Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa
File:                     27768a1c-4182-355f-8ed4-0217446693db.roa (raw, json)
Hash identifier:          ELaHcq0zKuYIsGvM+LgF6kP4fqngWFdeozgSSXTBR7Q=
Subject key identifier:   D9:75:72:D0:B5:34:7E:59:35:42:9B:E0:07:36:02:D3:A8:DE:68:ED
Certificate issuer:       /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial:       010D0C9F4328584EA798D358D5859C9141469380
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63298
IP address blocks:        216.87.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d3:58:d5:85:9c:91:41:46:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=efc7be75-e088-48b4-b630-3a4adc68a608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:53:3b:94:80:a2:55:6f:97:c5:26:73:da:
                    e0:a8:74:a2:4b:9a:23:b9:8e:21:39:36:36:2d:ab:
                    61:30:f9:6d:b5:85:a2:db:75:35:cb:2d:b3:f8:6b:
                    7f:4d:65:8e:74:4d:ea:88:35:cc:e8:05:c7:22:23:
                    5e:3f:58:86:74:00:c9:cc:af:a0:40:ab:1f:cc:f1:
                    3b:8e:ae:0c:d4:f7:84:61:d5:4a:e6:2e:0f:41:18:
                    30:d5:e7:af:02:19:80:a8:74:3a:08:c7:af:45:69:
                    fa:35:90:4b:68:1a:a4:37:51:ea:d7:b4:73:76:b0:
                    3e:b9:de:ff:cc:97:d1:ef:63:6f:73:fa:b0:17:19:
                    77:e2:b0:dd:97:23:a3:e8:3d:db:46:48:12:22:d4:
                    94:f5:b5:27:a5:d6:db:2b:99:c6:6d:27:c6:e0:a7:
                    7b:c6:e5:91:59:7c:8e:d8:83:eb:ca:d2:c9:5c:49:
                    50:be:63:4b:38:6b:cb:09:41:26:86:a8:3b:3c:c6:
                    fc:1d:ca:92:64:70:84:ee:b8:66:49:21:b9:9e:bb:
                    c1:68:29:1d:da:1f:ef:6e:71:81:ea:16:c9:5e:19:
                    2f:17:ce:3a:ca:85:42:f5:14:5f:5c:98:73:b1:d6:
                    12:a7:ce:de:60:59:88:55:ba:81:ab:33:90:fa:3d:
                    c6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:75:72:D0:B5:34:7E:59:35:42:9B:E0:07:36:02:D3:A8:DE:68:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:3c:a9:68:49:ec:8b:7d:65:e5:b8:2b:7f:c9:12:9e:cd:
         2a:a4:14:75:fa:7c:ad:32:ea:ee:e3:3f:ab:5c:74:68:76:f4:
         cc:7d:ca:1f:96:6e:25:86:17:12:82:35:eb:8b:87:f0:06:2b:
         12:3a:77:af:79:6f:2b:c4:b6:aa:32:ac:0e:dd:8c:e3:a8:b7:
         7c:09:99:44:21:c8:88:9f:9c:11:7d:1c:0d:48:f8:73:ca:b9:
         ed:f4:4c:58:a9:25:30:1f:a6:85:16:39:e0:01:4f:c4:e9:61:
         0f:e2:f0:ff:03:7e:6e:8d:f1:f6:51:85:9b:23:d2:ad:c8:d8:
         c3:0a:97:38:68:c5:5f:dd:bc:28:fe:f1:b4:32:54:31:38:46:
         bc:80:07:16:3b:25:26:4b:59:22:47:6a:5e:6d:16:43:93:90:
         dc:78:e5:b4:7d:38:60:7f:a1:9c:bf:4d:7a:af:90:c6:bd:00:
         11:11:70:39:13:85:c8:9b:65:f6:03:28:51:7b:f3:93:ba:22:
         85:02:b4:78:f5:a4:62:f3:17:62:c0:48:fa:4c:a7:c8:01:24:
         83:89:4b:c8:73:f0:18:22:18:c7:76:f9:d5:8c:a2:cd:e0:c6:
         cb:f7:f5:53:01:17:cf:6f:3a:ce:a1:31:96:b4:70:0b:33:3d:
         07:c3:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:58:11 2026 by rpki-client