Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/70e441c6-7198-3111-ae4b-4e130df81d5e.roa
File:                     70e441c6-7198-3111-ae4b-4e130df81d5e.roa (raw, json)
Hash identifier:          21SPht+1RTFf1xVzF4geVfrEPax6CmTSchasbfdShDQ=
Subject key identifier:   28:88:9C:3B:BC:47:45:73:C5:37:80:13:E0:53:95:34:09:23:0E:E4
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584EA793E36FA8948E8B4BCC3E80
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/70e441c6-7198-3111-ae4b-4e130df81d5e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53959
IP address blocks:        207.171.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:e3:6f:a8:94:8e:8b:4b:cc:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e55cabfb-4811-4c51-919c-e1e6d4e4bde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:1b:49:c6:86:73:98:9b:a7:0f:23:b7:c9:
                    4a:fa:cc:59:d2:b0:66:b1:f0:7d:82:52:f5:8c:cd:
                    5d:6e:a5:4d:b7:9e:53:d6:c0:80:19:69:35:7d:84:
                    ee:53:c6:f2:ea:89:e4:45:89:51:6c:09:a2:39:b5:
                    61:b0:2c:b0:a3:b9:48:8c:d9:c3:9c:4a:fd:9b:f8:
                    32:1d:fd:8e:f9:56:4c:ab:a8:2b:9c:ed:90:19:6d:
                    7d:c9:17:80:49:7b:4a:b4:b1:04:fb:41:3e:a7:13:
                    5a:a7:e0:d4:62:93:5e:77:66:0d:66:22:47:5a:15:
                    a0:ff:dc:c1:26:f6:4e:e9:ec:f6:9d:9f:45:d7:bb:
                    97:a7:3c:57:f1:18:8a:27:02:00:ea:e0:a3:b5:ea:
                    5b:25:74:91:1b:01:74:28:1c:64:1e:82:49:fc:98:
                    15:e0:dd:56:91:eb:e1:a8:ca:4a:8c:39:45:21:5d:
                    1a:4f:32:cb:e8:4e:57:f4:96:08:ac:64:59:1d:73:
                    4a:ad:f9:76:45:0d:2c:bd:7d:a6:7f:86:85:e6:1f:
                    88:dc:15:25:b0:34:52:f3:9f:2d:e8:fc:af:3b:36:
                    bd:8c:18:ae:06:60:4a:42:4b:32:dc:7b:55:00:0b:
                    29:57:9c:64:66:70:3b:eb:9f:09:87:d1:af:d2:d5:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:88:9C:3B:BC:47:45:73:C5:37:80:13:E0:53:95:34:09:23:0E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/70e441c6-7198-3111-ae4b-4e130df81d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:24:da:9b:df:01:04:e5:54:7e:36:e4:0e:f0:12:ae:20:ba:
         c7:23:49:8b:73:e1:e9:3a:ac:82:8c:92:fd:c4:1f:3f:bf:bd:
         bd:0f:15:9f:81:2f:18:75:12:45:03:4a:2c:a0:49:91:2d:0d:
         50:b0:49:7f:19:7b:31:a9:6c:0a:1f:9b:34:e6:73:91:7f:86:
         35:47:e5:d9:ed:3d:e0:6f:6b:8d:14:38:c5:c5:78:c0:69:62:
         c6:8e:38:93:81:45:8a:fa:f2:43:76:c7:ae:de:36:e2:a5:73:
         72:c7:d5:32:3d:61:99:47:26:5e:58:ec:99:2b:a0:fe:46:16:
         69:98:aa:3a:cc:8f:36:f7:c8:f0:0f:05:03:03:66:c5:67:25:
         a7:68:55:58:22:70:86:9a:f2:7a:d5:60:ad:30:5c:ac:7a:c7:
         9f:d8:78:f6:a1:5d:3d:06:4d:77:0d:f4:4d:20:36:7b:5e:c0:
         7b:9b:a5:ca:e0:fb:1b:7b:ed:aa:9c:03:b7:b0:ff:f6:fa:46:
         5d:3d:3b:da:2d:70:58:1b:73:c6:1d:e0:e4:be:ff:50:6f:67:
         76:21:d8:56:53:f8:11:75:59:a7:36:20:c9:c0:97:e4:ef:f2:
         e1:b0:d8:1f:dd:cb:a7:cc:1b:ba:80:d9:0e:11:ff:90:8e:24:
         fb:d6:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:45 2026 by rpki-client