Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/71736984-a30b-3a8e-ac71-a8718a9f250b.roa
File:                     71736984-a30b-3a8e-ac71-a8718a9f250b.roa (raw, json)
Hash identifier:          9w5ojFwgKgqMbqSDmjKVa4LOzO6rmnUbNuqul5hZp/o=
Subject key identifier:   C4:DF:32:54:93:B0:37:85:C7:AE:65:34:27:65:08:9D:16:5D:E9:9B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796E51DB37B4B859E21D800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/71736984-a30b-3a8e-ac71-a8718a9f250b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36850
IP address blocks:        204.84.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:e5:1d:b3:7b:4b:85:9e:21:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4493585d-ada1-44e6-8363-bf43ee91b597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:8f:bd:7f:1f:bf:46:0d:ee:4a:a4:1c:a4:
                    26:a9:e2:ff:d0:63:8d:f5:72:26:fc:21:50:c0:fc:
                    38:17:db:a2:96:00:b9:84:c4:23:06:51:65:56:1c:
                    7d:82:8b:f6:4b:69:a1:fa:5f:76:39:b9:56:60:1d:
                    e7:90:9c:cf:1a:ab:74:4c:37:d4:eb:33:5d:9e:fa:
                    42:ce:ff:5a:56:91:3b:91:49:3f:76:16:8e:93:0e:
                    02:66:b0:e5:e7:00:f5:ff:51:cc:16:24:df:49:c7:
                    3d:60:b8:b3:e8:8d:0d:da:6a:e6:60:0a:d3:bb:eb:
                    15:70:8b:b8:e4:9b:bb:c5:12:d1:d2:f8:0f:66:f8:
                    e2:b1:04:e7:36:bb:a8:f8:fe:ba:ab:39:bc:2c:b4:
                    7f:80:aa:11:d8:fb:c3:1f:f7:08:93:01:e8:b1:47:
                    c9:af:aa:a8:bc:3a:a6:53:d8:07:ad:d5:c4:b5:c5:
                    b8:80:41:1b:46:a0:54:5b:1f:f1:bc:4d:6f:e3:62:
                    52:72:fe:0b:0a:b2:c4:ee:ab:8d:6f:6b:d9:83:0a:
                    8f:ab:00:48:15:c5:b0:e4:97:81:04:bb:7c:e3:c8:
                    cd:74:97:14:ab:fe:9b:a9:7b:28:12:05:26:c7:75:
                    50:93:29:78:14:12:d6:7f:cc:fc:f3:00:9c:2a:07:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DF:32:54:93:B0:37:85:C7:AE:65:34:27:65:08:9D:16:5D:E9:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/71736984-a30b-3a8e-ac71-a8718a9f250b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:6b:7b:5b:ef:55:26:cd:fd:ec:62:d9:09:37:f4:fb:d2:
         74:b3:0d:b6:1f:cf:7f:5d:ff:fa:85:c6:e5:7a:6d:6c:29:dc:
         78:45:00:87:82:ee:2f:1f:9e:8c:47:be:2d:29:c3:00:1c:ac:
         c8:cf:f7:63:46:4c:73:4c:22:b6:93:e0:29:64:30:ce:54:03:
         77:52:e8:5e:07:7e:73:2d:28:ab:22:20:b3:85:da:d4:50:e7:
         aa:f5:9c:6c:4a:3f:65:2f:60:6a:d3:6d:a4:94:dd:89:c9:42:
         ed:f9:97:95:a1:7a:fd:21:50:74:76:ec:30:30:e8:b4:d6:29:
         87:c3:10:bf:da:b7:31:ff:47:1c:a0:a2:be:58:f9:d5:e6:ec:
         9a:1e:f0:25:97:75:4e:71:7d:af:3f:ad:8d:9c:16:9d:a4:1b:
         92:67:9b:1a:92:59:39:5f:37:a0:62:70:21:66:9b:68:60:ee:
         24:45:d7:90:73:54:0a:46:76:15:16:92:e8:88:97:de:97:0f:
         6c:d5:2b:34:60:ac:2c:f0:45:13:cc:40:2b:d7:4b:63:d5:b8:
         b8:9c:40:9f:05:86:27:34:4a:38:00:90:92:b2:4b:d2:f0:3e:
         69:2a:e8:ae:7b:92:75:d1:2e:28:90:f1:24:8b:55:c5:3d:85:
         27:31:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:14 2026 by rpki-client