Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
File:                     fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa (raw, json)
Hash identifier:          e0bBPoYnWmbBYiQGeGTVw94v2FrR69jr+DAG6cnVXWc=
Subject key identifier:   CD:63:4D:6F:62:8B:39:84:45:77:6A:9C:EE:E2:A7:A8:00:CF:97:22
Certificate issuer:       /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial:       010D0C9F4328584EA7927C829AA89F821FAF17C0
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6122
IP address blocks:        165.206.0.0/16 maxlen: 24
                          207.28.0.0/16 maxlen: 24
                          207.165.0.0/16 maxlen: 24
                          209.56.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:7c:82:9a:a8:9f:82:1f:af:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5aa9085b-e03c-4100-b991-5462758d97cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:dd:55:c9:d3:7c:5a:44:d5:49:92:df:38:
                    36:5b:2f:28:3e:23:3c:06:77:b5:d2:ee:f9:4c:5a:
                    ec:09:4d:c1:61:67:f3:f0:f9:37:37:c5:a9:d0:c7:
                    36:3b:bc:b2:ce:f0:6e:62:99:c3:5f:1e:62:28:92:
                    a3:a2:0b:17:d1:ba:6c:fe:e1:f8:99:eb:5f:ce:75:
                    19:a5:39:23:7a:f0:85:97:c3:5e:4d:d0:0e:f9:13:
                    32:8c:35:b5:5d:0d:60:ab:7a:d0:d6:ed:0a:a6:21:
                    e3:93:59:0b:a0:1f:78:4b:00:35:78:ef:33:0b:59:
                    19:be:01:1c:09:6a:e7:fa:af:5b:0c:57:ac:66:93:
                    35:15:1b:15:55:0f:d3:ca:db:3b:20:d0:7b:34:cd:
                    e4:91:2a:bf:9d:55:bb:46:40:8d:58:86:cc:0a:c4:
                    75:cd:65:ec:7d:cc:89:27:d9:da:f7:a2:24:32:63:
                    67:30:9b:bc:a9:29:63:d4:2b:26:b6:1d:07:d9:78:
                    04:cb:5e:e2:57:b1:0c:04:ef:c3:c4:a6:9a:10:e0:
                    ea:d6:76:bb:bd:c5:4b:02:c4:c2:59:b1:a5:95:94:
                    2a:f8:57:b3:c0:f5:14:e6:1c:c3:ab:78:9a:2e:52:
                    1a:5a:d3:a0:4d:12:64:33:4f:0d:9a:50:c1:09:e5:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:4D:6F:62:8B:39:84:45:77:6A:9C:EE:E2:A7:A8:00:CF:97:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl

            X509v3 Authority Key Identifier:
                keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.206.0.0/16
                  207.28.0.0/16
                  207.165.0.0/16
                  209.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:e2:7b:7d:4a:66:e8:2b:17:a0:f4:f9:33:c8:a7:7c:f2:
         30:03:5f:cc:64:bd:da:ec:ac:96:2e:9b:4d:d0:d4:12:06:8e:
         74:1b:90:93:0f:04:9a:79:2e:de:1f:30:ac:51:f0:ce:19:dc:
         94:2f:49:c3:57:b4:7b:fd:e8:c8:c8:92:2c:00:4a:75:c8:a6:
         e9:c1:e6:29:5d:49:84:f6:5f:69:b2:19:06:c1:6d:1a:29:bc:
         cd:19:65:79:c5:f0:0b:f3:91:86:60:a2:ad:cc:4a:69:01:3b:
         6a:6e:f1:44:1c:2d:f0:e4:b9:46:31:da:54:d7:ba:a5:23:eb:
         de:81:5b:14:9c:8e:c2:3b:f8:2d:4b:02:61:77:b7:a1:e7:98:
         20:bb:9b:ac:67:2d:8f:e3:08:39:a3:96:3d:8c:6a:a5:bf:b2:
         b0:0b:50:3e:bd:7c:9f:6c:fd:e1:e7:9e:c7:a5:8b:60:e2:c1:
         34:e5:1a:d8:d0:43:2b:d6:dd:03:0e:02:c4:20:73:c3:c7:31:
         e3:c0:87:7a:81:c9:4b:2d:d3:ee:d5:4b:1f:47:e0:e2:a8:dc:
         c6:16:54:64:72:4b:09:4b:1e:d2:57:97:5e:81:82:fc:8e:32:
         f4:12:c7:f5:6c:1f:2f:92:c1:1b:cc:3e:4d:40:8c:5d:c8:9d:
         ec:1f:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:22:22 2026 by rpki-client