Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa
File:                     f37b0714-1ede-3dcb-b67f-5210b56493fc.roa (raw, json)
Hash identifier:          Hq/DTVThZJDKfgspKM9ROhLf9gQpQWFv2TTUGB4adjM=
Subject key identifier:   DB:3E:8C:BF:4B:D8:72:18:A2:AF:CF:91:CB:65:50:AD:BD:D3:97:BE
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584E9A7FD7D864F22C1278B8E060
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        76.164.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d7:d8:64:f2:2c:12:78:b8:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=daf7311f-49e4-4c68-a02f-0efb2cdde7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:cd:df:b9:78:14:39:4f:a7:32:a1:3e:e9:
                    30:9a:4f:34:f8:a6:5a:ca:93:b6:35:52:9e:74:76:
                    19:55:bd:22:f4:13:a0:8d:c6:3f:bc:31:ad:7e:36:
                    bc:c6:42:cc:37:b3:b1:f0:8a:39:da:9c:91:70:fa:
                    7c:e2:72:d2:dd:19:ff:9a:82:2b:0e:19:96:a4:68:
                    2b:bf:c0:56:73:fc:7d:7c:52:88:15:2c:d9:51:ef:
                    e5:d6:ee:a2:73:3a:4d:5d:a8:3e:d6:13:3d:0d:b5:
                    a8:7a:7a:3b:fb:f3:36:e5:da:f8:79:bd:7e:6c:85:
                    64:fa:48:d3:99:81:cc:d0:60:be:e3:64:b5:70:0d:
                    64:b9:cc:bc:d0:ba:2c:23:4e:3f:c1:23:80:67:1b:
                    d2:e2:80:d8:d3:99:57:ea:b5:de:4a:be:b1:88:5a:
                    8b:f7:9f:0b:f9:82:f0:ce:9d:a8:ac:11:9c:cf:66:
                    d0:ed:5e:7a:c8:8b:a1:9a:b1:e5:ac:36:5a:e7:b7:
                    76:51:53:04:19:bc:2b:7c:5a:75:d3:bc:4d:e5:7a:
                    8b:69:ae:2c:fc:a0:9a:cf:9b:b6:bc:07:1c:90:cd:
                    25:44:b5:bf:3d:75:4d:c4:a6:25:63:fd:94:da:45:
                    7e:ae:2e:5f:77:7e:ff:32:71:80:b7:63:5f:65:c3:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3E:8C:BF:4B:D8:72:18:A2:AF:CF:91:CB:65:50:AD:BD:D3:97:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:49:6e:9e:21:ab:0d:7d:d2:2a:b9:5c:1a:eb:28:a9:19:
         8f:b3:05:3a:24:62:ea:88:ff:79:fb:dc:a2:65:b5:8b:d5:d9:
         99:87:5b:96:ac:24:f0:87:7e:80:c1:57:ec:40:5c:2a:ec:59:
         15:65:00:8f:ba:9a:80:2d:e7:74:33:d0:4a:a0:a3:52:c7:4e:
         66:8b:06:27:87:eb:87:7f:04:3b:6e:a3:3a:e6:92:1f:72:7c:
         af:d7:4b:71:63:bc:f9:44:04:64:05:e1:aa:cb:7b:6b:f7:60:
         b7:e5:13:f4:f0:8a:b0:eb:d6:7d:f7:db:8d:5d:48:05:70:ee:
         5e:e4:e9:fd:3f:8a:73:bc:37:94:7d:29:d3:07:26:3f:ad:bc:
         22:47:40:95:a2:7b:a4:b7:cd:a3:06:f0:73:ed:52:1d:4a:2a:
         70:ae:9b:9c:03:e1:42:68:c7:55:4b:6c:74:37:83:de:de:d1:
         a0:fa:53:1f:45:86:54:38:e4:2e:43:d1:d9:91:f2:59:64:98:
         18:63:c7:dc:f7:03:3b:c0:2a:e9:5f:a2:1e:67:e2:48:db:d8:
         74:e1:e5:74:8f:15:5e:8e:46:cd:e3:c0:59:cb:70:3c:36:5a:
         83:c3:cc:d0:6b:66:c9:8b:00:82:65:60:b8:5a:02:09:08:91:
         7d:42:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:00 2026 by rpki-client