Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa
File:                     a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa (raw, json)
Hash identifier:          FC46UBAMI2k85W8HJy2c90UgDu5AihitAbhkwmvSRGI=
Subject key identifier:   50:D1:53:38:55:C9:AD:13:8E:DF:04:E2:85:8F:BC:50:AC:F5:D3:AF
Certificate issuer:       /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21
Certificate serial:       010D0C9F4328584EA4450A9D0C302D71AE9CE700
Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     63448
IP address blocks:        167.17.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0a:9d:0c:30:2d:71:ae:9c:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=efd39d4a-2dc6-4527-bc35-e38cda4e2420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:28:96:ef:8e:02:f9:5d:23:98:07:2f:13:
                    0e:ea:89:9b:94:30:5e:21:88:00:9b:e9:bb:4b:c3:
                    e3:85:57:20:b5:b1:df:02:8a:25:f1:7c:bc:f1:ea:
                    60:67:50:f2:ae:3e:7d:86:84:1b:b4:59:74:ea:80:
                    17:4d:ec:1a:93:fa:bf:70:bb:6c:e1:d4:e6:ed:ee:
                    4e:1d:78:4e:4b:80:54:24:d2:a0:6f:1d:1a:3b:34:
                    ed:94:09:e5:87:17:ee:81:cc:af:b7:21:34:a1:6f:
                    cc:2f:ed:53:da:38:2a:69:e8:8a:60:8b:e6:ce:66:
                    81:b7:bb:57:35:dc:fb:14:ff:48:92:b0:0f:4a:fd:
                    d4:f8:1a:fe:d3:f9:0e:36:86:24:45:d3:56:7c:97:
                    77:87:4e:7b:e2:8e:a8:16:45:a0:5e:85:eb:30:6a:
                    fa:5a:03:e7:43:29:d1:61:8e:a2:e7:d7:e7:9b:95:
                    8c:a4:67:24:4f:07:55:2d:ea:e9:54:94:ae:fa:ec:
                    8f:eb:d7:ad:8b:78:bb:6b:e7:9e:cf:1f:6c:74:60:
                    d7:23:e1:a6:7d:a7:23:b5:7e:64:b6:73:19:d0:7c:
                    98:10:25:d8:ff:bb:a7:7c:a9:34:fb:8b:fb:33:d7:
                    94:b6:cb:d9:fe:f8:5f:05:d1:ea:3d:1f:24:ea:17:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D1:53:38:55:C9:AD:13:8E:DF:04:E2:85:8F:BC:50:AC:F5:D3:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl

            X509v3 Authority Key Identifier:
                keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.17.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bf:9f:34:c7:ea:77:e8:6e:52:54:64:2d:8c:7e:6c:e0:2e:
         2e:73:b7:e1:10:ee:47:6b:db:9d:a0:58:b2:ae:a7:e7:4c:f8:
         c4:e1:c6:b7:a7:d9:f2:a0:38:29:26:af:df:ae:72:6c:7d:38:
         43:fa:1d:c2:23:da:93:82:3c:30:e4:e5:d9:67:29:a1:47:ae:
         c0:26:e6:95:ba:53:e3:84:a0:ac:cc:67:15:50:99:e8:b0:8e:
         35:05:99:6f:aa:c9:eb:94:58:ea:13:03:4f:b2:85:b0:41:b3:
         ed:62:06:3b:03:21:75:f6:22:ae:5a:09:ea:6c:dd:5f:4e:e8:
         14:24:75:1d:b0:f6:05:86:05:78:04:52:f8:d0:89:20:eb:10:
         77:b0:ab:4c:28:59:4e:02:1a:f7:5c:4f:51:0e:e9:4d:be:bc:
         9d:9a:80:84:70:db:de:cb:07:13:5c:a9:28:c5:3f:51:fe:9d:
         be:29:cc:d1:54:9f:f4:1d:13:fc:9e:95:e0:0e:9e:11:e5:a7:
         a7:87:28:8e:35:3a:4c:c6:9b:4f:ef:bd:db:d9:ed:7f:25:f8:
         48:a7:d3:55:3a:e2:d6:87:e2:48:e1:b3:04:27:e7:25:ca:52:
         0a:b7:ec:49:84:ff:fd:7d:b4:45:0c:d8:a7:a6:f5:c2:bf:2f:
         27:59:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:41 2026 by rpki-client