Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa
File:                     5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa (raw, json)
Hash identifier:          gPUBPJJuqf+nqDGbnIMir+w4bCZPjgnJMTDNs7eEybk=
Subject key identifier:   66:0B:2E:0D:6E:4B:24:86:7D:68:EA:04:AF:C6:DE:94:9B:67:79:E8
Certificate issuer:       /CN=f5d05aba-95ac-4d7d-9f9e-6d566f71ecee
Certificate serial:       010D0C9F4328584E9D4A68D6DAB181BE9B35C510
Authority key identifier: BC:38:ED:DF:D4:EE:26:FD:1F:80:B9:28:E6:5D:39:86:95:98:1F:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     30264
IP address blocks:        66.211.16.0/20 maxlen: 24
                          76.9.160.0/20 maxlen: 24
                          138.43.210.0/23 maxlen: 24
                          138.43.212.0/22 maxlen: 24
                          138.43.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:68:d6:da:b1:81:be:9b:35:c5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d05aba-95ac-4d7d-9f9e-6d566f71ecee
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=f3a00cb6-8009-49f4-86ec-51c915425b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:17:be:24:a4:f3:30:78:85:0b:96:e0:91:
                    89:a8:8b:3d:9a:13:83:60:6e:a9:6b:f4:d4:39:91:
                    56:be:89:4e:04:98:ba:91:40:79:4b:c3:6d:a7:eb:
                    d5:6c:a0:f1:3f:50:2c:46:9f:10:51:ef:72:25:c5:
                    7e:5c:f5:86:fc:7b:56:0a:da:89:76:c1:ba:b1:8a:
                    0c:32:de:fa:72:39:d2:e8:a9:ac:57:8d:13:6b:3a:
                    fa:7c:95:b4:8c:8a:1b:28:15:03:76:9d:c2:f1:21:
                    f0:b2:50:08:3e:2e:d6:53:88:ad:00:dd:68:70:35:
                    d4:ff:2d:42:2b:c9:f4:97:73:80:5e:09:6b:d5:ee:
                    76:8d:27:78:23:2d:89:bd:67:49:e8:0b:b9:65:ca:
                    54:2a:2f:10:a8:41:a1:be:4a:f3:d9:d8:91:60:38:
                    64:87:db:15:f5:f0:05:cc:93:ef:61:2c:7d:d8:b4:
                    c6:31:01:64:4c:ed:d0:38:7f:9d:9f:b1:bc:eb:70:
                    17:bf:6a:ea:29:08:c9:22:a6:b1:22:45:52:b2:28:
                    cb:e3:61:5d:b3:f1:d8:d7:dd:1e:b6:be:be:23:32:
                    f4:41:bb:28:de:2d:77:ea:ac:71:91:30:a2:e7:65:
                    e0:15:5b:32:dd:b7:5d:54:f2:9b:47:7a:f5:66:4e:
                    40:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0B:2E:0D:6E:4B:24:86:7D:68:EA:04:AF:C6:DE:94:9B:67:79:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.crl

            X509v3 Authority Key Identifier:
                keyid:BC:38:ED:DF:D4:EE:26:FD:1F:80:B9:28:E6:5D:39:86:95:98:1F:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.211.16.0/20
                  76.9.160.0/20
                  138.43.210.0-138.43.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:44:ac:f5:08:58:7e:a7:a3:73:fc:73:7f:be:02:7e:2f:8c:
         a6:94:7a:67:c9:68:9a:be:c8:f9:93:61:90:18:51:21:7a:97:
         1d:7c:d0:9f:bb:89:d1:e5:b6:91:67:db:45:99:67:76:20:57:
         17:a8:d2:1e:f1:0c:43:06:5d:df:dc:be:a8:cf:62:9e:f6:47:
         80:7e:e8:52:c0:38:b3:5f:f8:ee:17:0c:2b:0b:b2:79:5f:19:
         50:1f:17:d4:76:9c:77:8b:8f:b5:a8:be:e4:9b:27:11:bb:14:
         56:3d:fe:f5:ad:62:fe:5e:3d:f7:44:81:63:5b:0f:09:60:1d:
         3b:94:0f:b1:63:14:88:bf:54:21:41:6a:74:21:34:c7:56:7c:
         09:17:bc:9c:6b:ed:8b:80:2d:82:71:d4:ed:92:07:70:79:f5:
         5e:66:d8:51:09:54:6e:e4:f4:3c:ee:ca:d8:a6:76:83:40:60:
         fb:db:7b:a9:67:69:8a:76:a4:c4:12:9c:57:5f:94:e0:d8:75:
         89:74:d9:62:ab:e1:59:c2:26:95:88:3c:10:13:8c:42:dd:ee:
         20:45:53:25:5c:91:70:69:88:93:01:11:e9:b9:3d:34:89:da:
         4f:db:77:79:95:cf:1a:1c:20:7d:64:96:1f:5a:29:d3:72:d4:
         77:e6:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:54 2026 by rpki-client