Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa
File:                     f73b5053-f5db-33cf-aecf-f99a7cff535a.roa (raw, json)
Hash identifier:          jj7WnIRZwpb1YOJWQeXp1j3tNdaJAMoApghDTRbjVnM=
Subject key identifier:   45:83:15:86:6E:DE:3D:E4:9D:96:02:75:FC:8C:78:EB:81:14:24:C6
Certificate issuer:       /CN=f97b644e-a01f-43c5-83e0-146254941d5f
Certificate serial:       010D0C9F4328584EA79C50D7801768DA35F82700
Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36290
IP address blocks:        204.16.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:50:d7:80:17:68:da:35:f8:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=acd6bad1-9d5d-4ad4-b6eb-81c38a1a74a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:a9:bd:dd:17:32:ef:97:84:1d:fe:2f:6e:
                    96:0f:f5:be:8b:69:3c:1a:f4:71:3c:84:42:14:86:
                    d7:e7:1c:bf:cd:ef:58:fc:d9:84:b8:08:fe:47:ba:
                    5c:e8:54:58:37:69:0f:b6:44:cd:68:19:ba:90:94:
                    58:59:b8:9a:78:01:66:c8:5e:78:69:a0:65:fc:93:
                    d9:3b:71:b6:14:aa:5d:fd:33:f1:3c:0a:f4:52:6d:
                    53:54:25:da:69:bd:67:cd:fe:e8:76:a9:c4:7f:a5:
                    0b:16:7d:9d:0f:1f:ed:ed:b1:bc:c6:dd:2c:58:ac:
                    c4:8d:a5:29:2e:50:0d:ac:fe:29:d1:65:18:64:9f:
                    a9:0c:6f:8f:4f:c3:81:65:64:5f:45:f1:70:e4:1c:
                    9f:0b:26:a6:f2:69:ec:50:47:9f:2c:2d:64:c0:05:
                    fd:da:de:f6:e7:de:82:24:9d:77:9a:39:cf:68:21:
                    0b:c4:bb:ce:65:f4:2f:21:80:aa:c2:9f:44:72:6d:
                    c6:29:ee:03:62:57:43:c5:a3:83:39:5d:91:8c:04:
                    14:9a:ba:12:9a:41:9b:d1:5e:bb:73:15:29:ba:be:
                    8f:c5:9c:8a:f3:57:b8:09:b7:bb:98:c2:a1:5b:b5:
                    b6:32:83:6f:23:72:2d:a0:ef:02:6c:7e:94:ee:b4:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:15:86:6E:DE:3D:E4:9D:96:02:75:FC:8C:78:EB:81:14:24:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:53:bb:74:3d:73:88:c3:3a:86:2c:77:2e:e4:20:0b:4c:
         1f:ee:8c:ae:8c:30:8a:49:bc:20:ed:78:af:8b:0a:ed:50:54:
         55:f6:78:bf:92:9a:74:4c:1b:55:cf:4c:bd:b3:57:bd:58:90:
         2c:b7:16:be:df:d1:2e:1b:66:73:24:b1:c1:53:03:15:44:5c:
         30:8f:b7:03:3c:29:05:ff:3f:6b:bf:5b:64:30:74:43:39:75:
         c1:98:8b:5c:c6:b0:75:fe:e7:94:3b:26:cd:8e:5f:e8:08:06:
         d0:dd:e8:c2:f2:17:e0:d0:03:42:c0:c2:d0:1d:24:90:3c:d3:
         d5:a6:1f:ff:c9:58:26:ee:9f:d4:1f:49:64:dc:3b:64:cd:41:
         57:75:be:95:a3:ba:e3:ce:12:e2:08:12:72:f4:87:79:83:54:
         76:cf:60:f1:e8:4c:f4:a7:13:8c:42:e3:ef:e0:50:98:bb:13:
         bf:ca:32:46:e5:ef:dc:08:54:70:a7:23:3a:4b:ea:f1:dd:e7:
         69:08:ea:6e:6f:ff:cf:10:ba:53:57:ef:43:ee:4f:96:7d:d1:
         eb:de:2e:b8:fe:16:a7:64:e7:5a:2e:5f:3a:0b:95:0b:64:65:
         6a:fb:74:7d:6c:5c:86:8e:56:b0:82:45:0f:7d:5c:84:fd:58:
         52:86:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:07 2026 by rpki-client