Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/d869d3f5-3464-3490-8a87-72da0606d063.roa
File:                     d869d3f5-3464-3490-8a87-72da0606d063.roa (raw, json)
Hash identifier:          p1YAgLvvsocNqwbGMVJ3ZVkcbuqreWKvPsaBwgz1+fg=
Subject key identifier:   4C:CA:53:D5:1C:E7:C4:6F:A9:70:D8:A5:7B:36:80:D5:4F:F5:9E:96
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EA797E1A9B67A8DCA4525E320
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/d869d3f5-3464-3490-8a87-72da0606d063.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7385
IP address blocks:        208.187.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:e1:a9:b6:7a:8d:ca:45:25:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b39cc1e3-ef64-430e-84fa-67346dae5d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:88:46:d9:0d:de:6d:4a:76:06:83:6a:5d:
                    0c:41:c9:00:64:b8:a4:aa:ea:d8:96:e9:9a:b8:3b:
                    b1:9a:1f:37:2f:37:31:2d:d5:8a:ec:15:c0:ce:f6:
                    f5:f6:d6:ba:c8:60:5a:1b:10:9a:5c:fd:b7:65:75:
                    3f:83:7b:e6:42:01:07:dc:0d:87:1c:c9:ac:21:c0:
                    f3:47:23:2c:c4:5d:2f:4d:8f:e9:26:e2:e7:ca:6c:
                    8f:99:57:47:bb:97:0b:bd:f6:15:7a:f3:50:9a:b2:
                    ce:89:ba:34:29:ac:c0:70:0c:1b:bf:76:93:c3:bf:
                    7a:f6:fa:31:ee:c6:a5:36:23:8d:15:5e:7a:ef:96:
                    9a:13:80:16:4c:a4:10:94:20:52:79:69:30:bb:ff:
                    4c:70:89:80:75:bf:a4:bd:b5:1a:45:88:1d:1c:65:
                    9f:ee:43:f8:a9:11:4b:c4:99:d2:44:06:7e:a9:ed:
                    f2:3c:a7:06:cc:2a:12:cc:2a:4e:83:4f:cb:07:b7:
                    73:4e:52:ca:7b:34:0b:d6:0e:04:a1:33:b8:06:81:
                    49:08:02:43:59:0a:c4:f7:42:94:ff:dd:90:69:d5:
                    73:40:b3:fa:94:3d:3b:6e:ab:d9:8c:19:0e:29:11:
                    56:dc:74:4f:bd:6c:c5:b7:ca:83:c6:42:e9:04:25:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CA:53:D5:1C:E7:C4:6F:A9:70:D8:A5:7B:36:80:D5:4F:F5:9E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/d869d3f5-3464-3490-8a87-72da0606d063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.187.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:50:84:10:66:45:2e:82:79:51:a5:21:b1:64:81:8b:6b:
         a8:b1:9a:db:f4:26:bf:1d:52:49:e8:05:9b:d6:a3:9b:eb:84:
         0f:a3:ba:77:e6:71:e3:02:70:76:99:48:7d:87:26:5f:4c:0d:
         9b:03:81:ad:13:be:04:ca:82:69:c2:74:92:a2:cb:cf:18:62:
         a1:c3:18:4b:8d:46:1b:4e:5d:41:70:3f:13:5a:bf:1a:07:c9:
         e9:2b:ee:e9:9a:f4:7c:56:41:24:d1:ad:66:d2:11:f3:e2:77:
         0d:6a:ed:58:16:51:cb:c5:c3:8b:8f:89:99:7c:9f:d8:3f:b9:
         53:95:36:59:78:c2:6f:12:95:d6:40:b8:72:2e:01:7b:d9:71:
         b3:64:e1:85:13:13:42:6f:00:51:aa:d9:fa:46:eb:17:82:3e:
         d9:65:a1:fa:0f:46:d3:2b:1c:2b:36:74:78:18:6b:c9:cc:8d:
         42:37:70:ef:6f:9e:70:01:0c:a4:46:e6:62:42:17:cd:dc:e5:
         d6:19:5b:1f:91:f0:0f:31:05:90:31:37:0a:5c:1f:2d:53:ee:
         ed:0f:cf:e1:e1:8e:e9:93:99:bc:10:4d:d2:f8:b1:b5:ea:96:
         3b:60:11:8a:59:d2:17:6f:28:34:92:f9:8f:ed:2d:e4:f7:72:
         d7:c7:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:46 2026 by rpki-client