Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
File:                     c4a6b7c2-8475-3612-9c69-66526f25323b.roa (raw, json)
Hash identifier:          BtzG5JfL18amysknqZ5IqadyFN/h3i9DEkESVsyIOFk=
Subject key identifier:   77:B0:28:31:99:5E:40:14:45:A2:04:15:D6:D3:5C:2A:FD:84:49:61
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584EA798090878FE03E366B55E40
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11273
IP address blocks:        204.124.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:09:08:78:fe:03:e3:66:b5:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1159f906-2a10-4b4a-bc88-8c6caf4166a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:e6:9d:e5:92:f7:06:2e:d5:d3:1c:17:70:
                    aa:9b:5c:99:ca:34:d7:1d:ef:8f:90:45:d7:85:28:
                    01:ec:99:1b:f3:74:34:2e:12:72:08:08:2b:5c:99:
                    7c:db:be:a1:3c:d1:14:ae:16:3a:a5:bf:7f:64:a2:
                    02:81:cc:60:90:24:c9:7e:da:ea:a5:d3:35:40:5b:
                    6e:8b:5a:23:1f:e1:92:e6:98:ce:14:5d:87:6d:41:
                    23:75:6d:21:57:6a:cc:0e:ba:46:c0:ae:c0:93:f2:
                    38:c1:d1:4b:70:4a:7a:64:7a:dd:9e:2f:cc:7f:24:
                    7b:03:d8:57:64:79:8a:77:33:fd:7b:69:d7:1f:33:
                    cc:96:1e:9d:85:a1:8f:20:7b:7c:50:48:6b:4a:12:
                    a6:4c:3b:87:2d:86:ef:7f:e9:f9:cb:7c:97:30:5a:
                    aa:6d:c0:b6:00:ae:59:3f:2f:c2:3e:4c:a4:48:3d:
                    d8:42:44:2a:01:63:32:4b:e2:51:26:11:c2:29:c4:
                    e9:98:f2:5e:8a:6f:01:08:ff:54:ad:f3:eb:15:1c:
                    6f:f3:e0:2d:53:95:5b:ae:0d:04:b7:9e:4f:7f:df:
                    62:35:7d:82:69:b4:5e:88:53:7a:b9:36:e5:02:62:
                    06:c0:91:38:3f:d8:c9:30:89:5c:ca:a9:43:82:ba:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B0:28:31:99:5E:40:14:45:A2:04:15:D6:D3:5C:2A:FD:84:49:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:68:af:e1:6f:61:3e:49:32:b8:42:6e:9c:ff:95:a0:1d:10:
         44:f4:8f:1e:92:1e:36:36:cb:58:8d:50:d3:ad:c8:dd:b2:4c:
         1b:88:c6:2f:ff:f3:00:d3:06:f5:44:2c:43:a4:20:43:46:5b:
         f3:30:52:5d:96:83:bf:59:cb:e7:36:0f:0e:4f:bc:15:5e:38:
         b0:73:94:ae:72:d6:23:8d:c5:ac:d3:b9:dc:11:11:7d:c5:ea:
         1d:fe:1d:71:c9:8c:1c:ac:47:d1:d1:bb:6b:5c:8e:75:e2:4c:
         b4:ca:ac:b3:ac:9c:d7:ac:c6:d7:6f:c0:97:c0:87:8f:98:fd:
         02:4b:b1:a5:8b:4a:78:d8:37:f1:6e:2a:17:cd:92:61:cc:67:
         08:a2:c7:68:9b:13:1a:73:1c:1a:d7:62:a0:f9:cf:e6:04:0c:
         33:74:53:27:f2:38:90:b7:b8:a3:01:ca:b2:b9:2a:4e:03:f5:
         6b:a7:ed:a8:8c:b1:9a:ba:71:6c:d9:cf:e2:b5:df:8c:19:7e:
         04:0a:46:60:2e:c4:a4:7c:b0:b1:a0:67:11:3e:ec:1b:45:b3:
         68:a9:10:52:2a:43:92:29:8f:f7:3d:6f:2a:3c:da:fe:95:1d:
         84:fb:b7:94:78:63:6b:8b:d1:c4:b7:5f:3b:a4:87:93:6b:3e:
         a0:2f:5a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:39 2026 by rpki-client