Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/de0c86d8-07bb-3807-9ab8-8f45a0b9aaca.roa
File:                     de0c86d8-07bb-3807-9ab8-8f45a0b9aaca.roa (raw, json)
Hash identifier:          3szo6egWz8qQyFuNSqqVYyOKfHU4O45tLb9sW6c0m00=
Subject key identifier:   E2:15:C1:3E:FE:D1:8A:E5:2A:AD:98:3C:9E:6B:5F:25:32:76:E2:EC
Certificate issuer:       /CN=79d7db1b-e77b-49b5-a68f-49ef9fbe26ee
Certificate serial:       010D0C9F4328584EA17A794402AD76612A30D980
Authority key identifier: E2:5E:D9:3A:A9:DC:FD:05:3F:77:83:A1:B0:70:9E:0E:07:91:E6:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/de0c86d8-07bb-3807-9ab8-8f45a0b9aaca.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     22995
IP address blocks:        208.81.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:79:44:02:ad:76:61:2a:30:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d7db1b-e77b-49b5-a68f-49ef9fbe26ee
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=ce013a37-4b1d-49ce-a65b-3316219ecc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:1b:8a:ba:32:bb:87:8c:38:f2:8f:6f:94:
                    b5:08:96:0f:5f:56:fe:16:78:75:ef:29:28:12:ba:
                    5b:c2:f7:fa:29:d7:fc:36:c5:e1:ae:ac:7d:83:d6:
                    1a:5f:6e:02:5d:fd:df:57:b2:54:13:79:fb:93:17:
                    92:f6:88:36:3c:09:f3:47:04:ba:df:73:94:bf:b2:
                    76:ad:56:e8:d2:66:49:45:ee:6c:ac:cb:47:aa:db:
                    8e:97:e6:f3:83:6e:ef:c6:a3:ea:d0:e8:a3:cb:0d:
                    6f:82:c2:80:2a:85:d2:01:df:c0:ff:bc:ea:c3:19:
                    66:b8:cc:5c:30:ac:cc:b6:9e:e2:3d:ed:8f:07:89:
                    e0:79:40:08:6d:4a:af:a1:41:1e:9a:36:5d:b8:e0:
                    01:f8:92:c2:52:d6:5d:c5:eb:bd:84:fd:4a:5f:3f:
                    71:d5:9c:8a:2a:ce:74:15:82:bb:b9:7f:43:f3:28:
                    3f:80:db:c5:1a:e7:92:33:7e:3f:17:67:1d:d7:5e:
                    f0:70:ac:17:95:49:4f:e7:b9:c7:8f:3a:45:ee:40:
                    c4:34:28:c7:fd:11:a5:ae:50:73:0a:8c:7a:3e:a3:
                    64:f3:ca:ee:96:e7:01:44:cd:da:30:66:3e:55:8b:
                    39:c0:4b:a4:d1:2c:1a:41:dc:eb:06:68:20:b1:18:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:15:C1:3E:FE:D1:8A:E5:2A:AD:98:3C:9E:6B:5F:25:32:76:E2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/de0c86d8-07bb-3807-9ab8-8f45a0b9aaca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.crl

            X509v3 Authority Key Identifier:
                keyid:E2:5E:D9:3A:A9:DC:FD:05:3F:77:83:A1:B0:70:9E:0E:07:91:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:39:5c:e2:9d:7a:ef:91:ee:35:e5:a2:2e:b8:dc:59:12:
         ec:dd:ff:08:60:5c:ca:53:27:f4:4e:d6:04:6d:01:33:ac:32:
         6b:8d:29:f0:5a:8b:7a:b0:c8:aa:85:1b:d9:a4:92:d3:81:36:
         36:32:3b:28:91:0a:0a:63:45:5a:a7:35:d4:2f:7b:4c:57:80:
         b1:cf:61:35:fe:4f:0d:9b:da:a7:fc:ff:fc:28:ad:0a:e6:d2:
         e2:1e:47:d5:11:ac:b8:38:43:a7:07:43:48:00:6d:47:88:be:
         52:a5:ae:f0:76:e3:fc:fc:f9:30:95:1e:43:13:59:bc:83:30:
         80:7c:94:45:8c:fd:de:a1:c5:f7:fc:98:e8:63:9b:3c:b4:4b:
         5b:d3:17:53:6e:04:ce:35:9f:92:9a:a4:1d:4b:50:25:6a:f7:
         b8:b5:a3:7f:85:02:4b:cc:37:e3:55:1d:f5:1e:22:b7:ad:a5:
         8f:16:61:61:63:29:05:ef:97:51:6d:78:fb:10:a9:19:e0:69:
         c7:28:30:be:28:39:29:37:a8:f3:d6:49:a9:8d:93:0a:22:07:
         c7:57:04:ec:c9:0a:78:da:96:24:95:0f:8b:42:51:e8:92:bb:
         98:56:b6:b7:19:31:06:50:f8:d3:8a:4a:f5:b4:b2:92:b8:69:
         a3:c3:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:17 2026 by rpki-client