raw, json)
Hash identifier:          ETiuzBOUkuyt+4r1NbO8qiMoWnhS39Ly5nWJ9x0iLeE=
Subject key identifier:   CF:10:7E:12:E9:51:04:1E:17:79:80:AC:83:AC:DC:51:01:6D:26:C3
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F4328584EA8EC5308D76AEBF41FF80A00
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     397016
IP address blocks:        198.73.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:53:08:d7:6a:eb:f4:1f:f8:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=bdaa485e-1157-4f41-878a-bf0a8f2db264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:37:c9:e0:a0:2a:9b:f4:9e:b5:4f:02:2d:
                    4e:07:45:9f:89:9b:cc:c7:4d:db:e7:c1:d4:ad:9a:
                    55:5f:93:56:0a:e4:f1:2b:19:8c:86:42:d0:65:a9:
                    66:4b:c0:f8:98:e8:bb:21:16:d9:44:41:8c:90:e4:
                    85:93:ca:02:41:77:5b:f5:de:aa:71:1a:a8:e3:dd:
                    1d:9c:63:10:04:c3:40:24:61:42:4c:bd:23:92:68:
                    52:c1:cd:18:cd:94:af:1c:07:d6:14:69:a7:56:bf:
                    f3:f5:1f:b9:7c:1d:3e:5d:26:60:86:4d:9d:73:a8:
                    60:f8:ed:aa:03:97:bd:bf:83:74:ab:b4:69:6b:56:
                    3f:d5:ce:35:29:97:a4:f8:59:55:2c:19:f1:34:15:
                    71:fc:ab:d1:9a:1c:c5:9b:ab:e4:11:57:b4:88:8b:
                    73:11:e8:d1:f6:fc:a7:e8:aa:de:e0:18:05:2a:72:
                    20:fc:f1:7d:09:f9:32:15:58:4e:58:0c:cb:44:9d:
                    1e:3b:9c:65:eb:a0:80:d6:c9:e5:28:ab:a9:5f:dd:
                    86:fe:96:52:7c:75:1e:b9:30:37:ad:90:9f:6a:d3:
                    48:bc:99:10:d5:2e:ee:74:a3:1c:64:14:df:68:8f:
                    2a:1b:f5:92:69:7e:30:1e:d4:55:c4:79:b7:70:0e:
                    99:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:10:7E:12:E9:51:04:1E:17:79:80:AC:83:AC:DC:51:01:6D:26:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:42:fe:bc:82:dd:54:fa:ad:99:f3:93:e1:a9:df:c5:de:b0:
         6d:b3:a1:cf:cb:20:78:38:4c:e0:d9:81:ad:d1:a6:ea:88:bb:
         4a:dc:77:55:0b:57:0f:cb:b7:9a:fe:91:7f:c7:fe:30:af:19:
         22:00:6e:19:62:b2:8c:17:8d:c2:2d:9b:ce:06:dc:6b:25:d8:
         ff:73:de:bc:f2:3e:8f:2b:a8:6b:ba:bb:58:41:99:81:5b:06:
         ed:25:ff:28:3a:fb:c1:b4:a6:38:c9:a0:3b:5e:38:85:10:f4:
         6c:e3:c3:0b:6e:b1:13:cb:e4:1c:89:48:6e:d5:1d:cb:c7:a8:
         f6:f8:96:47:17:b8:16:2b:75:f1:b6:54:36:bf:9c:b5:32:49:
         e9:55:5a:61:64:3b:14:1a:9e:a2:db:13:f6:f2:a7:4c:a1:59:
         66:d1:a3:7b:fa:32:69:7b:f5:24:80:43:fc:ec:15:b2:63:3c:
         1f:e8:52:63:fc:4e:40:ed:8e:d0:9c:6b:c1:26:dc:8a:f3:11:
         aa:2f:c3:1a:49:0d:0a:dd:1f:80:bd:dc:6b:14:c3:42:de:54:
         32:ef:1a:4a:9c:63:d3:1a:ba:d5:e8:4c:d3:00:b7:1b:ac:fb:
         c8:af:03:7e:b4:94:ab:73:89:19:77:e4:0b:d2:7b:f2:1c:03:
         d1:a8:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:56:51 2026 by rpki-client