Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c39ec1-fa88-387e-9c83-e66cb3b48e15.roa
File:                     06c39ec1-fa88-387e-9c83-e66cb3b48e15.roa (raw, json)
Hash identifier:          R3XEhsWfmL7t+84cPvDckMewzRYC4u6ja8+Hwv77KAQ=
Subject key identifier:   2E:9F:76:02:19:8F:87:9C:2A:BC:BC:43:BF:DD:CB:14:D9:1A:7B:0A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA79EAC9815378F8F11D37A20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c39ec1-fa88-387e-9c83-e66cb3b48e15.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        173.194.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:ac:98:15:37:8f:8f:11:d3:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e131d147-bf2b-477d-8ca5-e4e93182e80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a8:2e:64:9c:3a:c5:05:e2:a2:2a:bc:ff:f1:
                    7d:9a:14:30:52:b1:a1:85:e2:6a:f6:4a:53:59:f1:
                    f5:d9:21:43:f1:7d:3b:68:f4:36:a8:cd:eb:8a:e0:
                    fc:04:ab:fe:07:12:e8:1a:9d:39:d9:7f:bc:ec:a4:
                    c8:79:33:eb:71:db:d7:73:a2:9c:f5:7a:de:eb:7d:
                    0d:6f:47:b1:c9:77:ba:16:f7:ad:60:5e:8e:86:6f:
                    0f:e4:28:de:95:17:41:2d:52:45:91:a0:aa:3b:9a:
                    bf:6d:2b:4f:64:a6:28:e4:d7:52:ec:a0:e6:75:8e:
                    a6:68:ed:35:dc:81:e2:aa:42:8a:33:83:7a:0f:bb:
                    2f:e4:a1:5d:c8:2b:16:76:34:08:47:8d:14:c3:06:
                    82:d7:3c:f8:52:0f:8c:51:9c:2a:9a:4c:9a:b2:03:
                    41:74:ce:9d:e4:dc:8b:6a:b6:db:be:17:8f:c3:ce:
                    8d:ea:23:f2:50:cc:65:b7:59:d7:64:52:33:08:82:
                    3d:65:c6:69:a3:d7:d4:6a:df:13:e1:6d:33:24:0a:
                    da:6f:6e:a6:c9:97:7e:7e:cb:2d:ed:a9:ec:e1:2a:
                    9b:e3:72:58:9c:16:44:99:8d:2a:92:c9:8f:75:f4:
                    62:ff:cc:7b:17:cf:95:96:12:c1:7f:ec:3d:dd:76:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9F:76:02:19:8F:87:9C:2A:BC:BC:43:BF:DD:CB:14:D9:1A:7B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c39ec1-fa88-387e-9c83-e66cb3b48e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:c2:54:1b:f3:cd:27:bc:e9:68:79:5f:ce:24:d9:4f:5f:
         33:1c:b7:30:f3:90:74:ee:18:81:aa:eb:d8:70:65:5c:32:e5:
         0b:53:f3:96:17:40:9d:ca:80:e7:64:8b:aa:d2:4e:8c:c4:3c:
         30:df:dd:ef:bc:94:75:a2:eb:37:83:07:f3:2a:04:57:73:40:
         da:fe:cd:7e:ca:4a:06:86:0f:22:d0:bb:e0:d8:7b:b3:b6:59:
         c9:28:a3:a2:5a:d7:01:90:f3:70:77:54:41:5d:ad:de:37:86:
         f1:0b:94:4b:17:68:6e:7b:90:0c:4f:c5:77:c4:7c:0f:66:13:
         c9:fd:e3:df:68:10:48:15:94:d5:02:05:08:94:79:59:0c:95:
         ad:42:2d:b6:0c:a8:9b:a4:b9:b3:2f:3f:e0:fe:65:d5:a2:23:
         b1:3f:b6:72:b7:36:92:b8:f0:73:a9:ba:1d:81:ab:10:9a:cd:
         98:21:56:40:64:b0:28:ff:2a:96:6a:5f:c7:6a:c9:b5:a9:09:
         48:a9:04:5c:cf:4f:55:7a:a7:48:e5:c8:cd:69:40:9f:b5:fe:
         cc:38:4e:cd:51:82:9a:e4:ec:a7:de:2b:a0:06:6c:78:4b:b4:
         24:da:6c:02:29:f1:59:01:63:b4:88:78:7b:07:41:bc:70:aa:
         b9:ed:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:15:14 2026 by rpki-client