Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a5cc1b71-c2e1-3375-810a-5993aeb3f6fb.roa
File:                     a5cc1b71-c2e1-3375-810a-5993aeb3f6fb.roa (raw, json)
Hash identifier:          4x1F2ofX12iVYGnrVBEZG0VtQssbywA2E7pyCPbRX5Q=
Subject key identifier:   91:13:DF:46:06:17:DA:98:F3:1C:98:43:98:9C:4B:F9:AE:65:AC:AB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FDC2AD4A76E39DE526480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a5cc1b71-c2e1-3375-810a-5993aeb3f6fb.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        158.62.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:dc:2a:d4:a7:6e:39:de:52:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=585241e0-9c29-4411-8db8-85ac1b05b55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:17:7c:f7:79:e1:03:0c:2e:d8:96:e5:b2:
                    e0:e7:3d:84:25:9f:7b:07:19:8e:1a:3f:59:7a:d7:
                    85:6d:64:1a:11:bb:49:d0:8a:bc:ad:24:4b:49:76:
                    c7:9f:bc:fd:87:fb:d1:f7:5c:76:75:cf:17:2e:10:
                    06:a7:f2:da:b7:88:93:87:2a:d0:77:13:07:3a:75:
                    f9:29:df:eb:74:d3:85:96:cc:dc:3b:db:5b:cf:62:
                    70:84:b4:7e:53:a4:0f:f6:89:d0:84:73:7d:63:d3:
                    54:96:52:3f:0b:e0:6f:6f:82:2d:6a:65:61:4b:2a:
                    8f:2f:7c:66:ad:9e:90:60:ab:e4:34:97:da:8b:ee:
                    2f:1f:50:8f:15:9a:39:04:e9:20:05:e0:2d:f1:1c:
                    62:a7:d0:da:17:0c:84:70:0d:19:3e:8f:3a:c2:02:
                    b6:11:10:30:e8:34:8f:d5:b2:fb:bf:04:dd:57:c0:
                    1c:07:91:e2:52:f8:64:1e:1e:e4:f9:23:1e:cd:76:
                    67:78:d8:27:4d:0c:91:60:18:bd:8d:ec:9c:ce:c3:
                    ed:bc:53:48:cb:08:5a:c6:73:a4:23:9e:e7:f1:46:
                    d4:f3:1e:d4:39:32:f5:e1:c7:86:c9:b6:be:6b:3a:
                    91:d3:68:3c:f6:3f:19:2a:6e:20:39:6e:11:29:d6:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:13:DF:46:06:17:DA:98:F3:1C:98:43:98:9C:4B:F9:AE:65:AC:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a5cc1b71-c2e1-3375-810a-5993aeb3f6fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:f3:86:42:9e:62:3a:ca:94:3e:ef:bb:a6:35:fd:1e:a1:
         ee:65:9e:9d:f1:33:3b:48:83:43:4f:6f:4b:56:52:3d:0d:6b:
         08:c5:a8:b1:27:b2:4d:b8:e4:b1:70:a7:b9:86:60:05:ae:77:
         46:57:05:4b:58:44:cf:7e:0f:ae:54:c1:e1:c5:31:0b:9c:16:
         f4:53:cc:d2:d3:b9:06:5b:0d:c2:6f:50:ed:6e:f5:60:d6:4f:
         44:60:5f:20:b3:10:7b:c6:48:43:4c:c9:cc:c2:11:f3:ce:c2:
         0e:82:ca:2a:32:da:79:0f:94:e6:67:7c:d7:71:0b:40:e7:23:
         77:46:fd:d2:e8:d6:7b:af:41:c0:2b:d5:6c:6e:22:03:66:af:
         05:b6:7d:94:a0:d0:fb:be:eb:8f:26:a3:eb:ce:b8:88:db:38:
         fb:a0:e3:5b:c7:c5:dc:4a:8d:00:63:35:30:0e:80:b9:6a:61:
         14:49:3b:33:c0:a7:e0:8e:f3:8a:c6:68:09:37:db:16:f3:14:
         b0:f3:fb:6e:2d:86:7f:8c:02:c1:b3:a1:2b:9d:00:ec:39:0b:
         60:0d:97:2e:85:4d:78:86:a5:58:2c:b8:1c:39:70:a6:26:72:
         0a:d7:0b:cf:6a:56:c1:b3:f8:33:0c:44:b3:c6:2a:5c:bb:af:
         c1:4f:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:33 2026 by rpki-client