Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa
File:                     8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa (raw, json)
Hash identifier:          Va3u+v8GYVQQOt8WhWDhreEqErQyThTS5ABBtLKIUWY=
Subject key identifier:   D1:A6:29:F6:4C:C0:D9:73:C9:C1:D4:86:B7:96:95:45:71:EB:7B:1A
Certificate issuer:       /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial:       010D0C9F4328584EA79A5E2A778B5801AF876140
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40861
IP address blocks:        216.168.20.0/24 maxlen: 24
                          216.168.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:5e:2a:77:8b:58:01:af:87:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea4aa053-7191-4854-98d3-09df869874a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:9e:fd:7f:fe:27:c2:86:e4:b7:a4:30:a4:
                    12:48:f3:ee:0a:34:08:f9:80:dc:dc:1c:11:e6:ce:
                    21:33:dd:aa:52:a5:a0:07:33:5f:c4:34:7f:2d:a7:
                    2f:5b:df:de:58:7b:25:f5:83:79:2e:65:a2:7c:53:
                    52:cc:41:3b:55:7c:4f:ea:ae:0e:d5:0f:71:a6:b0:
                    fb:36:3f:86:90:88:9f:42:86:e9:57:ec:f8:b6:56:
                    bf:c5:90:85:dd:3d:69:48:0b:e7:89:85:10:67:a9:
                    17:6d:25:fb:8c:73:69:da:d6:99:0c:26:92:d1:0c:
                    cf:1c:f2:e3:05:f5:a9:e4:ae:78:41:02:5d:06:76:
                    f0:c2:3d:b2:3c:a0:b2:c5:86:6c:ef:c3:ce:ec:a5:
                    5c:a1:dd:56:da:e0:10:34:67:d6:42:1f:21:9b:41:
                    8c:c4:8f:53:40:3f:ec:fd:31:04:c1:fa:65:4b:a2:
                    3a:94:46:5d:34:dd:ac:fa:61:1d:1b:c6:24:0f:58:
                    85:aa:6f:59:57:8a:76:5a:1a:55:32:ef:b6:01:ea:
                    5d:33:04:7f:56:6b:fd:80:d6:a5:5b:4e:f8:56:86:
                    74:64:f7:8d:71:2a:02:14:46:77:27:10:1d:b4:9f:
                    ab:3e:57:65:c9:12:20:ae:49:6e:40:19:f6:c5:cf:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A6:29:F6:4C:C0:D9:73:C9:C1:D4:86:B7:96:95:45:71:EB:7B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl

            X509v3 Authority Key Identifier:
                keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a6:f2:bf:57:3b:47:df:93:37:08:cf:64:3b:95:0c:ed:36:
         b8:75:5f:b1:db:0b:c1:a1:27:9c:08:92:34:1a:e3:de:61:e5:
         67:52:92:e8:79:48:92:5e:32:9a:4e:ae:78:d7:94:91:8c:5d:
         bf:0a:26:9e:7b:c9:64:ba:b2:a2:73:67:f6:eb:9f:4d:b8:fd:
         b3:ce:9d:6b:c9:e7:10:6b:5a:3e:62:17:46:5e:54:0f:e0:d2:
         65:83:86:22:e7:99:74:61:d6:ca:34:97:5f:da:59:9e:ef:8a:
         4a:9a:2d:00:0f:68:22:31:45:4d:7b:ae:fb:4b:04:2c:3e:6a:
         3f:e7:02:70:1b:88:24:2d:e4:4d:5c:5d:6b:8a:af:c5:da:ac:
         12:4c:9f:70:22:d0:16:b8:1c:6b:3f:4e:c6:92:86:a3:3e:0e:
         01:6e:d5:3e:53:44:ad:93:7a:88:a0:34:97:77:12:82:12:cd:
         d3:77:27:41:30:6c:8b:2e:e0:e2:a2:80:de:fb:b8:6f:cd:05:
         29:36:db:07:28:79:eb:08:47:d8:06:3b:e7:a2:e9:e7:f8:6f:
         f1:74:23:97:37:79:09:c0:e9:cc:47:61:dc:bc:d5:4b:20:dd:
         59:0c:ef:05:85:31:23:c4:cb:b3:1b:b9:75:c2:c6:35:4b:5f:
         58:33:f9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:03 2026 by rpki-client