Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa
File:                     538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa (raw, json)
Hash identifier:          6lJEdn4/vTK39dHzRUQmsEX/qSoizs/Jqmi1sGma4Pk=
Subject key identifier:   E1:2A:E6:20:E2:80:B6:C9:6E:39:1A:FB:49:A9:D2:6E:FB:51:17:44
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA79EABC8759B90B3AC526E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        173.194.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:ab:c8:75:9b:90:b3:ac:52:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d127b1a3-72bd-4f0e-be89-c76f1d4efa3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:98:74:07:34:e0:44:da:39:8a:79:ec:36:
                    69:f8:c8:8e:68:27:8a:c4:30:b1:b9:e6:6d:34:a4:
                    1d:e8:fd:52:bf:41:e2:17:8d:fe:e8:27:13:ef:0e:
                    5c:f8:e7:71:02:7c:0e:65:f3:40:39:54:56:07:9c:
                    dc:07:70:70:67:ca:d7:60:ed:d1:37:6e:6d:ee:fb:
                    ca:0b:fa:4e:e9:cc:70:ce:89:28:47:84:a7:5e:ff:
                    45:79:9a:d8:c5:88:28:c9:a4:b5:bd:86:ff:07:68:
                    18:40:97:f7:3a:95:1f:5d:1a:98:4a:66:66:d0:44:
                    23:ff:9a:89:81:e8:34:68:39:d3:42:32:3e:11:85:
                    6e:48:a4:b1:4d:55:4b:4a:1c:22:32:02:29:80:06:
                    7d:13:8a:e2:00:3a:20:33:13:a6:4f:ff:f5:84:29:
                    7a:91:ff:9f:41:70:b4:95:59:9d:f1:92:6a:e4:a0:
                    a2:11:8a:4f:d0:4f:07:b1:0d:51:4b:21:00:4d:53:
                    a3:e8:1f:34:5e:d3:07:a5:94:9f:6e:e2:3c:37:3d:
                    46:db:58:85:6b:0d:c3:db:6f:63:c8:93:5d:be:1d:
                    48:57:d4:8b:55:fc:2e:20:82:65:83:c4:42:57:da:
                    16:ac:f7:e8:2d:6f:66:a1:83:22:97:63:ba:33:72:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2A:E6:20:E2:80:B6:C9:6E:39:1A:FB:49:A9:D2:6E:FB:51:17:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:d5:b8:41:df:b7:b6:e9:2a:29:ef:e6:51:db:18:b4:11:93:
         ea:8c:e3:7b:cd:b7:bd:00:06:0f:bc:e1:01:15:9f:4f:c1:4b:
         63:99:db:16:1c:b0:11:41:bf:85:eb:98:b5:8b:4d:b2:8d:5f:
         12:2c:a4:4c:c0:a5:55:60:2d:b6:eb:17:b8:42:56:f3:c7:0b:
         e1:05:49:95:b5:79:02:75:3e:43:39:a8:b8:ed:05:17:cb:c4:
         2b:3f:f5:78:48:e4:5d:40:e3:44:51:a7:85:4a:e0:7e:79:7a:
         18:72:f2:81:03:c6:b6:02:61:6b:ff:1b:58:44:ce:98:ee:e2:
         7d:3a:79:28:5b:90:4d:c6:b1:0d:71:d8:4d:d6:6c:a2:18:fd:
         d2:47:7a:25:ac:a4:03:90:dd:b5:7e:a1:fb:ae:f6:6a:c3:d0:
         81:24:7d:ce:44:d1:a2:c8:76:44:e7:bb:91:71:00:47:01:dc:
         71:4a:93:8b:b2:81:fa:7d:4b:6f:bf:0a:02:90:18:8e:95:6b:
         bc:dd:cc:35:9b:55:68:d6:d4:a5:d9:11:e6:25:26:47:18:9e:
         16:83:e6:4a:75:e2:24:9d:ea:f6:8f:3f:95:aa:40:2a:85:ed:
         73:bf:93:c3:35:ad:41:bc:37:7d:04:76:6d:48:bc:75:93:aa:
         20:1e:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:25 2026 by rpki-client